last executing test programs: 4.496414197s ago: executing program 2 (id=4363): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x827f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xf1, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5}, 0x200, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f0000000040)=r4, 0x17) socket$kcm(0x2, 0x3, 0x106) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4", 0x25}, {&(0x7f0000000480)="2c64e36df11764f28e87161c1c", 0xd}], 0x2}, 0x2400800c) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000006c0)}, 0x10c040, 0xac5d, 0x5, 0x3}, 0x0, 0xffffffffffffffff, r5, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14040, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x56, 0x7fffffffffffffff}, 0x4002, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000600)={0x0, 0x80, 0x4, 0x7, 0x73, 0x0, 0x0, 0x6, 0x12000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x10010, 0x36de65a9, 0x5, 0x7, 0x624, 0x0, 0x5, 0x0, 0x2, 0x0, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0, 0x97ff}, {&(0x7f0000001b80)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa", 0x1a}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 4.041131856s ago: executing program 4 (id=4366): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (rerun: 64) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r1, 0x4, r2}, 0x10) (async, rerun: 64) r4 = socket$kcm(0x21, 0x2, 0x2) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="c554ab0000000004"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r6}, 0x94) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000040)="cfdf855b2342d1be075aab45c93b3cb44b3cbdccacfa87ee154fb36c87cbe99e20ca4d3dabad995624df302041221902028ccfc5f5f11869a8e6dae0e4dc1d6ade8b9e", 0x43}, {&(0x7f00000000c0)="574acadc3405b12b9237dae3fcf0b8e66be6bbf494473caa68abf51ed4c0dbb7302e4daedc7a77e799", 0x29}, {&(0x7f0000000200)="b9d74e80efa2f775033819a5defb65a7e44ee2b508dd60aeef40a1fdc3ed67bf42d725349bc85f1adf0c6625c40b07067239537458d7e58d1b502f35e62262cbef18dcdd01db992454d1c3300ddb85619912500f2945728682dc2e34580a6f15f67c487c434fc40656b99c3b1892bf1745b107299565c277b3300f2a359628ca05388d08399a82ce0d8dc532d7e7c5eb5723cb1830355fc682972e658a850af4f32413916187b8bbc4baacb93db1fafc99d6f4634888ef27f893868813566c325c5e061416be2080db8e598824961e23081978ab19566ed9e0985539fd32394a5418cc9d93", 0xe5}, {&(0x7f0000000300)="6fa6e3440b55e4c0a86f9c544a5ec8b87ae401272f6b7e212a1eac1ec64db67d6f8b62fc6bbd006bbcf1f10eb2710bb629132a0611d88d2081d50a288093b7c348882c8878871c0eb9ddd4adbbc75b1e903fe5473faf581e0d424df29828d783a1197ac04e004d10f371a8d0d5036f53256e8ccce7ff02bb2e941e6f72fa4ca13ed0d6e810ed3d20ea6971beaf200503e5922e72", 0x94}, {&(0x7f00000003c0)="ce9489efee5d01d089366efbc456861b9b8abb8f70703356e119bdbb4edc89", 0x1f}, {&(0x7f0000000540)="9fcc2514e1c48d57d296a5d642e8716ba5968f503ae8c193684a8d70a0f27984f79f8797f369063f00d3606903b300e76a6a531c933a5ba5f7dd7106a39e9431e09f52fdcb1cda4104cbdb7ccc12bea5785b9e5c9ab73fd939e11ff8", 0x5c}, {&(0x7f0000000600)="13", 0x1}, {&(0x7f00000006c0)="06e741f29873cc79738b3f146ac74ca6e709104a274cd2a93be2dfce9ad577ad80f80f9d0c860f3ae4104cb8f37df8b19208e8fd48c6428febd965a4e2e6b8510ab46699914c0957abb2dceec82961eafb3108aef56a8668476a8606efb04657deedb321d9de14403f7a2fa3621f2fb8372b8b2035ec5a6a1d374f2b08f792cdb8387572a4ed9f6248e96b2ab558cc8ef6b7fcf9d0885d919e716f6a556087c005e2b80abc2515557cfa86f21ed1f3532b7880b9b3ac3387a60eab8ac3413283912a65ebe204956b0876f738d3131d9153e8a85dfc60e535387eec47ed7aab3ab845bc6391bf", 0xe6}, {&(0x7f00000007c0)="92ac3ebf14a41214889cc60e9e5c2f37d368f319b97156f84b8b07c0cbd863473f61156cd16145a3f7d94fa5097e82a387b5462543556d28bc1339cabb0496f1c40e684722f186665dccbd59d4e12dca24f694f7a2d616bed456db96719dc630045326f3e234c8447c5c376e94bc5c7d193fa8d6c82c1c1990507720efb727a617406f16ddee6642475e72d1f9e41826d2a9a2950d3efe4cc11b7a7e37bce3a08c3313818f132d5874c8e6e2d744807b06a4ba063ebaea469584220db24cebe9710815409848f82baa78485af60ed6e9e5441363bfc36dd723180850a616", 0xde}], 0x9, &(0x7f0000000a40)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x70}, 0x14) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x10, 0x0, &(0x7f0000000500)="f0b9547ee7affa9daabd309a75ccb56c", 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x1d, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="18000000020000000000000000000000850000007b00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800004fb70300007a570000850000001600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.84997443s ago: executing program 4 (id=4367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xf}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400d0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 3.473200208s ago: executing program 4 (id=4368): recvmsg$unix(0xffffffffffffffff, 0x0, 0x10001) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x18, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="9f52d7ec1b0fa329d70ce7be8ccf3a277f7817b4bdd2818fd2abd981a7911707683e0a174ef2799383724c95e62985c3df7f7e26d07014dc9832ac2fa6e370d41eeb5e59", @ANYBLOB="22486aa7f1d4b394a6d1c60cc5c3074181a1d075a5e03d06616cd3b028ca4709b2f635d76d89ff8600635cef96acfa7b65eb5d5408e12afd63e7887b933e893f538b01792f46ef3442f8b61bdf322a9c7cb1aec66b1f3cfd2a4277af85a16bd9f4c6744db7ec4c5c073ccf08cf5864940f8cc2cf5162d7b48235ee4df27dc24997ada06cccde8b30be993b9b078683918993", @ANYRESHEX=0x0, @ANYBLOB="b2b352d68e6cee3c3eed7b74956dcb4131474030b5"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000300000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xfca2, &(0x7f00000003c0)=[{&(0x7f0000000340)="e03f030039000b03d25a806c8c6394f90324fc60100000013856f71ab0bf291c75c3000a02f377e3428200e9309d025ce7b5807228baacd430fc222f32d3eb1ed256241a49cafc9a76d41bd8324d43a5f219b0e3e3ade8070604a1ef4539465b1eff26fd88f401df35c7850000000000000000000000008bdb", 0x33fe0}, {&(0x7f0000000400)="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"}], 0x1}, 0x100408c4) 3.407592169s ago: executing program 2 (id=4370): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r1, r0}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @volatile, @func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x65}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095", @ANYRES64=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009500", @ANYRES32, @ANYBLOB="0000000000000000185000000000000020000000000000001840"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940)={0x0, 0xfffffffc}, 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x12cd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000002e00)={&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002980)=[{&(0x7f0000000640)="4c407c994f45c92e7cd45c3dda512348fd8ef9e0890cd2aa955040eda121e27dd44410fee4cbe5b89b5d6be527751a0dce3f3b2226bfec2e43017482c4a452748292afba90293bca242f32a2c90aeaf9bebde2669ee68066843c71d0de87dceafc499e4abd2725a5322d77ee3c5b0a3d662e648fdaaec19daa7b6022b7e7c99cbde940a9e941dfa779fc51e718b577969602d6c69ec403632256855af78085c3ac42929d5c27e62c278fd5e18f3d8df809586a9c00ba34598dfb6a0cc65dd3d265bd1a6018a96bfae2261486a112e18fc61939", 0xd3}, {&(0x7f00000007c0)="ae1b2e1882c144db4fcb08028e3430a5cec0367d38adeb09f9fc0fdaeb415218f06eb66a6a715dde6fb9bd0e3cb6ca3a3c517ddf", 0x34}, {&(0x7f0000000800)="1364a651da8c625c64b519af9c63dd9f628afb99dc223e534c4fa48afc385ab3ce707469fccdc39c3418928be4276dd786048c6e692d852116625954e06219113ea8f65a6372e388b0f27e0f3252a7bfc7656e8291411e95", 0x58}, {&(0x7f0000000880)="77a38d65e154157d672b4f17159a269915c7ff4e20c8a73d2eba8b013212644df5d86a486bdb21dfa1f2e124cc42393119181228aa94632cf9fde4a149a3df028be7c9afed721030f5d1d485a708336374f1f716f998db6799c938b43e078fda9c37647117df1b44cef02ee93fdb42ca76391c1e610bd34d2bdc4d3b0d531e6434aa6b6a49e5939f586beb7d480798eb96a8dfd16dc251fd73d8b62663f4b01d", 0xa0}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f00000028c0)="17e6dd188e2825e01d0d2f80b60c9ff83afc522d5344d961775f8913fe2516fa37f7166c2f9f26897ccfe00af08ba8e6ce00818cf479e6867b702ceecdf5c5822d4a0316f1a282451120e16a7655188a708ea0abe1754e70ac8becdc2f76d90ec72fcc2e3e9c27483946ada6431280ff47da430d64b2c5596af3712325186b063e9b8624ffabb7e197", 0x89}], 0x6, &(0x7f0000002d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x68}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7, 0x734be892, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0xf}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x297f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x20, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x28) recvmsg$unix(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/18, 0x12}, {&(0x7f0000000500)=""/57, 0x39}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3, &(0x7f0000003740)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x2) socket$kcm(0x11, 0x20000000000000a, 0x300) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 3.306488052s ago: executing program 1 (id=4372): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8903, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x4, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, 0x0, 0x0, 0xffffffffffffffff, 0xcefc4a3688c1dcb4) perf_event_open(&(0x7f0000000480)={0x1, 0x79, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0x9}, 0x108, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x2404c8c5) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004cc1) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="c85c54e42d8cc96d1bc7a857f0ca914c347f306545a0d5f1a5e95c197a57620f0b3e9b97c5617c167d1e2a274cc0ef7bbe886dfed678e458"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x3c, &(0x7f0000000000)='k', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r2) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0xa4a5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x37c, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) 3.184021234s ago: executing program 3 (id=4374): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x4, 0x53, 0x5, 0x0, 0x0, 0x90, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0xfffffffffffffff9, 0x4, 0x8, 0xffffffffffffda84, 0xffffbff8, 0x6, 0x0, 0xc, 0x0, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f00000008c0)="b807205a802705b68713e580cf36", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1400000018000000", @ANYRES32, @ANYBLOB="db0d5c00ef54f3b3047818edd19e700a57acac96dc1a69c35ef7e55732cd0e40f85d4f4a136db912af83ded6e5ab70642342dcd6", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000100)=r7, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003640)={r7, &(0x7f0000000200)="ac18bcc82179091d2e8bc387d7cc9ff10f68bdd5deb85738f786e9ef3a759844d4bf35a72e7db7e834f4fe5a21745d10c7675401300db40e4ca73f54428335da071a5fa8b5a65a9937fc5cc2bd7e6950c870d24cf12a13f18446c0f0c33eda77eeeb090e9f3dc5c591442c5acea9a7a2e868ef9ddbcade423492cdc5fbac22c36f911bfa876c2d5ca3ec454163a44936ff86619868853a158007c902f97f936e31d69447d220208264425467ec09626d", &(0x7f0000002640)=""/4096}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r7, 0x0, 0x13, &(0x7f0000000340)='memory.swap.events\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r8}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r5, r3, 0x1c, 0x24, 0x0, @void, @void, @void, @value=r8}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x408083, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'erspan0\x00', 0x600}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000851000000200000085000000760000009500000000000000950000112beb7da63360c5c5698560170000000000"], &(0x7f0000001340)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0xa}, 0x94) 2.192434745s ago: executing program 1 (id=4377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.157620825s ago: executing program 0 (id=4378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xf}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400d0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 2.114871276s ago: executing program 4 (id=4379): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000040) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x65, 0x0, 0x0) 2.114015866s ago: executing program 2 (id=4380): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x827f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xf1, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5}, 0x200, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f0000000040)=r4, 0x17) socket$kcm(0x2, 0x3, 0x106) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4", 0x25}, {&(0x7f0000000480)="2c64e36df11764f28e87161c1c", 0xd}], 0x2}, 0x2400800c) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000006c0)}, 0x10c040, 0xac5d, 0x5, 0x3}, 0x0, 0xffffffffffffffff, r5, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14040, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x56, 0x7fffffffffffffff}, 0x4002, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000600)={0x0, 0x80, 0x4, 0x7, 0x73, 0x0, 0x0, 0x6, 0x12000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x10010, 0x36de65a9, 0x5, 0x7, 0x624, 0x0, 0x5, 0x0, 0x2, 0x0, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0, 0x97ff}, {&(0x7f0000001b80)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa", 0x1a}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 2.018700418s ago: executing program 3 (id=4381): socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x3, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0xff, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x8, r1}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_clone(0x8204532f6c33970c, &(0x7f0000000400)="96f746acddeddfa8edfd20c51a37b4a20e88160466579b2a6f71f7e7cf25b0cb2ad607162457b24a23416ad9b953bf71f52955ed1602ce948848b94faad902131484bdf6", 0x44, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000680)="7000b9f82001422d8b916fec747811f01556c2561ec4db9110b9519f6f63aa1d23648d634c7fce9b1bd0d80342379e1786e4e3465081a7b441892b9c410b9f840d6b85781b93dfd1642e7bb467f0f4d286aad28bfb82dac2159d33da61ff14d4ad68c797505be27f88656a3373aa7affd46a40e143f0f4d98150f7e7a468571fb664833aab8d3cf5db53907f8bdb8d006cfbba1d5ace9d0ab5bac7291af7ee") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e010000000000000000000000000000000080003d1181f939819be84728a07325411234d172a7a2e3e513baeb625b5314e9f77f8948557f23121d6f126cd74eed042b3a4e27282dc788ead569dc5575c6721199362f6ce213c162ebe225dffab2e26e758a49fe7c6335ce4b7368b784f29b1ace1cb68acf40e670520a9a34b790f8d4f3f73880ad3098427f17217ec30f680404262345a9f0e76da46f17912c7acd868e980f24c5e633b6b78e12562cae3429ff40e4406907cb360604a9e8ce5604dd90912b6dfdcd91acf9b7f48074529215517b7eb87e608a8131158a1e0e71a35f784e680e24e729bb5b9fde732c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0100000005000000020000000700"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000a85d54"], 0x48) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, r2, 0x0, 0x2, 0x2}, 0x50) close(r4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) 2.003807659s ago: executing program 1 (id=4382): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008090) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.854054782s ago: executing program 0 (id=4383): perf_event_open(&(0x7f0000000080)={0x2, 0x11, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x1}, 0x9, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) 1.681986105s ago: executing program 0 (id=4384): perf_event_open(&(0x7f0000000080)={0x2, 0x11, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x1}, 0x9, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c0000", 0x17}], 0x1}, 0x0) 1.510147889s ago: executing program 0 (id=4385): socket$kcm(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a8", 0x0, 0x10004, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), 0x0}, 0x20) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x10003) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/73}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x4, 0x900, 0x4, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r8}, 0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=""/180, 0x10d, 0xb4, 0x1, 0x7ff, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x17c3ae71d32f98e9, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESOCT=r6, @ANYRES64=r6, @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r9], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r12, &(0x7f0000000180), 0x13bb711e) recvmsg(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000380)=""/34, 0x22}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/203, 0xcb}, 0x0) 1.095057087s ago: executing program 4 (id=4386): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x10c7df}, 0x0, 0xffffffffffffffff, r3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x10020) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x2}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r0, 0x58, &(0x7f0000000640)}, 0x10) 998.815599ms ago: executing program 3 (id=4387): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x5a60, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 985.376849ms ago: executing program 1 (id=4388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x30) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000001480)=ANY=[], 0xc54c295c) 969.48442ms ago: executing program 2 (id=4389): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000040000008500000005000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b703000005000000850000007b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x6}, 0x1080, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x64, 0x20}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x4, @perf_config_ext={0x8000, 0x1}, 0x4012, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x15, 0x21, &(0x7f0000002400)=ANY=[], 0x0, 0x5, 0xbf, &(0x7f0000001300)=""/191, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000026c0)={0x3, 0xc, 0x80000001, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x6, 0x14, &(0x7f0000002500)=ANY=[@ANYBLOB, @ANYRES8=r5, @ANYBLOB="731f010c351845bbe43247a2ff996f6b9deaa178e297a162dad5bb65b491afdd5267fcac5bf27bab57ad8cb7e4a855353b480d1b2604fdbaa85712d0ef0b32f474f9d1b311c6d47d28e8a9433c5c605fed0e03eb69cc88aa9021caa33c09ba"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, 0x0}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b15c84e21008bf32c19020000f80200000044000200edb556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) unlink(&(0x7f0000001400)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 926.247541ms ago: executing program 4 (id=4390): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x2, 0x6, 0xcd, 0x7, 0x0, 0x8, 0x100, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x1000, 0x2}, 0x408, 0x0, 0x3, 0x4, 0x2, 0x400, 0xcc1, 0x0, 0x1}, r1, 0xf, r0, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfca2, &(0x7f00000003c0)=[{&(0x7f0000000340)="e03f030039000b03d25a806c8c6394f90324fc60100000013856f71ab0bf291c75c3000a02f377e3428200e9309d025ce7b5807228baacd430fc222f32d3eb1ed256241a49cafc9a76d41bd8324d43a5f219b0e3e3ade8070604a1ef4539465b1eff26fd88f401df35c7850000000000000000000000008bdb", 0x33fe0}, {&(0x7f0000000400)="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"}], 0x1}, 0x100408c4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r3, 0x26}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xfffffffffffffd8a, 0xfffffffffffffe2a, &(0x7f0000000200)='>', 0x0, 0x4064, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) gettid() r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) 790.884823ms ago: executing program 3 (id=4391): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3c, 0x0, 0x0) 668.306756ms ago: executing program 1 (id=4392): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 609.033817ms ago: executing program 2 (id=4393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xf}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400d0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 479.10202ms ago: executing program 0 (id=4394): perf_event_open(&(0x7f0000000080)={0x2, 0x11, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x1}, 0x9, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) 477.89443ms ago: executing program 3 (id=4395): perf_event_open(&(0x7f0000000080)={0x2, 0x11, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x1}, 0x9, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c0000", 0x17}], 0x1}, 0x0) 430.610191ms ago: executing program 1 (id=4396): r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x11000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x0, 0x998}, 0x10220, 0x1, 0xc2ba, 0x1, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe93, 0x80fffffffd}, 0x0, 0x4, 0x1, 0x3, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x8, 0xf9, 0xb6, 0x0, 0x8, 0x400, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xadc3, 0x72}, 0x804, 0x1000, 0x0, 0x0, 0x11, 0x8, 0x6, 0x0, 0xf8fa, 0x0, 0x4}, 0xffffffffffffffff, 0xf, r0, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8902, &(0x7f0000000080)) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)}], 0x1}, 0x1001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc9, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffa43, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x4}, 0x105014, 0x100000000, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@timestamping={{0x18, 0x1, 0x25, 0x3}}], 0x18}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8010, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) perf_event_open(&(0x7f0000000080)={0x2, 0xffffffffffffff53, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x800, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x51b80, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x81}, 0x802, 0x1, 0x5, 0x1, 0x3, 0x8, 0x6, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, 0x0) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 368.601342ms ago: executing program 2 (id=4397): socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x3, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0xff, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x8, r1}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_clone(0x8204532f6c33970c, &(0x7f0000000400)="96f746acddeddfa8edfd20c51a37b4a20e88160466579b2a6f71f7e7cf25b0cb2ad607162457b24a23416ad9b953bf71f52955ed1602ce948848b94faad902131484bdf6", 0x44, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000680)="7000b9f82001422d8b916fec747811f01556c2561ec4db9110b9519f6f63aa1d23648d634c7fce9b1bd0d80342379e1786e4e3465081a7b441892b9c410b9f840d6b85781b93dfd1642e7bb467f0f4d286aad28bfb82dac2159d33da61ff14d4ad68c797505be27f88656a3373aa7affd46a40e143f0f4d98150f7e7a468571fb664833aab8d3cf5db53907f8bdb8d006cfbba1d5ace9d0ab5bac7291af7ee") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a400fe0000000071302000000000001d400500000000004704000001ed00000f140000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e010000000000000000000000000000000080003d1181f939819be84728a07325411234d172a7a2e3e513baeb625b5314e9f77f8948557f23121d6f126cd74eed042b3a4e27282dc788ead569dc5575c6721199362f6ce213c162ebe225dffab2e26e758a49fe7c6335ce4b7368b784f29b1ace1cb68acf40e670520a9a34b790f8d4f3f73880ad3098427f17217ec30f680404262345a9f0e76da46f17912c7acd868e980f24c5e633b6b78e12562cae3429ff40e4406907cb360604a9e8ce5604dd90912b6dfdcd91acf9b7f48074529215517b7eb87e608a8131158a1e0e71a35f784e680e24e729bb5b9fde732c", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0100000005000000020000000700"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000a85d54"], 0x48) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, r2, 0x0, 0x2, 0x2}, 0x50) close(r4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) 199.811336ms ago: executing program 3 (id=4398): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008090) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=4399): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x827f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xf1, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5}, 0x200, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f0000000040)=r4, 0x17) socket$kcm(0x2, 0x3, 0x106) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4", 0x25}, {&(0x7f0000000480)="2c64e36df11764f28e87161c1c", 0xd}], 0x2}, 0x2400800c) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000006c0)}, 0x10c040, 0xac5d, 0x5, 0x3}, 0x0, 0xffffffffffffffff, r5, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14040, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x56, 0x7fffffffffffffff}, 0x4002, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000600)={0x0, 0x80, 0x4, 0x7, 0x73, 0x0, 0x0, 0x6, 0x12000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x10010, 0x36de65a9, 0x5, 0x7, 0x624, 0x0, 0x5, 0x0, 0x2, 0x0, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0, 0x97ff}, {&(0x7f0000001b80)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa", 0x1a}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) kernel console output (not intermixed with test programs): 4768] R13: 00007fbcf7026038 R14: 00007fbcf7025fa0 R15: 00007fffdc254788 [ 691.786813][T14768] [ 691.789591][T11865] wlan1: Trigger new scan to find an IBSS to join [ 695.784441][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 696.529792][T14430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.554339][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.561883][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.616274][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 696.626128][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 696.708621][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 696.734896][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 696.762520][T14430] device veth0_vlan entered promiscuous mode [ 696.834830][ T11] wlan1: Creating new IBSS network, BSSID e2:b0:8a:8d:6e:bf [ 696.849419][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 696.869556][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 696.972718][T14430] device veth1_vlan entered promiscuous mode [ 697.058956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 697.096817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 697.131464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 697.160589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 697.188359][T14430] device veth0_macvtap entered promiscuous mode [ 697.206826][T14430] device veth1_macvtap entered promiscuous mode [ 697.232764][T14430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.255539][T14430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.270424][T14430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.281989][T14430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.297158][T14430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.350530][T14430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.401110][T14430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.419553][T14430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.442517][T14430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.461587][T14430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.493691][T14430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.517476][T14430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.548980][T14430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.587815][T14430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.639083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 697.651663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 697.725617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 697.749408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 697.770123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 697.796970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 697.827614][T14430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.844407][T14430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.873571][T14430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.907712][T14430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.930808][T14812] wlan1: mtu greater than device maximum [ 698.144720][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.178163][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.214994][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 698.259731][T14827] netlink: 'syz.3.3405': attribute type 21 has an invalid length. [ 698.300771][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.309371][T14828] netlink: 'syz.4.3406': attribute type 10 has an invalid length. [ 698.324517][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.353212][T14828] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.413421][T14834] netlink: 'syz.4.3406': attribute type 3 has an invalid length. [ 698.434467][T14834] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3406'. [ 698.828593][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 699.210226][T14828] device bridge_slave_1 left promiscuous mode [ 699.216791][T14828] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.232026][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 699.677079][T14867] FAULT_INJECTION: forcing a failure. [ 699.677079][T14867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.722235][T14867] CPU: 1 PID: 14867 Comm: syz.4.3413 Not tainted syzkaller #0 [ 699.729767][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 699.739857][T14867] Call Trace: [ 699.743151][T14867] [ 699.746096][T14867] dump_stack_lvl+0x188/0x24e [ 699.750815][T14867] ? show_regs_print_info+0x12/0x12 [ 699.756041][T14867] ? load_image+0x410/0x410 [ 699.760575][T14867] ? __lock_acquire+0x7bd0/0x7bd0 [ 699.765632][T14867] should_fail_ex+0x390/0x4c0 [ 699.770335][T14867] _copy_from_user+0x2c/0x170 [ 699.775052][T14867] __copy_msghdr+0x384/0x560 [ 699.779669][T14867] ___sys_sendmsg+0x210/0x360 [ 699.784370][T14867] ? __sys_sendmsg+0x2a0/0x2a0 [ 699.789173][T14867] ? __lock_acquire+0x7bd0/0x7bd0 [ 699.794237][T14867] __se_sys_sendmsg+0x1c3/0x2b0 [ 699.799118][T14867] ? ct_nmi_exit+0x145/0x1c0 [ 699.803741][T14867] ? __x64_sys_sendmsg+0x80/0x80 [ 699.808716][T14867] ? lockdep_hardirqs_on+0x94/0x140 [ 699.813937][T14867] do_syscall_64+0x4c/0xa0 [ 699.818369][T14867] ? clear_bhb_loop+0x60/0xb0 [ 699.823058][T14867] ? clear_bhb_loop+0x60/0xb0 [ 699.827756][T14867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.833669][T14867] RIP: 0033:0x7f188dd9de59 [ 699.838101][T14867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.857744][T14867] RSP: 002b:00007f188ec52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.866180][T14867] RAX: ffffffffffffffda RBX: 00007f188e025fa0 RCX: 00007f188dd9de59 [ 699.874162][T14867] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 699.882160][T14867] RBP: 00007f188ec52090 R08: 0000000000000000 R09: 0000000000000000 [ 699.890153][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.898153][T14867] R13: 00007f188e026038 R14: 00007f188e025fa0 R15: 00007fff067d57f8 [ 699.906164][T14867] [ 700.065218][ T4302] wlan1: Creating new IBSS network, BSSID 0a:e8:7f:4d:e5:28 [ 700.611944][T14879] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3416'. [ 700.732789][T13052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 700.742827][T13052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 700.760038][T13052] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 700.769059][T13052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 700.779140][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 700.786658][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 702.380941][T14870] netlink: 'syz.4.3415': attribute type 10 has an invalid length. [ 702.391432][T14870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3415'. [ 702.400911][T14870] device team0 entered promiscuous mode [ 702.408956][T14870] device team_slave_0 entered promiscuous mode [ 702.415474][T14870] device team_slave_1 entered promiscuous mode [ 702.422656][T14870] bridge0: port 2(team0) entered blocking state [ 702.432856][T14870] bridge0: port 2(team0) entered disabled state [ 702.441851][T14870] bridge0: port 2(team0) entered blocking state [ 702.448274][T14870] bridge0: port 2(team0) entered forwarding state [ 702.461080][T14877] wlan1: mtu greater than device maximum [ 702.824324][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 703.348876][T14881] chnl_net:caif_netlink_parms(): no params data found [ 703.533323][T14915] netlink: 'syz.2.3429': attribute type 10 has an invalid length. [ 703.601028][T14915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3429'. [ 703.654459][T14915] device team0 entered promiscuous mode [ 703.660618][T14915] device team_slave_0 entered promiscuous mode [ 703.713750][T14915] device team_slave_1 entered promiscuous mode [ 703.760579][T14915] bridge0: port 3(team0) entered blocking state [ 703.779095][T14915] bridge0: port 3(team0) entered disabled state [ 703.896159][T14915] bridge0: port 3(team0) entered blocking state [ 703.904270][T14915] bridge0: port 3(team0) entered forwarding state [ 704.043278][T14881] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.051263][T14881] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.060008][T14881] device bridge_slave_0 entered promiscuous mode [ 704.299070][T14943] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3432'. [ 704.917499][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 706.044773][T14881] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.052058][T14881] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.060827][T14881] device bridge_slave_1 entered promiscuous mode [ 706.157904][T14632] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.218091][T14881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.267015][T14955] FAULT_INJECTION: forcing a failure. [ 706.267015][T14955] name failslab, interval 1, probability 0, space 0, times 0 [ 706.281252][T14881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.290234][T14955] CPU: 0 PID: 14955 Comm: syz.2.3436 Not tainted syzkaller #0 [ 706.297774][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.307832][T14955] Call Trace: [ 706.311112][T14955] [ 706.314045][T14955] dump_stack_lvl+0x188/0x24e [ 706.318734][T14955] ? show_regs_print_info+0x12/0x12 [ 706.323937][T14955] ? load_image+0x410/0x410 [ 706.328453][T14955] ? __might_sleep+0xd0/0xd0 [ 706.333045][T14955] ? __lock_acquire+0x7bd0/0x7bd0 [ 706.338090][T14955] should_fail_ex+0x390/0x4c0 [ 706.342782][T14955] should_failslab+0x5/0x20 [ 706.347291][T14955] slab_pre_alloc_hook+0x59/0x300 [ 706.352333][T14955] kmem_cache_alloc_node+0x5a/0x310 [ 706.357534][T14955] ? __alloc_skb+0xf9/0x7d0 [ 706.362050][T14955] __alloc_skb+0xf9/0x7d0 [ 706.366395][T14955] netlink_sendmsg+0x654/0xbd0 [ 706.371185][T14955] ? netlink_getsockopt+0x550/0x550 [ 706.376391][T14955] ? aa_sock_msg_perm+0x94/0x150 [ 706.381340][T14955] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 706.386629][T14955] ? security_socket_sendmsg+0x7c/0xa0 [ 706.392093][T14955] ? netlink_getsockopt+0x550/0x550 [ 706.397299][T14955] ____sys_sendmsg+0x5ed/0x9a0 [ 706.402106][T14955] ? __sys_sendmsg_sock+0x30/0x30 [ 706.407132][T14955] ? __import_iovec+0x306/0x510 [ 706.412012][T14955] ? import_iovec+0x6f/0xa0 [ 706.416525][T14955] ___sys_sendmsg+0x2a2/0x360 [ 706.421217][T14955] ? __sys_sendmsg+0x2a0/0x2a0 [ 706.426015][T14955] ? __lock_acquire+0x7bd0/0x7bd0 [ 706.431087][T14955] __se_sys_sendmsg+0x1c3/0x2b0 [ 706.435951][T14955] ? __x64_sys_sendmsg+0x80/0x80 [ 706.440917][T14955] ? lockdep_hardirqs_on+0x94/0x140 [ 706.446132][T14955] do_syscall_64+0x4c/0xa0 [ 706.450573][T14955] ? clear_bhb_loop+0x60/0xb0 [ 706.455273][T14955] ? clear_bhb_loop+0x60/0xb0 [ 706.459980][T14955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.465888][T14955] RIP: 0033:0x7fbcf6d9de59 [ 706.470309][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.490009][T14955] RSP: 002b:00007fbcf7bda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.498429][T14955] RAX: ffffffffffffffda RBX: 00007fbcf7025fa0 RCX: 00007fbcf6d9de59 [ 706.506400][T14955] RDX: 0000000000004000 RSI: 0000200000000940 RDI: 0000000000000005 [ 706.514383][T14955] RBP: 00007fbcf7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 706.522357][T14955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.530326][T14955] R13: 00007fbcf7026038 R14: 00007fbcf7025fa0 R15: 00007fffdc254788 [ 706.538324][T14955] [ 706.555082][T14958] netlink: 'syz.4.3437': attribute type 29 has an invalid length. [ 706.569431][T14881] team0: Port device team_slave_0 added [ 706.866815][T14632] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.898154][T14958] netlink: 'syz.4.3437': attribute type 29 has an invalid length. [ 706.926566][T14957] netlink: 'syz.4.3437': attribute type 29 has an invalid length. [ 706.947958][T14881] team0: Port device team_slave_1 added [ 706.963511][T14961] netlink: 'syz.4.3437': attribute type 29 has an invalid length. [ 706.984334][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 706.991531][T14632] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.043706][T14881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.094635][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.146974][T14881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.782842][T14632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.838183][T14881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.851498][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.878795][T14881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.890988][T14973] netlink: 'syz.3.3442': attribute type 10 has an invalid length. [ 707.914949][T14973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3442'. [ 707.925651][T14973] device team0 entered promiscuous mode [ 707.931448][T14973] device team_slave_0 entered promiscuous mode [ 707.939016][T14973] device team_slave_1 entered promiscuous mode [ 707.961782][T14973] bridge0: port 3(team0) entered blocking state [ 707.980835][T14973] bridge0: port 3(team0) entered disabled state [ 708.047579][T14973] bridge0: port 3(team0) entered blocking state [ 708.054536][T14973] bridge0: port 3(team0) entered forwarding state [ 708.242196][T14881] device hsr_slave_0 entered promiscuous mode [ 708.254627][T14881] device hsr_slave_1 entered promiscuous mode [ 708.264450][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 708.271689][ T4285] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 709.064383][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 712.706440][T14995] netlink: 'syz.3.3448': attribute type 25 has an invalid length. [ 712.731982][T15000] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 712.746676][T15010] netlink: 'syz.1.3454': attribute type 21 has an invalid length. [ 712.756621][T15010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3454'. [ 712.990504][T14632] device 0 left promiscuous mode [ 713.356784][T15039] netlink: 'syz.4.3464': attribute type 10 has an invalid length. [ 714.039015][ T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 714.414178][T15073] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 714.485076][T15066] netlink: 'syz.4.3470': attribute type 25 has an invalid length. [ 714.824587][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 714.941722][T14881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 714.967801][T15084] netlink: 'syz.4.3476': attribute type 25 has an invalid length. [ 716.574282][T15087] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 716.583945][T15089] netlink: 'syz.3.3477': attribute type 2 has an invalid length. [ 716.601399][T15089] netlink: 'syz.3.3477': attribute type 8 has an invalid length. [ 716.609248][T15089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3477'. [ 716.684479][T14881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 716.704701][T14881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 716.868603][T15092] netlink: 'syz.2.3487': attribute type 25 has an invalid length. [ 716.932449][T14881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 717.758470][T15100] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 717.785655][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 718.053617][T15125] netlink: 'syz.3.3482': attribute type 3 has an invalid length. [ 718.107047][T15125] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3482'. [ 718.125856][T14881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.126426][T15128] netlink: 'syz.3.3482': attribute type 2 has an invalid length. [ 718.148980][T15128] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 718.159554][T15128] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3482'. [ 718.229011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 718.247321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 718.382639][T14881] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.407981][T15139] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3489'. [ 718.532122][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 718.546213][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 718.555439][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.562608][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.581665][T15132] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3489'. [ 718.644494][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 718.652732][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 718.683647][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.694169][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.701439][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.747988][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 718.757152][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 718.777012][T14632] device hsr_slave_0 left promiscuous mode [ 718.783756][T14632] device hsr_slave_1 left promiscuous mode [ 718.791459][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.802945][T14632] device bridge_slave_0 left promiscuous mode [ 718.817341][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.160117][T14632] device veth0_macvtap left promiscuous mode [ 719.174061][T14632] device veth1_vlan left promiscuous mode [ 719.180886][T14632] device veth0_vlan left promiscuous mode [ 719.784947][ T9] wlan1: Trigger new scan to find an IBSS to join [ 719.960188][T14632] team0 (unregistering): Port device team_slave_1 removed [ 719.975862][T15171] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3500'. [ 720.015296][T14632] team0 (unregistering): Port device team_slave_0 removed [ 720.054470][T14632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.336747][T14632] bond0 (unregistering): (slave team0): Releasing backup interface [ 720.368912][T14632] bond0 (unregistering): Released all slaves [ 720.827338][T11865] wlan1: Trigger new scan to find an IBSS to join [ 721.725956][ T9] wlan1: Creating new IBSS network, BSSID 0e:67:b9:41:e6:ec [ 721.965417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 721.978956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 721.987867][T15153] netlink: 'syz.2.3494': attribute type 25 has an invalid length. [ 721.997759][T15150] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 722.042214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 722.052992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 722.072237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 722.091324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 722.126546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 722.187891][T14881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 722.232757][T14881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 722.295718][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 722.324739][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 722.536660][T15187] netlink: 'syz.4.3506': attribute type 3 has an invalid length. [ 722.582024][T15187] netlink: 'syz.4.3506': attribute type 1 has an invalid length. [ 722.614282][T15187] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3506'. [ 722.997039][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 723.009171][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 723.029018][T14881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.069278][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 723.086243][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 723.125956][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 723.141218][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 723.162600][T14881] device veth0_vlan entered promiscuous mode [ 723.171059][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 723.186673][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 723.200798][T14881] device veth1_vlan entered promiscuous mode [ 723.333594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 723.348819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 723.376526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 723.412834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 723.432806][T14881] device veth0_macvtap entered promiscuous mode [ 723.447490][T14881] device veth1_macvtap entered promiscuous mode [ 723.468607][T15205] netlink: 'syz.2.3512': attribute type 25 has an invalid length. [ 723.533126][T15205] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 723.571454][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.582319][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.593733][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.604709][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.614945][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.626194][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.636448][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.647215][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.659787][T14881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.975080][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 723.983871][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 724.002401][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.020592][T11865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.416710][T15224] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3518'. [ 724.446147][T15224] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.3518'. [ 724.502713][T15228] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 725.787338][T11865] wlan1: Trigger new scan to find an IBSS to join [ 726.438776][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.452187][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.462423][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.473394][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.487334][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.498044][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.508369][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.518903][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.530414][T14881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.539592][T15226] netlink: 'syz.2.3519': attribute type 23 has an invalid length. [ 726.547752][T15226] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3519'. [ 726.574459][T15227] netlink: 'syz.2.3519': attribute type 19 has an invalid length. [ 726.587851][T15232] netlink: 'syz.3.3521': attribute type 5 has an invalid length. [ 726.631725][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 726.652506][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 726.702436][T15234] netlink: 'syz.4.3522': attribute type 25 has an invalid length. [ 726.755540][T14881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.765329][T14881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.787117][T14881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.833714][T14881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.856855][T15234] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 726.990769][T15236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.003114][T15236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.033085][T15236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.054911][T15236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.261246][T15253] netlink: 'syz.4.3526': attribute type 2 has an invalid length. [ 727.412921][T15253] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3526'. [ 727.434555][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.442417][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.508143][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 727.562149][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.580995][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.598602][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 727.804664][T15264] syz.4.3532[15264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 727.804789][T15264] syz.4.3532[15264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 728.235698][T15269] syz.4.3533[15269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 728.290690][T15269] syz.4.3533[15269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 728.349427][T15270] FAULT_INJECTION: forcing a failure. [ 728.349427][T15270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.434601][T15270] CPU: 0 PID: 15270 Comm: syz.4.3533 Not tainted syzkaller #0 [ 728.442122][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.452189][T15270] Call Trace: [ 728.455465][T15270] [ 728.458397][T15270] dump_stack_lvl+0x188/0x24e [ 728.463086][T15270] ? show_regs_print_info+0x12/0x12 [ 728.468280][T15270] ? load_image+0x410/0x410 [ 728.472788][T15270] ? __lock_acquire+0x7bd0/0x7bd0 [ 728.477822][T15270] should_fail_ex+0x390/0x4c0 [ 728.482499][T15270] _copy_from_user+0x2c/0x170 [ 728.487178][T15270] __sys_bpf+0x2ea/0x780 [ 728.491424][T15270] ? bpf_link_show_fdinfo+0x380/0x380 [ 728.496807][T15270] ? lock_chain_count+0x20/0x20 [ 728.501662][T15270] __x64_sys_bpf+0x78/0x90 [ 728.506077][T15270] do_syscall_64+0x4c/0xa0 [ 728.510488][T15270] ? clear_bhb_loop+0x60/0xb0 [ 728.515159][T15270] ? clear_bhb_loop+0x60/0xb0 [ 728.519836][T15270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.525731][T15270] RIP: 0033:0x7f188dd9de59 [ 728.530147][T15270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.549925][T15270] RSP: 002b:00007f188ec31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 728.558433][T15270] RAX: ffffffffffffffda RBX: 00007f188e026090 RCX: 00007f188dd9de59 [ 728.566402][T15270] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 728.574457][T15270] RBP: 00007f188ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 728.582428][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.590397][T15270] R13: 00007f188e026128 R14: 00007f188e026090 R15: 00007fff067d57f8 [ 728.598405][T15270] [ 728.765283][T11865] wlan1: Trigger new scan to find an IBSS to join [ 730.487323][T15277] netlink: 'syz.4.3535': attribute type 25 has an invalid length. [ 730.497726][T15280] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 731.112042][T15307] netlink: 'syz.4.3543': attribute type 3 has an invalid length. [ 731.152301][T15307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.170482][T15307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.238038][T15307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.268710][T15307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.785813][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 731.836100][T15310] wlan1: mtu greater than device maximum [ 731.965645][T15316] netlink: 'syz.0.3547': attribute type 25 has an invalid length. [ 732.050257][T15316] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 732.309067][T15329] netlink: 'syz.3.3551': attribute type 10 has an invalid length. [ 732.487937][T15329] device wlan1 entered promiscuous mode [ 732.530086][T15329] team0: Port device wlan1 added [ 732.715313][T11865] wlan1: Creating new IBSS network, BSSID 3a:28:52:5b:b5:45 [ 734.748607][T11865] wlan1: Trigger new scan to find an IBSS to join [ 734.755353][T14632] wlan1: Trigger new scan to find an IBSS to join [ 735.035171][T15357] netlink: 'syz.0.3569': attribute type 5 has an invalid length. [ 735.047489][T15361] wlan1: mtu greater than device maximum [ 735.074686][T15366] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 735.088662][T15368] tun0: tun_chr_ioctl cmd 1074025681 [ 735.248082][T15372] netlink: 'syz.0.3563': attribute type 25 has an invalid length. [ 735.363880][T15372] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 735.580214][T15383] netlink: 'syz.3.3567': attribute type 3 has an invalid length. [ 735.658227][T15383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.725390][T15383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.920830][T15383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.954574][T15383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.298402][T15394] netlink: 'syz.1.3572': attribute type 21 has an invalid length. [ 736.307032][T15394] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3572'. [ 736.318016][T15394] netlink: 'syz.1.3572': attribute type 4 has an invalid length. [ 736.327839][T15394] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3572'. [ 736.348098][T15406] wlan1: mtu greater than device maximum [ 737.788192][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 737.795280][ T11] wlan1: Trigger new scan to find an IBSS to join [ 738.900985][T15420] netlink: 'syz.0.3581': attribute type 25 has an invalid length. [ 738.911455][T15419] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 738.925712][T15432] netlink: 'syz.1.3584': attribute type 10 has an invalid length. [ 738.970678][T15432] team0: Port device wlan1 added [ 738.997824][T15437] -: renamed from syzkaller0 [ 739.319459][T15451] netlink: 'syz.1.3589': attribute type 21 has an invalid length. [ 739.341520][T15451] netlink: 'syz.1.3589': attribute type 15 has an invalid length. [ 739.393296][T15456] wlan1: mtu greater than device maximum [ 740.061033][T15471] netlink: 'syz.2.3596': attribute type 25 has an invalid length. [ 740.194730][T15471] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 740.260085][T15474] device syzkaller0 entered promiscuous mode [ 740.296688][T15478] netlink: 'syz.0.3600': attribute type 10 has an invalid length. [ 740.413222][T15478] team0: Port device wlan1 added [ 741.784440][T11865] wlan1: Trigger new scan to find an IBSS to join [ 742.327454][T15506] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3609'. [ 742.824419][ T11] wlan1: Trigger new scan to find an IBSS to join [ 742.831254][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 744.240731][T15497] wlan1: mtu greater than device maximum [ 744.824376][T11865] wlan1: Trigger new scan to find an IBSS to join [ 745.788573][ T11] wlan1: Trigger new scan to find an IBSS to join [ 745.794278][T11865] wlan1: Trigger new scan to find an IBSS to join [ 745.874244][T15516] netlink: 'syz.1.3613': attribute type 25 has an invalid length. [ 745.874832][T15514] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 745.892972][T15518] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 745.902417][T15514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 745.944350][T15514] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 746.827603][ T4373] wlan1: Creating new IBSS network, BSSID a2:a2:00:a6:e6:fd [ 746.837661][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 747.032144][T15548] wlan1: mtu greater than device maximum [ 747.146941][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.153318][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.215215][ T4283] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 747.420177][T15560] netlink: 'syz.3.3627': attribute type 25 has an invalid length. [ 747.469028][T15560] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 747.576670][T15566] device syzkaller0 entered promiscuous mode [ 747.770918][T15567] device syzkaller0 entered promiscuous mode [ 748.946854][ T4283] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 749.224411][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 749.784483][ T9] wlan1: Trigger new scan to find an IBSS to join [ 749.791104][T11865] wlan1: Trigger new scan to find an IBSS to join [ 749.797855][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 749.801032][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 750.700061][T11865] wlan1: Creating new IBSS network, BSSID 4a:9b:50:1a:da:21 [ 750.709602][ T9] wlan1: Creating new IBSS network, BSSID 96:3d:ae:3d:0f:b1 [ 751.958725][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 751.967653][T15583] wlan1: mtu greater than device maximum [ 751.973404][T15590] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3639'. [ 751.992238][T15596] netlink: 'syz.2.3642': attribute type 25 has an invalid length. [ 752.023597][T15597] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 752.744577][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 752.834026][T15621] netlink: 'syz.3.3650': attribute type 10 has an invalid length. [ 752.952867][T15621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3650'. [ 753.017220][T15627] netlink: 'syz.3.3650': attribute type 30 has an invalid length. [ 753.153589][T15629] wlan1: mtu greater than device maximum [ 753.230290][T15631] netlink: 'syz.0.3654': attribute type 25 has an invalid length. [ 753.393413][T15631] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 753.706270][ T4302] wlan1: Creating new IBSS network, BSSID 8a:cd:e0:e0:79:be [ 753.718674][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 753.784746][ T9] wlan1: Trigger new scan to find an IBSS to join [ 753.818297][T15642] netlink: 'syz.2.3657': attribute type 25 has an invalid length. [ 753.874425][ T4283] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 753.950575][T15642] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 754.505009][T15657] netlink: 'syz.3.3664': attribute type 10 has an invalid length. [ 754.513050][T15657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3664'. [ 754.570874][T15657] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 754.626046][T15664] FAULT_INJECTION: forcing a failure. [ 754.626046][T15664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.679604][T15657] netlink: 'syz.3.3664': attribute type 30 has an invalid length. [ 754.702438][T15664] CPU: 0 PID: 15664 Comm: syz.0.3667 Not tainted syzkaller #0 [ 754.709985][T15664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 754.720087][T15664] Call Trace: [ 754.723408][T15664] [ 754.726385][T15664] dump_stack_lvl+0x188/0x24e [ 754.731124][T15664] ? show_regs_print_info+0x12/0x12 [ 754.736385][T15664] ? load_image+0x410/0x410 [ 754.740964][T15664] ? __lock_acquire+0x7bd0/0x7bd0 [ 754.746051][T15664] ? snprintf+0xe5/0x140 [ 754.750370][T15664] should_fail_ex+0x390/0x4c0 [ 754.755121][T15664] _copy_to_user+0x2c/0x130 [ 754.759697][T15664] simple_read_from_buffer+0xe3/0x150 [ 754.765112][T15664] proc_fail_nth_read+0x1a6/0x220 [ 754.770169][T15664] ? proc_fault_inject_write+0x310/0x310 [ 754.775837][T15664] ? fsnotify_perm+0x248/0x550 [ 754.780625][T15664] ? proc_fault_inject_write+0x310/0x310 [ 754.786277][T15664] vfs_read+0x2db/0x960 [ 754.790477][T15664] ? kernel_read+0x1e0/0x1e0 [ 754.795093][T15664] ? __fget_files+0x28/0x460 [ 754.799703][T15664] ? __fget_files+0x3fc/0x460 [ 754.804418][T15664] ? __fdget_pos+0x2ae/0x360 [ 754.809020][T15664] ? ksys_read+0x70/0x260 [ 754.813376][T15664] ksys_read+0x14d/0x260 [ 754.817648][T15664] ? vfs_write+0x9a0/0x9a0 [ 754.822092][T15664] ? lockdep_hardirqs_on+0x94/0x140 [ 754.827323][T15664] do_syscall_64+0x4c/0xa0 [ 754.831751][T15664] ? clear_bhb_loop+0x60/0xb0 [ 754.836437][T15664] ? clear_bhb_loop+0x60/0xb0 [ 754.841137][T15664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.847050][T15664] RIP: 0033:0x7f965b95e68e [ 754.851483][T15664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 754.871115][T15664] RSP: 002b:00007f965c910fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 754.879546][T15664] RAX: ffffffffffffffda RBX: 00007f965c9116c0 RCX: 00007f965b95e68e [ 754.887562][T15664] RDX: 000000000000000f RSI: 00007f965c9110a0 RDI: 0000000000000004 [ 754.895570][T15664] RBP: 00007f965c911090 R08: 0000000000000000 R09: 0000000000000000 [ 754.903552][T15664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.911531][T15664] R13: 00007f965bc26038 R14: 00007f965bc25fa0 R15: 00007fff42ec0108 [ 754.919659][T15664] [ 755.276231][T15678] wlan1: mtu greater than device maximum [ 755.321768][T15676] netlink: 'syz.4.3670': attribute type 25 has an invalid length. [ 755.428257][T15676] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 755.472748][T15681] netlink: 'syz.1.3671': attribute type 10 has an invalid length. [ 755.509778][T15681] team0: Port device geneve1 added [ 755.599261][T15687] netlink: 'syz.2.3672': attribute type 1 has an invalid length. [ 755.661966][T15687] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3672'. [ 755.683098][T15691] device team_slave_0 left promiscuous mode [ 755.784733][ T9] wlan1: Creating new IBSS network, BSSID 8e:9d:ce:ca:d0:9a [ 755.792247][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 756.113921][T15691] team0: Port device team_slave_0 removed [ 756.177699][T15701] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 756.189679][T15688] delete_channel: no stack [ 757.264994][T15723] wlan1: mtu greater than device maximum [ 757.326450][T15729] FAULT_INJECTION: forcing a failure. [ 757.326450][T15729] name failslab, interval 1, probability 0, space 0, times 0 [ 757.339173][T15729] CPU: 1 PID: 15729 Comm: syz.4.3688 Not tainted syzkaller #0 [ 757.346831][T15729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.356902][T15729] Call Trace: [ 757.360202][T15729] [ 757.363143][T15729] dump_stack_lvl+0x188/0x24e [ 757.367855][T15729] ? show_regs_print_info+0x12/0x12 [ 757.373077][T15729] ? load_image+0x410/0x410 [ 757.377613][T15729] ? skb_network_protocol+0x52f/0x790 [ 757.383017][T15729] should_fail_ex+0x390/0x4c0 [ 757.387719][T15729] should_failslab+0x5/0x20 [ 757.392244][T15729] slab_pre_alloc_hook+0x59/0x300 [ 757.397378][T15729] ? netif_skb_features+0xafa/0x1630 [ 757.402698][T15729] kmem_cache_alloc+0x56/0x2f0 [ 757.407486][T15729] ? skb_clone+0x1e7/0x370 [ 757.411928][T15729] skb_clone+0x1e7/0x370 [ 757.416178][T15729] ? dev_queue_xmit_nit+0x200/0xba0 [ 757.421384][T15729] dev_queue_xmit_nit+0x23b/0xba0 [ 757.426417][T15729] ? dev_queue_xmit_nit+0x29/0xba0 [ 757.431526][T15729] ? validate_xmit_skb+0x7ca/0xe80 [ 757.436638][T15729] dev_hard_start_xmit+0x158/0x8b0 [ 757.441751][T15729] ? validate_xmit_skb_list+0x120/0x120 [ 757.447301][T15729] __dev_queue_xmit+0x1b4b/0x3810 [ 757.452332][T15729] ? __dev_queue_xmit+0x281/0x3810 [ 757.457464][T15729] ? netdev_core_pick_tx+0x360/0x360 [ 757.462780][T15729] ? skb_release_data+0x1d3/0x7e0 [ 757.467817][T15729] __bpf_redirect+0x8c7/0x1110 [ 757.472593][T15729] bpf_clone_redirect+0x311/0x4a0 [ 757.477625][T15729] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 757.483086][T15729] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 757.489068][T15729] ? __lock_acquire+0x7bd0/0x7bd0 [ 757.494090][T15729] ? lock_chain_count+0x20/0x20 [ 757.499748][T15729] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 757.505998][T15729] ? lockdep_hardirqs_on+0x94/0x140 [ 757.511201][T15729] ? ktime_get+0x7b/0x270 [ 757.515530][T15729] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 757.521795][T15729] ? ktime_get_real_ts64+0x440/0x440 [ 757.527079][T15729] ? read_lock_is_recursive+0x10/0x10 [ 757.532465][T15729] bpf_test_run+0x4c1/0x830 [ 757.536985][T15729] ? dst_hold+0xb0/0xb0 [ 757.541150][T15729] ? eth_get_headlen+0x200/0x200 [ 757.546083][T15729] ? __build_skb+0x24b/0x3b0 [ 757.550676][T15729] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 757.556061][T15729] ? cpu_online+0xa0/0xa0 [ 757.560390][T15729] bpf_prog_test_run+0x31c/0x390 [ 757.565332][T15729] __sys_bpf+0x62b/0x780 [ 757.569578][T15729] ? bpf_link_show_fdinfo+0x380/0x380 [ 757.574968][T15729] ? lock_chain_count+0x20/0x20 [ 757.579845][T15729] __x64_sys_bpf+0x78/0x90 [ 757.584281][T15729] do_syscall_64+0x4c/0xa0 [ 757.588698][T15729] ? clear_bhb_loop+0x60/0xb0 [ 757.593456][T15729] ? clear_bhb_loop+0x60/0xb0 [ 757.598129][T15729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.604056][T15729] RIP: 0033:0x7f188dd9de59 [ 757.608467][T15729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.628163][T15729] RSP: 002b:00007f188ec52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.636578][T15729] RAX: ffffffffffffffda RBX: 00007f188e025fa0 RCX: 00007f188dd9de59 [ 757.644549][T15729] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 757.652544][T15729] RBP: 00007f188ec52090 R08: 0000000000000000 R09: 0000000000000000 [ 757.660517][T15729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.668484][T15729] R13: 00007f188e026038 R14: 00007f188e025fa0 R15: 00007fff067d57f8 [ 757.676572][T15729] [ 757.785180][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 757.915057][T15739] FAULT_INJECTION: forcing a failure. [ 757.915057][T15739] name failslab, interval 1, probability 0, space 0, times 0 [ 757.945736][T15739] CPU: 1 PID: 15739 Comm: syz.4.3691 Not tainted syzkaller #0 [ 757.953270][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.963352][T15739] Call Trace: [ 757.966649][T15739] [ 757.969593][T15739] dump_stack_lvl+0x188/0x24e [ 757.974303][T15739] ? show_regs_print_info+0x12/0x12 [ 757.979525][T15739] ? load_image+0x410/0x410 [ 757.984054][T15739] ? __might_sleep+0xd0/0xd0 [ 757.988661][T15739] ? __lock_acquire+0x7bd0/0x7bd0 [ 757.993716][T15739] should_fail_ex+0x390/0x4c0 [ 757.998422][T15739] should_failslab+0x5/0x20 [ 758.002943][T15739] slab_pre_alloc_hook+0x59/0x300 [ 758.007992][T15739] ? __lock_acquire+0x7bd0/0x7bd0 [ 758.013052][T15739] ? kvmalloc_node+0x6c/0x180 [ 758.017771][T15739] __kmem_cache_alloc_node+0x4f/0x270 [ 758.023162][T15739] ? schedule_delayed_monitor_work+0x160/0x160 [ 758.029350][T15739] ? kvmalloc_node+0x6c/0x180 [ 758.034141][T15739] __kmalloc_node+0xa2/0x240 [ 758.038790][T15739] kvmalloc_node+0x6c/0x180 [ 758.043337][T15739] bpf_test_run_xdp_live+0x1da/0x1a90 [ 758.048747][T15739] ? 0xffffffffa00041c0 [ 758.052932][T15739] ? text_poke_copy+0x7b/0x90 [ 758.057653][T15739] ? 0xffffffffa00041c0 [ 758.061830][T15739] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 758.067758][T15739] ? irqentry_enter+0x33/0x50 [ 758.072467][T15739] ? xdp_convert_md_to_buff+0x330/0x330 [ 758.078068][T15739] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 758.084340][T15739] ? bpf_test_init+0x119/0x140 [ 758.089130][T15739] ? xdp_convert_md_to_buff+0x5b/0x330 [ 758.094614][T15739] bpf_prog_test_run_xdp+0x757/0xf80 [ 758.099923][T15739] ? __lock_acquire+0x7bd0/0x7bd0 [ 758.104981][T15739] ? dev_put+0x80/0x80 [ 758.109082][T15739] ? dev_put+0x80/0x80 [ 758.113173][T15739] bpf_prog_test_run+0x31c/0x390 [ 758.118147][T15739] __sys_bpf+0x62b/0x780 [ 758.122503][T15739] ? bpf_link_show_fdinfo+0x380/0x380 [ 758.127913][T15739] ? lock_chain_count+0x20/0x20 [ 758.132796][T15739] __x64_sys_bpf+0x78/0x90 [ 758.137244][T15739] do_syscall_64+0x4c/0xa0 [ 758.141678][T15739] ? clear_bhb_loop+0x60/0xb0 [ 758.146379][T15739] ? clear_bhb_loop+0x60/0xb0 [ 758.151079][T15739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.156994][T15739] RIP: 0033:0x7f188dd9de59 [ 758.161421][T15739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.181060][T15739] RSP: 002b:00007f188ec31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 758.189510][T15739] RAX: ffffffffffffffda RBX: 00007f188e026090 RCX: 00007f188dd9de59 [ 758.197504][T15739] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 758.205494][T15739] RBP: 00007f188ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 758.213477][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.221463][T15739] R13: 00007f188e026128 R14: 00007f188e026090 R15: 00007fff067d57f8 [ 758.229478][T15739] [ 758.289572][T15741] validate_nla: 2 callbacks suppressed [ 758.289924][T15741] netlink: 'syz.1.3692': attribute type 25 has an invalid length. [ 758.711786][T15757] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3696'. [ 758.795762][T15762] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3697'. [ 758.899869][T15746] bridge0: port 3(team0) entered disabled state [ 758.907570][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.916309][T15746] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.986302][T15762] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.3697'. [ 759.012713][T15762] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.3697'. [ 759.793213][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 762.136135][ T11] wlan1: Creating new IBSS network, BSSID e2:c5:95:97:7d:18 [ 762.361603][T15788] wlan1: mtu greater than device maximum [ 762.461465][T15794] netlink: 'syz.4.3707': attribute type 25 has an invalid length. [ 762.645563][T15794] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 762.747903][ T9] wlan1: Trigger new scan to find an IBSS to join [ 762.800701][T15802] netlink: 'syz.2.3710': attribute type 9 has an invalid length. [ 762.875994][T15802] netlink: 174596 bytes leftover after parsing attributes in process `syz.2.3710'. [ 763.241857][T15814] FAULT_INJECTION: forcing a failure. [ 763.241857][T15814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.307121][T15814] CPU: 1 PID: 15814 Comm: syz.2.3713 Not tainted syzkaller #0 [ 763.314646][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 763.324819][T15814] Call Trace: [ 763.328112][T15814] [ 763.331118][T15814] dump_stack_lvl+0x188/0x24e [ 763.335844][T15814] ? show_regs_print_info+0x12/0x12 [ 763.341077][T15814] ? load_image+0x410/0x410 [ 763.345620][T15814] ? __lock_acquire+0x7bd0/0x7bd0 [ 763.350681][T15814] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 763.356702][T15814] should_fail_ex+0x390/0x4c0 [ 763.361413][T15814] strncpy_from_user+0x32/0x340 [ 763.366305][T15814] bpf_prog_load+0x200/0x1530 [ 763.371115][T15814] ? map_freeze+0x390/0x390 [ 763.375656][T15814] ? __might_fault+0xa6/0x120 [ 763.380466][T15814] ? __might_fault+0xa6/0x120 [ 763.385159][T15814] ? __might_fault+0xc2/0x120 [ 763.389860][T15814] ? __might_fault+0xa6/0x120 [ 763.394560][T15814] ? bpf_lsm_bpf+0x5/0x10 [ 763.398897][T15814] ? security_bpf+0x7a/0xa0 [ 763.403400][T15814] __sys_bpf+0x5b8/0x780 [ 763.407645][T15814] ? bpf_link_show_fdinfo+0x380/0x380 [ 763.413027][T15814] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 763.419194][T15814] __x64_sys_bpf+0x78/0x90 [ 763.423614][T15814] do_syscall_64+0x4c/0xa0 [ 763.428120][T15814] ? clear_bhb_loop+0x60/0xb0 [ 763.432791][T15814] ? clear_bhb_loop+0x60/0xb0 [ 763.437470][T15814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.443393][T15814] RIP: 0033:0x7fbcf6d9de59 [ 763.447810][T15814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.467417][T15814] RSP: 002b:00007fbcf7bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 763.475845][T15814] RAX: ffffffffffffffda RBX: 00007fbcf7025fa0 RCX: 00007fbcf6d9de59 [ 763.483817][T15814] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 763.491785][T15814] RBP: 00007fbcf7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 763.499762][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.507732][T15814] R13: 00007fbcf7026038 R14: 00007fbcf7025fa0 R15: 00007fffdc254788 [ 763.515713][T15814] [ 763.559987][T15817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3714'. [ 763.783204][T15827] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 764.161731][ T4332] wlan1: Creating new IBSS network, BSSID 7e:a5:12:4a:f5:95 [ 764.606473][T15840] wlan1: mtu greater than device maximum [ 764.612395][T15838] netlink: 'syz.0.3721': attribute type 25 has an invalid length. [ 764.687013][T15838] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 764.851322][T15849] FAULT_INJECTION: forcing a failure. [ 764.851322][T15849] name failslab, interval 1, probability 0, space 0, times 0 [ 764.932473][T15849] CPU: 1 PID: 15849 Comm: syz.2.3724 Not tainted syzkaller #0 [ 764.939999][T15849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.950085][T15849] Call Trace: [ 764.953381][T15849] [ 764.956331][T15849] dump_stack_lvl+0x188/0x24e [ 764.961039][T15849] ? show_regs_print_info+0x12/0x12 [ 764.966266][T15849] ? load_image+0x410/0x410 [ 764.970799][T15849] ? __schedule+0x1087/0x4030 [ 764.975499][T15849] ? verify_lock_unused+0x140/0x140 [ 764.980744][T15849] should_fail_ex+0x390/0x4c0 [ 764.985454][T15849] should_failslab+0x5/0x20 [ 764.989984][T15849] slab_pre_alloc_hook+0x59/0x300 [ 764.995043][T15849] kmem_cache_alloc+0x56/0x2f0 [ 764.999838][T15849] ? skb_clone+0x1e7/0x370 [ 765.004281][T15849] skb_clone+0x1e7/0x370 [ 765.008577][T15849] __netlink_deliver_tap+0x3e4/0x7e0 [ 765.013902][T15849] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.019161][T15849] netlink_deliver_tap+0x19c/0x1b0 [ 765.024301][T15849] netlink_unicast+0x777/0x920 [ 765.029099][T15849] netlink_sendmsg+0x8ad/0xbd0 [ 765.033897][T15849] ? netlink_getsockopt+0x550/0x550 [ 765.039122][T15849] ? aa_sock_msg_perm+0x94/0x150 [ 765.044085][T15849] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 765.049392][T15849] ? security_socket_sendmsg+0x7c/0xa0 [ 765.054883][T15849] ? netlink_getsockopt+0x550/0x550 [ 765.060111][T15849] ____sys_sendmsg+0x5ed/0x9a0 [ 765.064912][T15849] ? __sys_sendmsg_sock+0x30/0x30 [ 765.069991][T15849] ? __import_iovec+0x306/0x510 [ 765.074880][T15849] ? import_iovec+0x6f/0xa0 [ 765.079414][T15849] ___sys_sendmsg+0x2a2/0x360 [ 765.084119][T15849] ? __sys_sendmsg+0x2a0/0x2a0 [ 765.088927][T15849] ? __lock_acquire+0x7bd0/0x7bd0 [ 765.094006][T15849] __se_sys_sendmsg+0x1c3/0x2b0 [ 765.098886][T15849] ? __x64_sys_sendmsg+0x80/0x80 [ 765.103864][T15849] ? lockdep_hardirqs_on+0x94/0x140 [ 765.109096][T15849] do_syscall_64+0x4c/0xa0 [ 765.113535][T15849] ? clear_bhb_loop+0x60/0xb0 [ 765.118320][T15849] ? clear_bhb_loop+0x60/0xb0 [ 765.123013][T15849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.128935][T15849] RIP: 0033:0x7fbcf6d9de59 [ 765.133373][T15849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.153008][T15849] RSP: 002b:00007fbcf7bda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.161459][T15849] RAX: ffffffffffffffda RBX: 00007fbcf7025fa0 RCX: 00007fbcf6d9de59 [ 765.169460][T15849] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 765.177472][T15849] RBP: 00007fbcf7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 765.185472][T15849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.193466][T15849] R13: 00007fbcf7026038 R14: 00007fbcf7025fa0 R15: 00007fffdc254788 [ 765.201481][T15849] [ 765.424637][T15849] netlink: 'syz.2.3724': attribute type 10 has an invalid length. [ 765.432634][T15849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3724'. [ 765.515077][T15849] device macvlan1 entered promiscuous mode [ 765.568682][T15849] batman_adv: batadv0: Adding interface: macvlan1 [ 765.599386][T15849] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.717812][T15849] batman_adv: batadv0: Interface activated: macvlan1 [ 766.746758][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 766.938724][T15878] netlink: 'syz.4.3735': attribute type 25 has an invalid length. [ 767.321730][T15892] netlink: 'syz.1.3740': attribute type 3 has an invalid length. [ 767.332620][T15892] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3740'. [ 767.776626][T15902] FAULT_INJECTION: forcing a failure. [ 767.776626][T15902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.893080][T15902] CPU: 1 PID: 15902 Comm: syz.0.3744 Not tainted syzkaller #0 [ 767.900604][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.910686][T15902] Call Trace: [ 767.913985][T15902] [ 767.916932][T15902] dump_stack_lvl+0x188/0x24e [ 767.921636][T15902] ? show_regs_print_info+0x12/0x12 [ 767.926856][T15902] ? load_image+0x410/0x410 [ 767.931391][T15902] ? __lock_acquire+0x7bd0/0x7bd0 [ 767.936449][T15902] should_fail_ex+0x390/0x4c0 [ 767.941166][T15902] _copy_from_user+0x2c/0x170 [ 767.945883][T15902] kstrtouint_from_user+0xda/0x170 [ 767.951197][T15902] ? kstrtol_from_user+0x190/0x190 [ 767.956351][T15902] proc_fail_nth_write+0x8b/0x200 [ 767.961405][T15902] ? proc_fail_nth_read+0x220/0x220 [ 767.966625][T15902] ? common_file_perm+0x171/0x1c0 [ 767.971676][T15902] ? proc_fail_nth_read+0x220/0x220 [ 767.977243][T15902] vfs_write+0x2dc/0x9a0 [ 767.981530][T15902] ? file_end_write+0x250/0x250 [ 767.986501][T15902] ? __fget_files+0x28/0x460 [ 767.991130][T15902] ? __fget_files+0x3fc/0x460 [ 767.995845][T15902] ? __fdget_pos+0x2ae/0x360 [ 768.000462][T15902] ? ksys_write+0x70/0x260 [ 768.004913][T15902] ksys_write+0x14d/0x260 [ 768.009273][T15902] ? __ia32_sys_read+0x80/0x80 [ 768.014152][T15902] ? lockdep_hardirqs_on+0x94/0x140 [ 768.019383][T15902] do_syscall_64+0x4c/0xa0 [ 768.023819][T15902] ? clear_bhb_loop+0x60/0xb0 [ 768.028509][T15902] ? clear_bhb_loop+0x60/0xb0 [ 768.033203][T15902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.039122][T15902] RIP: 0033:0x7f965b95e68e [ 768.043560][T15902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 768.063201][T15902] RSP: 002b:00007f965c910fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.071646][T15902] RAX: ffffffffffffffda RBX: 00007f965c9116c0 RCX: 00007f965b95e68e [ 768.079644][T15902] RDX: 0000000000000001 RSI: 00007f965c9110a0 RDI: 0000000000000004 [ 768.087641][T15902] RBP: 00007f965c911090 R08: 0000000000000000 R09: 0000000000000000 [ 768.095726][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.103719][T15902] R13: 00007f965bc26038 R14: 00007f965bc25fa0 R15: 00007fff42ec0108 [ 768.111906][T15902] [ 768.436932][T15909] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3745'. [ 768.503009][T15908] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.3745'. [ 770.744600][T14632] wlan1: Trigger new scan to find an IBSS to join [ 771.118075][T15908] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.3745'. [ 771.347548][T15927] netlink: 'syz.0.3752': attribute type 25 has an invalid length. [ 771.406441][T15927] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 771.999783][T15946] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 772.504451][T15952] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3759'. [ 772.679958][T15957] wlan1: mtu greater than device maximum [ 773.212211][T15966] netlink: 'syz.0.3765': attribute type 3 has an invalid length. [ 773.254296][T15966] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3765'. [ 773.293884][T15969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3766'. [ 773.401942][T15970] netlink: 'syz.2.3769': attribute type 25 has an invalid length. [ 773.802110][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 773.868103][T15977] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 774.908815][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 776.453712][T16003] wlan1: mtu greater than device maximum [ 776.556459][T16006] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3779'. [ 776.828667][ T11] wlan1: Trigger new scan to find an IBSS to join [ 777.049845][T16017] netlink: 'syz.1.3784': attribute type 25 has an invalid length. [ 777.096277][T16017] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 777.133675][T16021] netlink: 'syz.2.3786': attribute type 3 has an invalid length. [ 777.141979][T16021] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3786'. [ 777.557911][T16027] FAULT_INJECTION: forcing a failure. [ 777.557911][T16027] name failslab, interval 1, probability 0, space 0, times 0 [ 777.611179][T16029] FAULT_INJECTION: forcing a failure. [ 777.611179][T16029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.614378][T16027] CPU: 0 PID: 16027 Comm: syz.3.3788 Not tainted syzkaller #0 [ 777.631812][T16027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 777.641893][T16027] Call Trace: [ 777.645187][T16027] [ 777.648135][T16027] dump_stack_lvl+0x188/0x24e [ 777.652841][T16027] ? show_regs_print_info+0x12/0x12 [ 777.658054][T16027] ? load_image+0x410/0x410 [ 777.662596][T16027] ? __might_sleep+0xd0/0xd0 [ 777.667228][T16027] ? __lock_acquire+0x7bd0/0x7bd0 [ 777.672289][T16027] should_fail_ex+0x390/0x4c0 [ 777.677006][T16027] should_failslab+0x5/0x20 [ 777.681546][T16027] slab_pre_alloc_hook+0x59/0x300 [ 777.686599][T16027] ? __lock_acquire+0x7bd0/0x7bd0 [ 777.691653][T16027] ? kvmalloc_node+0x6c/0x180 [ 777.696368][T16027] __kmem_cache_alloc_node+0x4f/0x270 [ 777.701764][T16027] ? schedule_delayed_monitor_work+0x160/0x160 [ 777.707955][T16027] ? kvmalloc_node+0x6c/0x180 [ 777.712652][T16027] __kmalloc_node+0xa2/0x240 [ 777.717265][T16027] kvmalloc_node+0x6c/0x180 [ 777.721781][T16027] bpf_test_run_xdp_live+0x1da/0x1a90 [ 777.727268][T16027] ? 0xffffffffa00041c0 [ 777.731438][T16027] ? text_poke_copy+0x7b/0x90 [ 777.736128][T16027] ? 0xffffffffa00041c0 [ 777.740292][T16027] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 777.746208][T16027] ? xdp_convert_md_to_buff+0x330/0x330 [ 777.751817][T16027] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 777.758108][T16027] ? bpf_test_init+0x119/0x140 [ 777.762895][T16027] ? xdp_convert_md_to_buff+0x5b/0x330 [ 777.768375][T16027] bpf_prog_test_run_xdp+0x757/0xf80 [ 777.773679][T16027] ? __lock_acquire+0x7bd0/0x7bd0 [ 777.778732][T16027] ? dev_put+0x80/0x80 [ 777.782832][T16027] ? dev_put+0x80/0x80 [ 777.786918][T16027] bpf_prog_test_run+0x31c/0x390 [ 777.791878][T16027] __sys_bpf+0x62b/0x780 [ 777.796142][T16027] ? bpf_link_show_fdinfo+0x380/0x380 [ 777.801545][T16027] ? lock_chain_count+0x20/0x20 [ 777.806416][T16027] __x64_sys_bpf+0x78/0x90 [ 777.810938][T16027] do_syscall_64+0x4c/0xa0 [ 777.815380][T16027] ? clear_bhb_loop+0x60/0xb0 [ 777.820065][T16027] ? clear_bhb_loop+0x60/0xb0 [ 777.824751][T16027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.830660][T16027] RIP: 0033:0x7f472e79de59 [ 777.835082][T16027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.854699][T16027] RSP: 002b:00007f472f686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 777.863124][T16027] RAX: ffffffffffffffda RBX: 00007f472ea25fa0 RCX: 00007f472e79de59 [ 777.871105][T16027] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 777.879093][T16027] RBP: 00007f472f686090 R08: 0000000000000000 R09: 0000000000000000 [ 777.887081][T16027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.895068][T16027] R13: 00007f472ea26038 R14: 00007f472ea25fa0 R15: 00007fff2bbace88 [ 777.903065][T16027] [ 777.912307][T11865] wlan1: Trigger new scan to find an IBSS to join [ 777.918930][T16029] CPU: 0 PID: 16029 Comm: syz.1.3787 Not tainted syzkaller #0 [ 777.926510][T16029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 777.936576][T16029] Call Trace: [ 777.939863][T16029] [ 777.942799][T16029] dump_stack_lvl+0x188/0x24e [ 777.947497][T16029] ? show_regs_print_info+0x12/0x12 [ 777.952707][T16029] ? load_image+0x410/0x410 [ 777.957226][T16029] ? __lock_acquire+0x7bd0/0x7bd0 [ 777.962272][T16029] should_fail_ex+0x390/0x4c0 [ 777.966970][T16029] _copy_from_user+0x2c/0x170 [ 777.971676][T16029] kstrtouint_from_user+0xda/0x170 [ 777.976809][T16029] ? kstrtol_from_user+0x190/0x190 [ 777.981951][T16029] proc_fail_nth_write+0x8b/0x200 [ 777.986992][T16029] ? proc_fail_nth_read+0x220/0x220 [ 777.992216][T16029] ? common_file_perm+0x171/0x1c0 [ 777.997255][T16029] ? proc_fail_nth_read+0x220/0x220 [ 778.002472][T16029] vfs_write+0x2dc/0x9a0 [ 778.006738][T16029] ? file_end_write+0x250/0x250 [ 778.011608][T16029] ? __fget_files+0x28/0x460 [ 778.016212][T16029] ? __fget_files+0x3fc/0x460 [ 778.020908][T16029] ? __fdget_pos+0x2ae/0x360 [ 778.025518][T16029] ? ksys_write+0x70/0x260 [ 778.029952][T16029] ksys_write+0x14d/0x260 [ 778.034299][T16029] ? __ia32_sys_read+0x80/0x80 [ 778.039095][T16029] ? lockdep_hardirqs_on+0x94/0x140 [ 778.044312][T16029] do_syscall_64+0x4c/0xa0 [ 778.048748][T16029] ? clear_bhb_loop+0x60/0xb0 [ 778.053522][T16029] ? clear_bhb_loop+0x60/0xb0 [ 778.058210][T16029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.064132][T16029] RIP: 0033:0x7fe00e95e68e [ 778.068651][T16029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 778.088277][T16029] RSP: 002b:00007fe00f7ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 778.096709][T16029] RAX: ffffffffffffffda RBX: 00007fe00f7ed6c0 RCX: 00007fe00e95e68e [ 778.104692][T16029] RDX: 0000000000000001 RSI: 00007fe00f7ed0a0 RDI: 000000000000000c [ 778.112677][T16029] RBP: 00007fe00f7ed090 R08: 0000000000000000 R09: 0000000000000000 [ 778.120659][T16029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.128736][T16029] R13: 00007fe00ec26038 R14: 00007fe00ec25fa0 R15: 00007ffc2797ddc8 [ 778.136728][T16029] [ 778.295024][T16037] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3790'. [ 778.812549][T11865] wlan1: Creating new IBSS network, BSSID ae:5f:bc:df:c9:41 [ 779.411455][T16056] netlink: 'syz.1.3797': attribute type 25 has an invalid length. [ 779.550703][T16056] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 780.062858][T16070] netlink: 'syz.1.3802': attribute type 3 has an invalid length. [ 780.116052][T16070] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3802'. [ 780.181864][T16076] FAULT_INJECTION: forcing a failure. [ 780.181864][T16076] name failslab, interval 1, probability 0, space 0, times 0 [ 780.195054][T16076] CPU: 1 PID: 16076 Comm: syz.2.3803 Not tainted syzkaller #0 [ 780.202571][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.212682][T16076] Call Trace: [ 780.215995][T16076] [ 780.218967][T16076] dump_stack_lvl+0x188/0x24e [ 780.223715][T16076] ? show_regs_print_info+0x12/0x12 [ 780.228967][T16076] ? load_image+0x410/0x410 [ 780.233540][T16076] ? skb_network_protocol+0x52f/0x790 [ 780.239003][T16076] should_fail_ex+0x390/0x4c0 [ 780.243753][T16076] should_failslab+0x5/0x20 [ 780.244438][T16073] netlink: 'syz.1.3802': attribute type 3 has an invalid length. [ 780.248275][T16076] slab_pre_alloc_hook+0x59/0x300 [ 780.261232][T16076] kmem_cache_alloc+0x56/0x2f0 [ 780.266036][T16076] ? skb_clone+0x1e7/0x370 [ 780.270514][T16076] skb_clone+0x1e7/0x370 [ 780.274789][T16076] ? dev_queue_xmit_nit+0x200/0xba0 [ 780.280045][T16076] dev_queue_xmit_nit+0x23b/0xba0 [ 780.285115][T16076] ? dev_queue_xmit_nit+0x29/0xba0 [ 780.290273][T16076] ? validate_xmit_skb+0x7ca/0xe80 [ 780.295419][T16076] dev_hard_start_xmit+0x158/0x8b0 [ 780.300555][T16076] ? __rwlock_init+0x140/0x140 [ 780.305361][T16076] __dev_queue_xmit+0x1b4b/0x3810 [ 780.310420][T16076] ? __dev_queue_xmit+0x281/0x3810 [ 780.315567][T16076] ? netdev_core_pick_tx+0x360/0x360 [ 780.320912][T16076] ? skb_release_data+0x1d3/0x7e0 [ 780.325979][T16076] __bpf_redirect+0x8c7/0x1110 [ 780.330791][T16076] bpf_clone_redirect+0x311/0x4a0 [ 780.335871][T16076] bpf_prog_6893982b85ceadf7+0x56/0x5b [ 780.341354][T16076] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 780.347355][T16076] ? __lock_acquire+0x7bd0/0x7bd0 [ 780.352400][T16076] ? lock_chain_count+0x20/0x20 [ 780.357279][T16076] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 780.363551][T16076] ? lockdep_hardirqs_on+0x94/0x140 [ 780.368769][T16076] ? ktime_get+0x7b/0x270 [ 780.373111][T16076] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 780.379459][T16076] ? ktime_get_real_ts64+0x440/0x440 [ 780.384855][T16076] ? read_lock_is_recursive+0x10/0x10 [ 780.390294][T16076] bpf_test_run+0x4c1/0x830 [ 780.394873][T16076] ? dst_hold+0xb0/0xb0 [ 780.399056][T16076] ? eth_get_headlen+0x200/0x200 [ 780.404006][T16076] ? __build_skb+0x24b/0x3b0 [ 780.408631][T16076] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 780.414077][T16076] ? cpu_online+0xa0/0xa0 [ 780.418434][T16076] bpf_prog_test_run+0x31c/0x390 [ 780.423400][T16076] __sys_bpf+0x62b/0x780 [ 780.427675][T16076] ? bpf_link_show_fdinfo+0x380/0x380 [ 780.433108][T16076] ? lock_chain_count+0x20/0x20 [ 780.438009][T16076] __x64_sys_bpf+0x78/0x90 [ 780.442449][T16076] do_syscall_64+0x4c/0xa0 [ 780.446881][T16076] ? clear_bhb_loop+0x60/0xb0 [ 780.451568][T16076] ? clear_bhb_loop+0x60/0xb0 [ 780.456267][T16076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.462178][T16076] RIP: 0033:0x7fbcf6d9de59 [ 780.466611][T16076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.486234][T16076] RSP: 002b:00007fbcf7bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 780.494666][T16076] RAX: ffffffffffffffda RBX: 00007fbcf7025fa0 RCX: 00007fbcf6d9de59 [ 780.502664][T16076] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 780.510661][T16076] RBP: 00007fbcf7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 780.518648][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.526636][T16076] R13: 00007fbcf7026038 R14: 00007fbcf7025fa0 R15: 00007fffdc254788 [ 780.534673][T16076] [ 780.555246][T16073] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3802'. [ 780.565926][T16070] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3802'. [ 781.290178][T16100] netlink: 'syz.0.3812': attribute type 25 has an invalid length. [ 781.617313][T16102] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 781.784309][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 781.791029][T11865] wlan1: Trigger new scan to find an IBSS to join [ 781.853987][T16107] netlink: 'syz.1.3815': attribute type 29 has an invalid length. [ 781.918706][T16107] netlink: 'syz.1.3815': attribute type 29 has an invalid length. [ 781.955869][T16112] netlink: 'syz.1.3815': attribute type 29 has an invalid length. [ 782.023533][T16113] netlink: 'syz.1.3815': attribute type 29 has an invalid length. [ 782.055629][T16107] netlink: 'syz.1.3815': attribute type 29 has an invalid length. [ 782.624958][T16133] FAULT_INJECTION: forcing a failure. [ 782.624958][T16133] name failslab, interval 1, probability 0, space 0, times 0 [ 782.682025][ T9] wlan1: Creating new IBSS network, BSSID 2a:ef:5f:30:96:ed [ 782.703343][T16135] netlink: 'syz.0.3826': attribute type 10 has an invalid length. [ 782.712449][T16133] CPU: 1 PID: 16133 Comm: syz.3.3825 Not tainted syzkaller #0 [ 782.719950][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 782.730035][T16133] Call Trace: [ 782.733334][T16133] [ 782.736282][T16133] dump_stack_lvl+0x188/0x24e [ 782.740993][T16133] ? show_regs_print_info+0x12/0x12 [ 782.746210][T16133] ? load_image+0x410/0x410 [ 782.750731][T16133] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 782.756719][T16133] ? __lock_acquire+0x7bd0/0x7bd0 [ 782.761754][T16133] should_fail_ex+0x390/0x4c0 [ 782.766439][T16133] should_failslab+0x5/0x20 [ 782.770939][T16133] slab_pre_alloc_hook+0x59/0x300 [ 782.775969][T16133] kmem_cache_alloc+0x56/0x2f0 [ 782.780730][T16133] ? __build_skb+0x27/0x3b0 [ 782.785241][T16133] __build_skb+0x27/0x3b0 [ 782.789569][T16133] ? build_skb+0x14/0x230 [ 782.793897][T16133] build_skb+0x1e/0x230 [ 782.798063][T16133] bpf_prog_test_run_skb+0x38d/0x18e0 [ 782.803446][T16133] ? __fget_files+0x28/0x460 [ 782.808040][T16133] ? __fget_files+0x3fc/0x460 [ 782.812729][T16133] ? cpu_online+0xa0/0xa0 [ 782.817059][T16133] bpf_prog_test_run+0x31c/0x390 [ 782.822003][T16133] __sys_bpf+0x62b/0x780 [ 782.826342][T16133] ? bpf_link_show_fdinfo+0x380/0x380 [ 782.831729][T16133] ? lock_chain_count+0x20/0x20 [ 782.836591][T16133] __x64_sys_bpf+0x78/0x90 [ 782.841016][T16133] do_syscall_64+0x4c/0xa0 [ 782.845432][T16133] ? clear_bhb_loop+0x60/0xb0 [ 782.850108][T16133] ? clear_bhb_loop+0x60/0xb0 [ 782.854783][T16133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.860680][T16133] RIP: 0033:0x7f472e79de59 [ 782.865099][T16133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.884719][T16133] RSP: 002b:00007f472f686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.893147][T16133] RAX: ffffffffffffffda RBX: 00007f472ea25fa0 RCX: 00007f472e79de59 [ 782.901121][T16133] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 782.909093][T16133] RBP: 00007f472f686090 R08: 0000000000000000 R09: 0000000000000000 [ 782.917061][T16133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.925029][T16133] R13: 00007f472ea26038 R14: 00007f472ea25fa0 R15: 00007fff2bbace88 [ 782.933015][T16133] [ 783.740234][T16135] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.758065][T16135] bond0: (slave team0): Enslaving as an active interface with an up link [ 783.769121][T16137] netlink: 'syz.2.3828': attribute type 25 has an invalid length. [ 783.781578][T16141] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 783.790871][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 784.828447][T14632] wlan1: Trigger new scan to find an IBSS to join [ 785.416631][T16193] FAULT_INJECTION: forcing a failure. [ 785.416631][T16193] name failslab, interval 1, probability 0, space 0, times 0 [ 785.432931][T16193] CPU: 1 PID: 16193 Comm: syz.0.3845 Not tainted syzkaller #0 [ 785.435333][T16191] netlink: 'syz.4.3841': attribute type 27 has an invalid length. [ 785.440419][T16193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.440490][T16193] Call Trace: [ 785.440500][T16193] [ 785.440509][T16193] dump_stack_lvl+0x188/0x24e [ 785.469418][T16193] ? sctp_sendmsg+0x1686/0x2940 [ 785.474310][T16193] ? ___sys_sendmsg+0x2a2/0x360 [ 785.479192][T16193] ? show_regs_print_info+0x12/0x12 [ 785.484415][T16193] ? load_image+0x410/0x410 [ 785.488948][T16193] ? mark_lock+0x94/0x320 [ 785.493394][T16193] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 785.499407][T16193] should_fail_ex+0x390/0x4c0 [ 785.504119][T16193] should_failslab+0x5/0x20 [ 785.508643][T16193] slab_pre_alloc_hook+0x59/0x300 [ 785.513690][T16193] ? sctp_add_bind_addr+0x89/0x350 [ 785.518824][T16193] __kmem_cache_alloc_node+0x4f/0x270 [ 785.524221][T16193] ? sctp_add_bind_addr+0x89/0x350 [ 785.529357][T16193] kmalloc_trace+0x26/0xe0 [ 785.533808][T16193] sctp_add_bind_addr+0x89/0x350 [ 785.538781][T16193] sctp_copy_local_addr_list+0x317/0x4d0 [ 785.544446][T16193] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 785.550195][T16193] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 785.556289][T16193] ? sctp_v4_is_any+0x31/0x50 [ 785.560986][T16193] ? sctp_copy_one_addr+0x93/0x660 [ 785.566125][T16193] sctp_bind_addr_copy+0xaf/0x3c0 [ 785.571178][T16193] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 785.577544][T16193] sctp_connect_new_asoc+0x2f5/0x6a0 [ 785.582855][T16193] ? __sctp_connect+0xd80/0xd80 [ 785.587740][T16193] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 785.593309][T16193] ? security_sctp_bind_connect+0x85/0xb0 [ 785.599062][T16193] sctp_sendmsg+0x1686/0x2940 [ 785.603775][T16193] ? sctp_getsockopt+0x8a0/0x8a0 [ 785.608737][T16193] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 785.614930][T16193] ? lockdep_hardirqs_on+0x94/0x140 [ 785.620170][T16193] ? sctp_getsockopt+0x8a0/0x8a0 [ 785.625140][T16193] ? inet_send_prepare+0x250/0x250 [ 785.630283][T16193] ____sys_sendmsg+0x5ed/0x9a0 [ 785.635086][T16193] ? __sys_sendmsg_sock+0x30/0x30 [ 785.640135][T16193] ? __import_iovec+0x306/0x510 [ 785.645285][T16193] ? import_iovec+0x6f/0xa0 [ 785.649820][T16193] ___sys_sendmsg+0x2a2/0x360 [ 785.654524][T16193] ? __sys_sendmsg+0x2a0/0x2a0 [ 785.659332][T16193] ? __lock_acquire+0x7bd0/0x7bd0 [ 785.664407][T16193] __se_sys_sendmsg+0x1c3/0x2b0 [ 785.669291][T16193] ? __x64_sys_sendmsg+0x80/0x80 [ 785.674269][T16193] ? syscall_enter_from_user_mode+0x2a/0x80 [ 785.680194][T16193] do_syscall_64+0x4c/0xa0 [ 785.684627][T16193] ? clear_bhb_loop+0x60/0xb0 [ 785.689319][T16193] ? clear_bhb_loop+0x60/0xb0 [ 785.694016][T16193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.699931][T16193] RIP: 0033:0x7f965b99de59 [ 785.704366][T16193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.723998][T16193] RSP: 002b:00007f965c911028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.732433][T16193] RAX: ffffffffffffffda RBX: 00007f965bc25fa0 RCX: 00007f965b99de59 [ 785.740410][T16193] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000009 [ 785.748382][T16193] RBP: 00007f965c911090 R08: 0000000000000000 R09: 0000000000000000 [ 785.756349][T16193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 785.764313][T16193] R13: 00007f965bc26038 R14: 00007f965bc25fa0 R15: 00007fff42ec0108 [ 785.772296][T16193] [ 785.793215][ T11] wlan1: Trigger new scan to find an IBSS to join [ 786.825275][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 787.888605][ T11] wlan1: Creating new IBSS network, BSSID 8e:2e:6e:8b:a7:fa [ 789.794578][ T4373] wlan1: Creating new IBSS network, BSSID 52:23:d8:31:6b:88 [ 789.964333][T16207] netlink: 'syz.0.3848': attribute type 10 has an invalid length. [ 790.177074][T16219] __sock_release: fasync list not empty! [ 790.197985][T16221] netlink: 'syz.3.3855': attribute type 27 has an invalid length. [ 790.206590][T16221] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3855'. [ 790.742931][T16248] wlan1: mtu greater than device maximum [ 791.498365][T16267] netlink: 'syz.1.3869': attribute type 27 has an invalid length. [ 791.684892][T16267] bond0: (slave bond_slave_0): Releasing backup interface [ 791.794363][ T9] wlan1: Trigger new scan to find an IBSS to join [ 791.879312][T16279] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3875'. [ 792.741944][ T4302] wlan1: Creating new IBSS network, BSSID 3e:5e:a7:ab:62:db [ 794.197318][T16285] wlan1: mtu greater than device maximum [ 794.208846][T16283] netlink: 'syz.4.3874': attribute type 10 has an invalid length. [ 795.193961][T16325] netlink: 'syz.3.3890': attribute type 10 has an invalid length. [ 795.251323][T16325] team0: Device ipvlan1 failed to register rx_handler [ 795.314365][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 795.402562][T16330] wlan1: mtu greater than device maximum [ 796.590684][T16354] wlan1: mtu greater than device maximum [ 796.786242][ T4283] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 796.839479][T16363] FAULT_INJECTION: forcing a failure. [ 796.839479][T16363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.860520][T16363] CPU: 1 PID: 16363 Comm: syz.2.3906 Not tainted syzkaller #0 [ 796.868032][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 796.878119][T16363] Call Trace: [ 796.881411][T16363] [ 796.884355][T16363] dump_stack_lvl+0x188/0x24e [ 796.889039][T16363] ? show_regs_print_info+0x12/0x12 [ 796.894242][T16363] ? load_image+0x410/0x410 [ 796.898744][T16363] ? __lock_acquire+0x7bd0/0x7bd0 [ 796.903765][T16363] ? snprintf+0xe5/0x140 [ 796.908014][T16363] should_fail_ex+0x390/0x4c0 [ 796.912712][T16363] _copy_to_user+0x2c/0x130 [ 796.917231][T16363] simple_read_from_buffer+0xe3/0x150 [ 796.922642][T16363] proc_fail_nth_read+0x1a6/0x220 [ 796.927701][T16363] ? proc_fault_inject_write+0x310/0x310 [ 796.933361][T16363] ? fsnotify_perm+0x248/0x550 [ 796.938155][T16363] ? proc_fault_inject_write+0x310/0x310 [ 796.943791][T16363] vfs_read+0x2db/0x960 [ 796.947961][T16363] ? kernel_read+0x1e0/0x1e0 [ 796.952562][T16363] ? __fget_files+0x28/0x460 [ 796.957173][T16363] ? __fget_files+0x3fc/0x460 [ 796.961861][T16363] ? __fdget_pos+0x2ae/0x360 [ 796.966456][T16363] ? ksys_read+0x70/0x260 [ 796.970791][T16363] ksys_read+0x14d/0x260 [ 796.975043][T16363] ? vfs_write+0x9a0/0x9a0 [ 796.979469][T16363] ? lockdep_hardirqs_on+0x94/0x140 [ 796.984675][T16363] do_syscall_64+0x4c/0xa0 [ 796.989102][T16363] ? clear_bhb_loop+0x60/0xb0 [ 796.993778][T16363] ? clear_bhb_loop+0x60/0xb0 [ 796.998453][T16363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.004352][T16363] RIP: 0033:0x7fbcf6d5e68e [ 797.008768][T16363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 797.028371][T16363] RSP: 002b:00007fbcf7bd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 797.036785][T16363] RAX: ffffffffffffffda RBX: 00007fbcf7bda6c0 RCX: 00007fbcf6d5e68e [ 797.044759][T16363] RDX: 000000000000000f RSI: 00007fbcf7bda0a0 RDI: 0000000000000004 [ 797.052769][T16363] RBP: 00007fbcf7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 797.060739][T16363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.068709][T16363] R13: 00007fbcf7026038 R14: 00007fbcf7025fa0 R15: 00007fffdc254788 [ 797.076694][T16363] [ 797.232079][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 797.243139][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3910'. [ 797.252454][T16373] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3910'. [ 797.261847][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3910'. [ 797.271317][T16373] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3910'. [ 797.281171][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3910'. [ 797.291090][T16373] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3910'. [ 797.392724][T16377] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3908'. [ 797.481361][T16377] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 797.567272][T16381] FAULT_INJECTION: forcing a failure. [ 797.567272][T16381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.684381][T16381] CPU: 0 PID: 16381 Comm: syz.3.3912 Not tainted syzkaller #0 [ 797.691916][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.702002][T16381] Call Trace: [ 797.705296][T16381] [ 797.708240][T16381] dump_stack_lvl+0x188/0x24e [ 797.712949][T16381] ? show_regs_print_info+0x12/0x12 [ 797.718183][T16381] ? load_image+0x410/0x410 [ 797.722720][T16381] ? __lock_acquire+0x7bd0/0x7bd0 [ 797.727782][T16381] should_fail_ex+0x390/0x4c0 [ 797.732498][T16381] prepare_alloc_pages+0x1e1/0x5b0 [ 797.737650][T16381] __alloc_pages+0x130/0x4f0 [ 797.742271][T16381] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 797.748019][T16381] ? zone_statistics+0x170/0x170 [ 797.752989][T16381] ? __rwlock_init+0x140/0x140 [ 797.757776][T16381] ? alloc_pages+0x36c/0x740 [ 797.762403][T16381] ? do_raw_spin_unlock+0x11d/0x230 [ 797.767628][T16381] __get_free_pages+0x8/0x30 [ 797.772241][T16381] kasan_populate_vmalloc_pte+0x31/0xf0 [ 797.777806][T16381] ? __apply_to_page_range+0x97b/0xd10 [ 797.783290][T16381] __apply_to_page_range+0x98d/0xd10 [ 797.788609][T16381] ? kasan_populate_vmalloc+0x70/0x70 [ 797.794014][T16381] alloc_vmap_area+0x179f/0x18d0 [ 797.799037][T16381] ? vm_map_ram+0xab0/0xab0 [ 797.803598][T16381] ? rcu_is_watching+0x11/0xa0 [ 797.808374][T16381] __get_vm_area_node+0x158/0x330 [ 797.813407][T16381] __vmalloc_node_range+0x357/0x1380 [ 797.818692][T16381] ? array_map_alloc+0x286/0x6f0 [ 797.823626][T16381] ? aa_get_newest_label+0xbc/0x5b0 [ 797.828820][T16381] ? kasan_check_range+0x92/0x290 [ 797.833862][T16381] ? free_vm_area+0x50/0x50 [ 797.838363][T16381] ? apparmor_capable+0x12c/0x190 [ 797.843391][T16381] ? bpf_lsm_capable+0x5/0x10 [ 797.848065][T16381] ? security_capable+0x85/0xb0 [ 797.852913][T16381] bpf_map_area_alloc+0xd4/0xe0 [ 797.857762][T16381] ? array_map_alloc+0x286/0x6f0 [ 797.862698][T16381] array_map_alloc+0x286/0x6f0 [ 797.867475][T16381] map_create+0x524/0xff0 [ 797.871807][T16381] ? security_bpf+0x7a/0xa0 [ 797.876488][T16381] __sys_bpf+0x38b/0x780 [ 797.880731][T16381] ? bpf_link_show_fdinfo+0x380/0x380 [ 797.886125][T16381] ? lock_chain_count+0x20/0x20 [ 797.891324][T16381] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 797.897322][T16381] __x64_sys_bpf+0x78/0x90 [ 797.901742][T16381] do_syscall_64+0x4c/0xa0 [ 797.906158][T16381] ? clear_bhb_loop+0x60/0xb0 [ 797.910834][T16381] ? clear_bhb_loop+0x60/0xb0 [ 797.915541][T16381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.921526][T16381] RIP: 0033:0x7f472e79de59 [ 797.925941][T16381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.945547][T16381] RSP: 002b:00007f472f686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.953960][T16381] RAX: ffffffffffffffda RBX: 00007f472ea25fa0 RCX: 00007f472e79de59 [ 797.961934][T16381] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 0000000000000000 [ 797.969907][T16381] RBP: 00007f472f686090 R08: 0000000000000000 R09: 0000000000000000 [ 797.977873][T16381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.985840][T16381] R13: 00007f472ea26038 R14: 00007f472ea25fa0 R15: 00007fff2bbace88 [ 797.993822][T16381] [ 798.559163][T16398] wlan1: mtu greater than device maximum [ 800.587881][T16452] netlink: 'syz.4.3936': attribute type 29 has an invalid length. [ 800.598628][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 800.611013][T16452] netlink: 'syz.4.3936': attribute type 29 has an invalid length. [ 800.622475][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 802.152489][T16486] netlink: 'syz.4.3949': attribute type 3 has an invalid length. [ 802.269154][T16490] netlink: 'syz.3.3951': attribute type 29 has an invalid length. [ 802.291197][T16490] netlink: 'syz.3.3951': attribute type 29 has an invalid length. [ 802.493693][T16498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 802.501234][T16498] IPv6: NLM_F_CREATE should be set when creating new route [ 802.508821][T16498] IPv6: NLM_F_CREATE should be set when creating new route [ 802.516310][T16498] IPv6: NLM_F_CREATE should be set when creating new route [ 803.008751][T16517] IPv6: pim6reg1: Disabled Multicast RS [ 803.980642][T16524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.987978][T16524] IPv6: NLM_F_CREATE should be set when creating new route [ 803.995309][T16524] IPv6: NLM_F_CREATE should be set when creating new route [ 804.002737][T16524] IPv6: NLM_F_CREATE should be set when creating new route [ 804.208722][T16531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 804.216034][T16531] IPv6: NLM_F_CREATE should be set when creating new route [ 804.223298][T16531] IPv6: NLM_F_CREATE should be set when creating new route [ 804.230617][T16531] IPv6: NLM_F_CREATE should be set when creating new route [ 804.391821][T16538] netlink: 'syz.3.3968': attribute type 3 has an invalid length. [ 804.403000][T16538] __nla_validate_parse: 1 callbacks suppressed [ 804.403033][T16538] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3968'. [ 804.575256][T16546] netlink: 'syz.0.3971': attribute type 1 has an invalid length. [ 806.254040][T16583] netlink: 'syz.0.3984': attribute type 3 has an invalid length. [ 806.301057][T16583] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3984'. [ 807.141662][T16588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.149030][T16588] IPv6: NLM_F_CREATE should be set when creating new route [ 807.156552][T16588] IPv6: NLM_F_CREATE should be set when creating new route [ 807.164021][T16588] IPv6: NLM_F_CREATE should be set when creating new route [ 807.617951][T16604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.625941][T16604] IPv6: NLM_F_CREATE should be set when creating new route [ 807.633430][T16604] IPv6: NLM_F_CREATE should be set when creating new route [ 807.867041][T16615] netlink: 'syz.3.3995': attribute type 3 has an invalid length. [ 807.918908][T16615] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3995'. [ 808.519270][T16616] netlink: 'syz.3.3995': attribute type 21 has an invalid length. [ 808.551680][T16616] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3995'. [ 808.576016][T16616] netlink: 'syz.3.3995': attribute type 4 has an invalid length. [ 808.590893][T16616] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3995'. [ 808.602987][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.603042][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.664704][T16619] netlink: 'syz.0.3996': attribute type 10 has an invalid length. [ 808.740047][T16619] team0: Device ipvlan1 failed to register rx_handler [ 808.889904][T16627] netlink: 'syz.1.4000': attribute type 3 has an invalid length. [ 808.904300][T16627] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4000'. [ 808.934518][T16629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 808.942059][T16629] IPv6: NLM_F_CREATE should be set when creating new route [ 809.516500][T16647] netlink: 'syz.0.4007': attribute type 25 has an invalid length. [ 809.603460][T16647] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 810.644706][T16662] device syzkaller0 entered promiscuous mode [ 810.829747][T16668] netlink: 'syz.1.4015': attribute type 3 has an invalid length. [ 810.896650][T16668] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4015'. [ 811.283415][T16681] netlink: 'syz.0.4020': attribute type 25 has an invalid length. [ 811.723287][T16686] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 811.747951][T16691] netlink: 'syz.4.4023': attribute type 10 has an invalid length. [ 811.769991][T16691] team0: Device ipvlan1 failed to register rx_handler [ 811.823951][T16692] netlink: 'syz.3.4024': attribute type 10 has an invalid length. [ 811.848167][T16692] team0: Device ipvlan1 failed to register rx_handler [ 812.797743][T16713] netlink: 'syz.0.4032': attribute type 3 has an invalid length. [ 812.833191][T16713] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4032'. [ 813.318716][T16731] netlink: 'syz.2.4038': attribute type 10 has an invalid length. [ 813.333972][T16731] team0: Device ipvlan1 failed to register rx_handler [ 813.386397][T16728] netlink: 'syz.1.4036': attribute type 25 has an invalid length. [ 813.450627][T16728] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 813.562026][T16735] netlink: 'syz.4.4040': attribute type 10 has an invalid length. [ 813.574794][T16735] team0: Device ipvlan1 failed to register rx_handler [ 813.608331][T16738] netlink: 'syz.2.4041': attribute type 10 has an invalid length. [ 813.640964][T16738] team0: Device ipvlan1 failed to register rx_handler [ 813.784570][T14632] wlan1: Trigger new scan to find an IBSS to join [ 814.612092][T16759] FAULT_INJECTION: forcing a failure. [ 814.612092][T16759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.656298][T16759] CPU: 0 PID: 16759 Comm: syz.0.4048 Not tainted syzkaller #0 [ 814.663824][T16759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.674162][T16759] Call Trace: [ 814.677455][T16759] [ 814.680404][T16759] dump_stack_lvl+0x188/0x24e [ 814.685111][T16759] ? show_regs_print_info+0x12/0x12 [ 814.690327][T16759] ? load_image+0x410/0x410 [ 814.694870][T16759] ? __lock_acquire+0x7bd0/0x7bd0 [ 814.699930][T16759] should_fail_ex+0x390/0x4c0 [ 814.704630][T16759] _copy_from_user+0x2c/0x170 [ 814.709332][T16759] iovec_from_user+0x143/0x360 [ 814.714134][T16759] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 814.720327][T16759] __import_iovec+0x6c/0x510 [ 814.725033][T16759] ? ___sys_recvmsg+0x3b1/0x590 [ 814.729906][T16759] ? ___sys_recvmsg+0x495/0x590 [ 814.734782][T16759] import_iovec+0x6f/0xa0 [ 814.739152][T16759] ___sys_recvmsg+0x4b2/0x590 [ 814.743922][T16759] ? __sys_recvmsg+0x2a0/0x2a0 [ 814.748712][T16759] ? __fget_files+0x28/0x460 [ 814.753334][T16759] ? __fget_files+0x3fc/0x460 [ 814.758044][T16759] __x64_sys_recvmsg+0x20d/0x2e0 [ 814.763004][T16759] ? ___sys_recvmsg+0x590/0x590 [ 814.767902][T16759] ? lockdep_hardirqs_on+0x94/0x140 [ 814.773126][T16759] do_syscall_64+0x4c/0xa0 [ 814.777558][T16759] ? clear_bhb_loop+0x60/0xb0 [ 814.782248][T16759] ? clear_bhb_loop+0x60/0xb0 [ 814.786931][T16759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.792835][T16759] RIP: 0033:0x7f965b99de59 [ 814.797262][T16759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.816899][T16759] RSP: 002b:00007f965c911028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 814.825351][T16759] RAX: ffffffffffffffda RBX: 00007f965bc25fa0 RCX: 00007f965b99de59 [ 814.833350][T16759] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000006 [ 814.841332][T16759] RBP: 00007f965c911090 R08: 0000000000000000 R09: 0000000000000000 [ 814.849319][T16759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.857285][T16759] R13: 00007f965bc26038 R14: 00007f965bc25fa0 R15: 00007fff42ec0108 [ 814.865277][T16759] [ 815.270089][T16775] netlink: 'syz.1.4053': attribute type 10 has an invalid length. [ 815.350567][T16775] team0: Device ipvlan1 failed to register rx_handler [ 815.416763][T16773] netlink: 'syz.4.4052': attribute type 25 has an invalid length. [ 815.443127][T16776] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 815.621390][T16781] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 815.785449][T14632] wlan1: Trigger new scan to find an IBSS to join [ 816.391975][T16802] can: request_module (can-proto-0) failed. [ 817.786118][ T11] wlan1: Trigger new scan to find an IBSS to join [ 818.249457][T16831] validate_nla: 1 callbacks suppressed [ 818.249511][T16831] netlink: 'syz.4.4068': attribute type 25 has an invalid length. [ 818.335609][T16835] netlink: 'syz.1.4069': attribute type 10 has an invalid length. [ 818.364605][T16835] team0: Device ipvlan1 failed to register rx_handler [ 818.405464][T16831] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 818.471988][T16842] netlink: 'syz.3.4081': attribute type 3 has an invalid length. [ 818.585215][T16842] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4081'. [ 818.908108][ T11] wlan1: Trigger new scan to find an IBSS to join [ 818.914689][T14632] wlan1: Trigger new scan to find an IBSS to join [ 819.087885][T16856] FAULT_INJECTION: forcing a failure. [ 819.087885][T16856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.132847][T16856] CPU: 0 PID: 16856 Comm: syz.2.4074 Not tainted syzkaller #0 [ 819.140382][T16856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.150439][T16856] Call Trace: [ 819.153739][T16856] [ 819.156680][T16856] dump_stack_lvl+0x188/0x24e [ 819.161385][T16856] ? show_regs_print_info+0x12/0x12 [ 819.166601][T16856] ? load_image+0x410/0x410 [ 819.171119][T16856] ? __lock_acquire+0x7bd0/0x7bd0 [ 819.176165][T16856] should_fail_ex+0x390/0x4c0 [ 819.180865][T16856] _copy_to_user+0x2c/0x130 [ 819.185370][T16856] bpf_test_finish+0x198/0x600 [ 819.190171][T16856] ? convert_skb_to___skb+0x420/0x420 [ 819.195567][T16856] ? __build_skb+0x24b/0x3b0 [ 819.200155][T16856] bpf_prog_test_run_skb+0x1129/0x18e0 [ 819.205626][T16856] ? cpu_online+0xa0/0xa0 [ 819.209958][T16856] bpf_prog_test_run+0x31c/0x390 [ 819.214913][T16856] __sys_bpf+0x62b/0x780 [ 819.219190][T16856] ? bpf_link_show_fdinfo+0x380/0x380 [ 819.224605][T16856] ? lock_chain_count+0x20/0x20 [ 819.229481][T16856] __x64_sys_bpf+0x78/0x90 [ 819.233909][T16856] do_syscall_64+0x4c/0xa0 [ 819.238326][T16856] ? clear_bhb_loop+0x60/0xb0 [ 819.242999][T16856] ? clear_bhb_loop+0x60/0xb0 [ 819.247677][T16856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.253575][T16856] RIP: 0033:0x7fbcf6d9de59 [ 819.258007][T16856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.277620][T16856] RSP: 002b:00007fbcf7bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 819.286034][T16856] RAX: ffffffffffffffda RBX: 00007fbcf7025fa0 RCX: 00007fbcf6d9de59 [ 819.294011][T16856] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 819.301983][T16856] RBP: 00007fbcf7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 819.309949][T16856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.317919][T16856] R13: 00007fbcf7026038 R14: 00007fbcf7025fa0 R15: 00007fffdc254788 [ 819.325902][T16856] [ 819.974620][T11865] wlan1: Creating new IBSS network, BSSID c2:be:76:80:4c:f6 [ 820.828720][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 822.330593][T16884] netlink: 'syz.0.4083': attribute type 10 has an invalid length. [ 822.342941][T16884] team0: Device ipvlan1 failed to register rx_handler [ 822.380908][T16886] netlink: 'syz.2.4084': attribute type 25 has an invalid length. [ 822.403360][T16887] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 822.431186][T16890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4085'. [ 822.471278][T16890] device caif0 entered promiscuous mode [ 822.493009][T16890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 822.744715][T14632] wlan1: Trigger new scan to find an IBSS to join [ 823.708220][ T9] wlan1: Creating new IBSS network, BSSID ca:df:34:e5:9c:2b [ 823.742785][T16914] netlink: 'syz.2.4097': attribute type 10 has an invalid length. [ 823.767021][T16914] team0: Device ipvlan1 failed to register rx_handler [ 823.818847][T16919] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 823.865011][T16919] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4098'. [ 823.880012][T16924] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4099'. [ 824.699451][T16929] netlink: 'syz.2.4100': attribute type 25 has an invalid length. [ 824.752415][T16932] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 825.059682][T16938] netlink: 'syz.4.4102': attribute type 10 has an invalid length. [ 825.132355][T16938] team0: Device ipvlan1 failed to register rx_handler [ 825.919967][T16955] netlink: 'syz.0.4108': attribute type 29 has an invalid length. [ 825.928638][T16955] netlink: 'syz.0.4108': attribute type 29 has an invalid length. [ 825.938099][T16955] netlink: 'syz.0.4108': attribute type 29 has an invalid length. [ 825.947399][T16955] netlink: 'syz.0.4108': attribute type 29 has an invalid length. [ 826.020923][T16955] netlink: 'syz.0.4108': attribute type 29 has an invalid length. [ 826.034345][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 826.050527][T16958] netlink: 'syz.1.4110': attribute type 10 has an invalid length. [ 826.101501][T16958] team0: Device ipvlan1 failed to register rx_handler [ 826.413269][T16969] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 826.429097][T16970] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4114'. [ 826.824379][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 828.746858][ T11] wlan1: Trigger new scan to find an IBSS to join [ 829.547102][T17009] validate_nla: 2 callbacks suppressed [ 829.547121][T17009] netlink: 'syz.1.4126': attribute type 25 has an invalid length. [ 829.608754][T17010] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 829.785693][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 830.990456][T17045] netlink: 'syz.3.4139': attribute type 3 has an invalid length. [ 831.019639][T17045] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4139'. [ 831.096761][T17040] netlink: 160940 bytes leftover after parsing attributes in process `syz.2.4137'. [ 831.280406][T17050] netlink: 'syz.0.4140': attribute type 25 has an invalid length. [ 831.791261][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 831.791280][ T11] wlan1: Trigger new scan to find an IBSS to join [ 832.744745][ T9] wlan1: Creating new IBSS network, BSSID 3a:b7:5e:b3:8d:ad [ 833.158896][T17051] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 833.184351][T17061] netlink: 'syz.4.4144': attribute type 10 has an invalid length. [ 833.194026][T17061] team0: Device ipvlan1 failed to register rx_handler [ 833.322279][T17071] netlink: 'syz.2.4148': attribute type 27 has an invalid length. [ 833.355394][T17071] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4148'. [ 833.428468][T17077] netlink: 'syz.3.4160': attribute type 10 has an invalid length. [ 833.477251][T17077] team0: Device ipvlan1 failed to register rx_handler [ 834.660859][T17103] netlink: 'syz.4.4157': attribute type 25 has an invalid length. [ 834.721710][T17103] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 834.749338][T17105] netlink: 'syz.1.4156': attribute type 21 has an invalid length. [ 834.768986][T17105] netlink: 'syz.1.4156': attribute type 7 has an invalid length. [ 834.824416][ T11] wlan1: Trigger new scan to find an IBSS to join [ 834.980508][T17111] netlink: 'syz.3.4161': attribute type 3 has an invalid length. [ 835.019778][T17111] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4161'. [ 835.782022][T17124] netlink: 'syz.2.4167': attribute type 4 has an invalid length. [ 835.790597][T11865] wlan1: Trigger new scan to find an IBSS to join [ 835.841433][T17124] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4167'. [ 837.784530][ T4373] wlan1: Creating new IBSS network, BSSID 6a:a0:20:a3:6a:13 [ 838.431604][T17136] netlink: 'syz.0.4171': attribute type 25 has an invalid length. [ 838.440215][T17140] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 838.455050][T17159] netlink: 'syz.2.4178': attribute type 25 has an invalid length. [ 838.463045][T17159] netlink: 'syz.2.4178': attribute type 28 has an invalid length. [ 838.596384][T17163] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4179'. [ 839.727808][T17197] netlink: 'syz.1.4191': attribute type 25 has an invalid length. [ 840.357708][T17208] FAULT_INJECTION: forcing a failure. [ 840.357708][T17208] name failslab, interval 1, probability 0, space 0, times 0 [ 840.434103][T17208] CPU: 1 PID: 17208 Comm: syz.2.4195 Not tainted syzkaller #0 [ 840.441628][T17208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 840.451713][T17208] Call Trace: [ 840.455021][T17208] [ 840.457979][T17208] dump_stack_lvl+0x188/0x24e [ 840.462711][T17208] ? show_regs_print_info+0x12/0x12 [ 840.467936][T17208] ? load_image+0x410/0x410 [ 840.472473][T17208] ? __lock_acquire+0x7bd0/0x7bd0 [ 840.477524][T17208] ? perf_trace_lock+0xf8/0x390 [ 840.482411][T17208] should_fail_ex+0x390/0x4c0 [ 840.487121][T17208] should_failslab+0x5/0x20 [ 840.491647][T17208] slab_pre_alloc_hook+0x59/0x300 [ 840.496703][T17208] ? mark_lock+0x94/0x320 [ 840.501062][T17208] ? ip_setup_cork+0x223/0x850 [ 840.505850][T17208] __kmem_cache_alloc_node+0x4f/0x270 [ 840.511249][T17208] ? ip_setup_cork+0x223/0x850 [ 840.516056][T17208] kmalloc_trace+0x26/0xe0 [ 840.520572][T17208] ip_setup_cork+0x223/0x850 [ 840.525165][T17208] ip_append_data+0x15a/0x1a0 [ 840.529840][T17208] ? raw_send_hdrinc+0x1130/0x1130 [ 840.534954][T17208] raw_sendmsg+0x12c8/0x1940 [ 840.539556][T17208] ? compat_raw_ioctl+0x60/0x60 [ 840.544420][T17208] ? __might_fault+0xa6/0x120 [ 840.549100][T17208] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 840.555522][T17208] ? sock_rps_record_flow+0x19/0x3f0 [ 840.560807][T17208] ? inet_sendmsg+0x7a/0x2a0 [ 840.565396][T17208] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 840.570677][T17208] ? inet_send_prepare+0x250/0x250 [ 840.575789][T17208] ____sys_sendmsg+0x5ed/0x9a0 [ 840.580556][T17208] ? __lock_acquire+0x7bd0/0x7bd0 [ 840.585592][T17208] ? __sys_sendmsg_sock+0x30/0x30 [ 840.590615][T17208] ? __import_iovec+0x306/0x510 [ 840.595473][T17208] ? import_iovec+0x6f/0xa0 [ 840.599979][T17208] ___sys_sendmsg+0x2a2/0x360 [ 840.604668][T17208] ? __sys_sendmsg+0x2a0/0x2a0 [ 840.609458][T17208] ? __lock_acquire+0x7bd0/0x7bd0 [ 840.614513][T17208] __se_sys_sendmsg+0x1c3/0x2b0 [ 840.619362][T17208] ? __x64_sys_sendmsg+0x80/0x80 [ 840.624313][T17208] ? lockdep_hardirqs_on+0x94/0x140 [ 840.629518][T17208] do_syscall_64+0x4c/0xa0 [ 840.633928][T17208] ? clear_bhb_loop+0x60/0xb0 [ 840.638598][T17208] ? clear_bhb_loop+0x60/0xb0 [ 840.643277][T17208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.649209][T17208] RIP: 0033:0x7fbcf6d9de59 [ 840.653637][T17208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.673249][T17208] RSP: 002b:00007fbcf7bda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.681668][T17208] RAX: ffffffffffffffda RBX: 00007fbcf7025fa0 RCX: 00007fbcf6d9de59 [ 840.689639][T17208] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 840.697606][T17208] RBP: 00007fbcf7bda090 R08: 0000000000000000 R09: 0000000000000000 [ 840.705577][T17208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.713549][T17208] R13: 00007fbcf7026038 R14: 00007fbcf7025fa0 R15: 00007fffdc254788 [ 840.721565][T17208] [ 840.754226][ T9] wlan1: Trigger new scan to find an IBSS to join [ 842.592317][T17203] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 842.607774][T17213] bond0: (slave team0): Error: Slave device does not support XDP [ 842.882831][T17220] netlink: 'syz.1.4208': attribute type 25 has an invalid length. [ 842.965180][T17227] netlink: 'syz.4.4200': attribute type 12 has an invalid length. [ 843.120689][T17220] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 843.757384][T17244] netlink: 'syz.3.4206': attribute type 1 has an invalid length. [ 843.785849][T17244] netlink: 'syz.3.4206': attribute type 1 has an invalid length. [ 843.793805][T17244] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.4206'. [ 844.390458][T17259] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4211'. [ 844.747125][T11865] wlan1: Trigger new scan to find an IBSS to join [ 844.771215][T17264] netlink: 'syz.3.4212': attribute type 2 has an invalid length. [ 844.803026][T17264] netlink: 'syz.3.4212': attribute type 8 has an invalid length. [ 844.911804][T17264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4212'. [ 844.953801][T17274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4216'. [ 845.168730][T17276] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4216'. [ 845.201531][T17276] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 845.261011][ T4332] bridge0: port 3(team0) entered disabled state [ 845.338829][T17280] netlink: 'syz.0.4217': attribute type 25 has an invalid length. [ 845.453410][T17281] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 845.784333][T11865] wlan1: Trigger new scan to find an IBSS to join [ 846.277808][T17311] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4227'. [ 846.470249][T17320] netlink: 'syz.0.4232': attribute type 25 has an invalid length. [ 846.544782][T17320] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 846.929473][T17333] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.4237'. [ 847.844834][T17330] device syzkaller0 entered promiscuous mode [ 848.824338][ T11] wlan1: Trigger new scan to find an IBSS to join [ 848.831164][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 850.557548][T17356] netlink: 'syz.4.4245': attribute type 25 has an invalid length. [ 850.570417][T17361] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 850.982506][T17384] netlink: 'syz.2.4255': attribute type 39 has an invalid length. [ 851.680702][T17401] netlink: 'syz.3.4261': attribute type 25 has an invalid length. [ 851.739524][T17401] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 851.784491][T11865] wlan1: Trigger new scan to find an IBSS to join [ 851.785628][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 852.167487][T17421] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4274'. [ 852.329519][T17409] device syzkaller0 entered promiscuous mode [ 852.352853][T17421] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 852.374324][T17421] CPU: 1 PID: 17421 Comm: syz.1.4274 Not tainted syzkaller #0 [ 852.381869][T17421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.391959][T17421] Call Trace: [ 852.395244][T17421] [ 852.398179][T17421] dump_stack_lvl+0x188/0x24e [ 852.402871][T17421] ? show_regs_print_info+0x12/0x12 [ 852.408072][T17421] ? load_image+0x410/0x410 [ 852.412596][T17421] sysfs_warn_dup+0x8a/0xa0 [ 852.417109][T17421] sysfs_do_create_link_sd+0xc0/0x110 [ 852.422489][T17421] device_add+0x83b/0x1050 [ 852.426915][T17421] wiphy_register+0x1d8b/0x2aa0 [ 852.431791][T17421] ? cfg80211_event_work+0x40/0x40 [ 852.436912][T17421] ? minstrel_ht_alloc+0x894/0xa20 [ 852.442032][T17421] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 852.448105][T17421] ieee80211_register_hw+0x2d48/0x39f0 [ 852.453580][T17421] ? ieee80211_register_hw+0xed1/0x39f0 [ 852.459128][T17421] ? ieee80211_register_hw+0xed1/0x39f0 [ 852.464686][T17421] ? ieee80211_tasklet_handler+0x20/0x20 [ 852.470335][T17421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 852.476243][T17421] ? __debug_object_init+0xed/0x440 [ 852.481454][T17421] ? memset+0x1e/0x40 [ 852.485441][T17421] ? __hrtimer_init+0x189/0x270 [ 852.490307][T17421] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 852.496046][T17421] ? memcpy+0x3c/0x60 [ 852.500036][T17421] hwsim_new_radio_nl+0xab7/0xc90 [ 852.505081][T17421] genl_family_rcv_msg_doit+0x22f/0x350 [ 852.510634][T17421] ? end_current_label_crit_section+0x170/0x170 [ 852.516883][T17421] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 852.522798][T17421] ? bpf_lsm_capable+0x5/0x10 [ 852.527602][T17421] ? security_capable+0x85/0xb0 [ 852.532472][T17421] genl_rcv_msg+0x601/0x790 [ 852.536994][T17421] ? genl_bind+0x360/0x360 [ 852.541416][T17421] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 852.547774][T17421] netlink_rcv_skb+0x1ef/0x440 [ 852.552548][T17421] ? genl_bind+0x360/0x360 [ 852.556979][T17421] ? netlink_ack+0x1160/0x1160 [ 852.561889][T17421] ? down_read+0x1a8/0x2d0 [ 852.566322][T17421] genl_rcv+0x24/0x40 [ 852.570316][T17421] netlink_unicast+0x7ad/0x920 [ 852.575102][T17421] netlink_sendmsg+0x8ad/0xbd0 [ 852.579885][T17421] ? netlink_getsockopt+0x550/0x550 [ 852.585101][T17421] ? aa_sock_msg_perm+0x94/0x150 [ 852.590055][T17421] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 852.595377][T17421] ? security_socket_sendmsg+0x7c/0xa0 [ 852.601058][T17421] ? netlink_getsockopt+0x550/0x550 [ 852.606271][T17421] ____sys_sendmsg+0x5ed/0x9a0 [ 852.611083][T17421] ? __sys_sendmsg_sock+0x30/0x30 [ 852.616135][T17421] ? __import_iovec+0x306/0x510 [ 852.621008][T17421] ? import_iovec+0x6f/0xa0 [ 852.625518][T17421] ___sys_sendmsg+0x2a2/0x360 [ 852.630219][T17421] ? __sys_sendmsg+0x2a0/0x2a0 [ 852.635029][T17421] __se_sys_sendmsg+0x1c3/0x2b0 [ 852.639893][T17421] ? __x64_sys_sendmsg+0x80/0x80 [ 852.644850][T17421] ? lockdep_hardirqs_on+0x94/0x140 [ 852.650058][T17421] do_syscall_64+0x4c/0xa0 [ 852.654487][T17421] ? clear_bhb_loop+0x60/0xb0 [ 852.659168][T17421] ? clear_bhb_loop+0x60/0xb0 [ 852.663849][T17421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.669755][T17421] RIP: 0033:0x7fe00e99de59 [ 852.674182][T17421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.693797][T17421] RSP: 002b:00007fe00c3f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.702216][T17421] RAX: ffffffffffffffda RBX: 00007fe00ec26360 RCX: 00007fe00e99de59 [ 852.710196][T17421] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 852.718172][T17421] RBP: 00007fe00ea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 852.726144][T17421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.734119][T17421] R13: 00007fe00ec263f8 R14: 00007fe00ec26360 R15: 00007ffc2797ddc8 [ 852.742112][T17421] [ 853.171615][ T11] wlan1: Creating new IBSS network, BSSID ae:f7:ea:e9:81:3e [ 853.784305][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 855.524149][T17448] netlink: 'syz.0.4277': attribute type 25 has an invalid length. [ 855.532631][T17449] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 855.719558][T17452] netlink: 'syz.4.4278': attribute type 5 has an invalid length. [ 856.759704][T17472] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.4284'. [ 856.872213][T17472] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 857.203323][T17478] netlink: 'syz.4.4288': attribute type 3 has an invalid length. [ 857.275753][T17478] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4288'. [ 857.604468][T17485] netlink: 'syz.2.4290': attribute type 25 has an invalid length. [ 857.617230][T17490] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 857.794567][ T9] wlan1: Trigger new scan to find an IBSS to join [ 857.802044][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 857.958145][T17494] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4291'. [ 859.801202][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 859.808314][T11865] wlan1: Creating new IBSS network, BSSID aa:37:ba:11:8c:96 [ 860.831561][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 862.404406][T17527] device sit0 entered promiscuous mode [ 862.434318][T17494] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 862.589431][T17534] netlink: 'syz.0.4303': attribute type 25 has an invalid length. [ 862.638498][T17534] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 862.832950][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 863.274476][T17563] netlink: 'syz.3.4314': attribute type 3 has an invalid length. [ 863.295139][T17563] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4314'. [ 864.059372][T17573] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4318'. [ 864.824350][ T11] wlan1: Trigger new scan to find an IBSS to join [ 865.679308][T17571] netlink: 'syz.1.4317': attribute type 2 has an invalid length. [ 865.687590][T17571] netlink: 'syz.1.4317': attribute type 8 has an invalid length. [ 865.697120][T17571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4317'. [ 865.710286][T17573] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 865.733227][T17593] netlink: 'syz.4.4321': attribute type 25 has an invalid length. [ 865.749384][T17594] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 865.794523][ T11] wlan1: Trigger new scan to find an IBSS to join [ 866.583380][T17615] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4328'. [ 866.863029][ T4302] wlan1: Creating new IBSS network, BSSID 7a:73:9b:63:d9:a7 [ 867.159464][T17623] netlink: 'syz.2.4333': attribute type 25 has an invalid length. [ 867.210376][T17627] netlink: 'syz.1.4332': attribute type 2 has an invalid length. [ 867.289122][T17623] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 867.339311][T17630] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.4337'. [ 867.339986][T17636] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4335'. [ 867.349333][T17630] netlink: zone id is out of range [ 867.364377][T17630] netlink: zone id is out of range [ 867.369881][T17630] netlink: zone id is out of range [ 867.384422][T17636] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 867.393608][T17636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 867.417589][T17630] netlink: zone id is out of range [ 867.427388][T17630] netlink: zone id is out of range [ 867.442771][T17630] netlink: zone id is out of range [ 867.469934][T17630] netlink: zone id is out of range [ 867.485411][T17636] netlink: 'syz.4.4335': attribute type 13 has an invalid length. [ 867.495591][T17630] netlink: get zone limit has 8 unknown bytes [ 867.507738][T17636] netlink: 'syz.4.4335': attribute type 58 has an invalid length. [ 867.544795][T17636] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4335'. [ 867.792367][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 868.262185][T17665] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 868.506324][T17672] FAULT_INJECTION: forcing a failure. [ 868.506324][T17672] name failslab, interval 1, probability 0, space 0, times 0 [ 868.534497][T17672] CPU: 1 PID: 17672 Comm: syz.4.4350 Not tainted syzkaller #0 [ 868.542015][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 868.552093][T17672] Call Trace: [ 868.555385][T17672] [ 868.558327][T17672] dump_stack_lvl+0x188/0x24e [ 868.563028][T17672] ? show_regs_print_info+0x12/0x12 [ 868.568250][T17672] ? load_image+0x410/0x410 [ 868.572789][T17672] ? __might_sleep+0xd0/0xd0 [ 868.577399][T17672] ? __lock_acquire+0x7bd0/0x7bd0 [ 868.582461][T17672] should_fail_ex+0x390/0x4c0 [ 868.587163][T17672] should_failslab+0x5/0x20 [ 868.591685][T17672] slab_pre_alloc_hook+0x59/0x300 [ 868.596738][T17672] ? do_syscall_64+0x4c/0xa0 [ 868.601348][T17672] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.607447][T17672] kmem_cache_alloc_node+0x5a/0x310 [ 868.612678][T17672] ? __alloc_skb+0xf9/0x7d0 [ 868.617226][T17672] __alloc_skb+0xf9/0x7d0 [ 868.621577][T17672] netlink_dump+0x1e1/0xcd0 [ 868.626122][T17672] ? netlink_lookup+0x200/0x200 [ 868.631001][T17672] ? __inet_diag_dump_start+0x805/0x970 [ 868.636590][T17672] __netlink_dump_start+0x52c/0x6f0 [ 868.641888][T17672] inet_diag_handler_cmd+0x1d2/0x2b0 [ 868.647206][T17672] ? inet_diag_unregister+0xb0/0xb0 [ 868.652427][T17672] ? __mutex_trylock_common+0x15c/0x260 [ 868.657994][T17672] ? inet_diag_handler_get_info+0xb90/0xb90 [ 868.663922][T17672] ? inet_diag_dump_start+0x20/0x20 [ 868.669145][T17672] ? inet_diag_dump+0x50/0x50 [ 868.673853][T17672] ? sock_diag_lock_handler+0x19/0x280 [ 868.679342][T17672] ? inet_diag_unregister+0xb0/0xb0 [ 868.684562][T17672] sock_diag_rcv_msg+0x3c7/0x5e0 [ 868.689530][T17672] netlink_rcv_skb+0x1ef/0x440 [ 868.694316][T17672] ? sock_diag_bind+0xa0/0xa0 [ 868.699015][T17672] ? netlink_ack+0x1160/0x1160 [ 868.703804][T17672] ? netlink_deliver_tap+0x2e/0x1b0 [ 868.709021][T17672] sock_diag_rcv+0x26/0x40 [ 868.713454][T17672] netlink_unicast+0x7ad/0x920 [ 868.718234][T17672] netlink_sendmsg+0x8ad/0xbd0 [ 868.723014][T17672] ? netlink_getsockopt+0x550/0x550 [ 868.728221][T17672] ? aa_sock_msg_perm+0x94/0x150 [ 868.733168][T17672] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 868.738460][T17672] ? security_socket_sendmsg+0x7c/0xa0 [ 868.743922][T17672] ? netlink_getsockopt+0x550/0x550 [ 868.749137][T17672] ____sys_sendmsg+0x5ed/0x9a0 [ 868.753917][T17672] ? __sys_sendmsg_sock+0x30/0x30 [ 868.758948][T17672] ? __import_iovec+0x306/0x510 [ 868.763818][T17672] ? import_iovec+0x6f/0xa0 [ 868.768344][T17672] ___sys_sendmsg+0x2a2/0x360 [ 868.773040][T17672] ? __sys_sendmsg+0x2a0/0x2a0 [ 868.777837][T17672] ? trace_call_bpf+0xbf/0x6b0 [ 868.782641][T17672] __se_sys_sendmsg+0x1c3/0x2b0 [ 868.787503][T17672] ? ct_nmi_exit+0x145/0x1c0 [ 868.792109][T17672] ? __x64_sys_sendmsg+0x80/0x80 [ 868.797075][T17672] ? lockdep_hardirqs_on+0x94/0x140 [ 868.802297][T17672] do_syscall_64+0x4c/0xa0 [ 868.806720][T17672] ? clear_bhb_loop+0x60/0xb0 [ 868.811398][T17672] ? clear_bhb_loop+0x60/0xb0 [ 868.816084][T17672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.822010][T17672] RIP: 0033:0x7f188dd9de59 [ 868.826433][T17672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.846062][T17672] RSP: 002b:00007f188ec52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.854485][T17672] RAX: ffffffffffffffda RBX: 00007f188e025fa0 RCX: 00007f188dd9de59 [ 868.862471][T17672] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 868.870452][T17672] RBP: 00007f188ec52090 R08: 0000000000000000 R09: 0000000000000000 [ 868.878426][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.886488][T17672] R13: 00007f188e026038 R14: 00007f188e025fa0 R15: 00007fff067d57f8 [ 868.894487][T17672] [ 868.975276][T17669] netlink: 'syz.3.4349': attribute type 25 has an invalid length. [ 869.008010][T17670] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 869.161272][T17675] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 869.183882][T17679] netlink: 'syz.0.4353': attribute type 3 has an invalid length. [ 869.195380][T17679] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4353'. [ 869.243369][T17679] netlink: 'syz.0.4353': attribute type 21 has an invalid length. [ 869.282511][T17679] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4353'. [ 869.300167][T17679] netlink: 'syz.0.4353': attribute type 4 has an invalid length. [ 869.354907][T17679] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4353'. [ 869.784217][ T4373] wlan1: Trigger new scan to find an IBSS to join [ 870.029142][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.035574][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.289234][T17708] netlink: 'syz.3.4365': attribute type 25 has an invalid length. [ 870.656121][T17714] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 871.016431][T17722] netlink: 'syz.2.4370': attribute type 10 has an invalid length. [ 871.794406][T14632] wlan1: Trigger new scan to find an IBSS to join [ 872.107026][T17721] netlink: 'syz.4.4368': attribute type 2 has an invalid length. [ 872.373855][T17755] netlink: 'syz.3.4381': attribute type 25 has an invalid length. [ 872.824382][T14632] wlan1: Trigger new scan to find an IBSS to join [ 873.220348][T11865] wlan1: Creating new IBSS network, BSSID aa:5b:23:d6:4b:dc [ 873.234236][T17759] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 873.539662][T17783] netlink: 'syz.2.4389': attribute type 2 has an invalid length. [ 874.183844][T17797] netlink: 'syz.2.4397': attribute type 25 has an invalid length. [ 875.803747][T14632] wlan1: Trigger new scan to find an IBSS to join [ 875.869037][ T9] wlan1: Creating new IBSS network, BSSID fa:ce:b3:24:62:fe [ 875.885996][T17804] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 875.895956][ T4373] ------------[ cut here ]------------ [ 875.901860][ T4373] WARNING: CPU: 1 PID: 4373 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 875.911794][ T4373] Modules linked in: [ 875.915757][ T4373] CPU: 1 PID: 4373 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 875.923350][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 875.933471][ T4373] Workqueue: cfg80211 cfg80211_event_work [ 875.939266][ T4373] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 875.945503][ T4373] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 d7 ef f7 0f 0b eb bf e8 a7 d7 ef f7 <0f> 0b eb b6 e8 9e d7 ef f7 0f 0b e9 82 fd ff ff e8 92 d7 ef f7 0f [ 875.965195][ T4373] RSP: 0018:ffffc90002e97ac0 EFLAGS: 00010293 [ 875.971323][ T4373] RAX: ffffffff89924969 RBX: 1ffff920005d2f5c RCX: ffff88807a709e00 [ 875.979384][ T4373] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 875.987426][ T4373] RBP: ffffc90002e97b70 R08: ffffffff90af22af R09: 1ffffffff215e455 [ 875.995459][ T4373] R10: dffffc0000000000 R11: fffffbfff215e456 R12: ffff8880739235b8 [ 876.003467][ T4373] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88807da40c90 [ 876.011504][ T4373] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 876.020586][ T4373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 876.027233][ T4373] CR2: 00007f965b9eb540 CR3: 0000000055e90000 CR4: 00000000003506e0 [ 876.035276][ T4373] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000008d24 [ 876.043288][ T4373] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 876.051343][ T4373] Call Trace: [ 876.054670][ T4373] [ 876.057631][ T4373] ? trace_rdev_return_void+0x240/0x240 [ 876.063230][ T4373] cfg80211_process_wdev_events+0x359/0x4d0 [ 876.069207][ T4373] ? process_one_work+0x7b4/0x1160 [ 876.074386][ T4373] cfg80211_process_rdev_events+0x9d/0x110 [ 876.080232][ T4373] cfg80211_event_work+0x2b/0x40 [ 876.085228][ T4373] process_one_work+0x8ab/0x1160 [ 876.090217][ T4373] ? worker_detach_from_pool+0x240/0x240 [ 876.095908][ T4373] ? _raw_spin_lock_irq+0x86/0xf0 [ 876.100973][ T4373] ? _raw_spin_lock_irq+0xb7/0xf0 [ 876.106067][ T4373] ? _raw_spin_lock_irqsave+0x100/0x100 [ 876.111650][ T4373] ? wq_worker_running+0x97/0x190 [ 876.116743][ T4373] worker_thread+0xaf5/0x12a0 [ 876.121472][ T4373] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 876.127443][ T4373] kthread+0x29d/0x330 [ 876.131544][ T4373] ? worker_clr_flags+0x1a0/0x1a0 [ 876.136631][ T4373] ? kthread_blkcg+0xd0/0xd0 [ 876.141256][ T4373] ret_from_fork+0x1f/0x30 [ 876.145760][ T4373] [ 876.148817][ T4373] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 876.156117][ T4373] CPU: 1 PID: 4373 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 876.163683][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 876.173758][ T4373] Workqueue: cfg80211 cfg80211_event_work [ 876.179514][ T4373] Call Trace: [ 876.182808][ T4373] [ 876.185753][ T4373] dump_stack_lvl+0x188/0x24e [ 876.190452][ T4373] ? memcpy+0x3c/0x60 [ 876.194470][ T4373] ? show_regs_print_info+0x12/0x12 [ 876.199696][ T4373] ? load_image+0x410/0x410 [ 876.204244][ T4373] panic+0x2d3/0x710 [ 876.208169][ T4373] ? bpf_jit_dump+0xd0/0xd0 [ 876.212687][ T4373] ? ret_from_fork+0x1f/0x30 [ 876.217282][ T4373] __warn+0x2f8/0x4f0 [ 876.221274][ T4373] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 876.226827][ T4373] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 876.232372][ T4373] report_bug+0x2ba/0x4f0 [ 876.236725][ T4373] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 876.242277][ T4373] handle_bug+0x3a/0x70 [ 876.246442][ T4373] exc_invalid_op+0x16/0x40 [ 876.250945][ T4373] asm_exc_invalid_op+0x16/0x20 [ 876.255799][ T4373] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 876.261950][ T4373] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 d7 ef f7 0f 0b eb bf e8 a7 d7 ef f7 <0f> 0b eb b6 e8 9e d7 ef f7 0f 0b e9 82 fd ff ff e8 92 d7 ef f7 0f [ 876.281552][ T4373] RSP: 0018:ffffc90002e97ac0 EFLAGS: 00010293 [ 876.287705][ T4373] RAX: ffffffff89924969 RBX: 1ffff920005d2f5c RCX: ffff88807a709e00 [ 876.295673][ T4373] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 876.303643][ T4373] RBP: ffffc90002e97b70 R08: ffffffff90af22af R09: 1ffffffff215e455 [ 876.311614][ T4373] R10: dffffc0000000000 R11: fffffbfff215e456 R12: ffff8880739235b8 [ 876.319583][ T4373] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88807da40c90 [ 876.327597][ T4373] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 876.333157][ T4373] ? trace_rdev_return_void+0x240/0x240 [ 876.338710][ T4373] cfg80211_process_wdev_events+0x359/0x4d0 [ 876.344613][ T4373] ? process_one_work+0x7b4/0x1160 [ 876.349728][ T4373] cfg80211_process_rdev_events+0x9d/0x110 [ 876.355535][ T4373] cfg80211_event_work+0x2b/0x40 [ 876.360469][ T4373] process_one_work+0x8ab/0x1160 [ 876.365415][ T4373] ? worker_detach_from_pool+0x240/0x240 [ 876.371045][ T4373] ? _raw_spin_lock_irq+0x86/0xf0 [ 876.376075][ T4373] ? _raw_spin_lock_irq+0xb7/0xf0 [ 876.381186][ T4373] ? _raw_spin_lock_irqsave+0x100/0x100 [ 876.386732][ T4373] ? wq_worker_running+0x97/0x190 [ 876.391848][ T4373] worker_thread+0xaf5/0x12a0 [ 876.396539][ T4373] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 876.402480][ T4373] kthread+0x29d/0x330 [ 876.406546][ T4373] ? worker_clr_flags+0x1a0/0x1a0 [ 876.411570][ T4373] ? kthread_blkcg+0xd0/0xd0 [ 876.416158][ T4373] ret_from_fork+0x1f/0x30 [ 876.420588][ T4373] [ 876.423884][ T4373] Kernel Offset: disabled [ 876.428272][ T4373] Rebooting in 86400 seconds..