last executing test programs: 14.610108441s ago: executing program 3 (id=277): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r2, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8fb60c14101db59c5fe50699c60d20a4db6ee8c7b110128a691656bb8acf99e35ffdef5551b7343e8d87e62c2b3f83bcca859f2eeb7d1ab9b287ca048249438295d4ba71ce8e66c84591", 0x4a}, {&(0x7f0000000340)="070ff5ddb616449eccc7b449e0506d", 0xf}, {&(0x7f00000004c0)="45753d94ffcd3a3b04751291ce57b01422ec602bbadb9dac4da0ed5759587be6aab7b0845fabe039707140388c62ae7437eb968081828bbf11aa680ab45bff41b9060c0db3edd8291c1709f486ebffa19b472f33f5c228b06e83576a69527776e9f3e63fa87098204d12e9ac2fb679cbca8169632bbc848b2d435b9c44275eeaa369b6a3f842e6d7f6e17362825e081f2fef1bb18edd0f3e4f", 0x99}, {&(0x7f0000000580)="e8ec66367ef6b74d9799756dbe73d280", 0x10}, {&(0x7f0000000740)="d08f6712d30f1e2e3030e3d3ad670e51fb4af39b297bb4edfbd0b74bd95304eb48c75a9595610f26254385d338cb7aab1d93b2716944ff5590b1bc2febe533ea4a5d1ed6933b6d37e11631e500e4c98b47fb7ef2c7a107d5b58f65fa28617778d6c73e43037ca39303f2e7edb7bb3bbfc85bbbb727c26f", 0x77}, {0x0}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14}}], 0x80}, 0x4000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 14.103664467s ago: executing program 3 (id=281): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfd00, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.540817704s ago: executing program 2 (id=283): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x40, 0x5, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x7, 0xbf, 0x0, 0x0, 0x0, 0x10088, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x75, 0xc}, 0x88040, 0xca, 0x0, 0x0, 0x2, 0x3ffffc, 0x0, 0x0, 0xe, 0x0, 0x1}, 0x0, 0xf, r1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYBLOB="3eca", @ANYRES8=r2], 0x13) 10.618865974s ago: executing program 2 (id=285): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="d80000001a0081044e81f782db4cb904021d0800fe007c05e81156a10a0015000200142603600e12080010007a010401a8001600200002400400077c035c0400a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7eef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5", 0xa2}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d32, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4000, 0xb, 0x0, 0x1, 0x8, 0x399, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x2, 0x5, 0xb, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x2, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b23d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r8, &(0x7f0000003600)={&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/77, 0x4d}, {&(0x7f00000003c0)=""/9, 0x9}], 0x8, &(0x7f0000003540)=""/154, 0x9a}, 0x40000000) 10.541833296s ago: executing program 3 (id=287): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) (fail_nth: 1) 7.370900923s ago: executing program 3 (id=290): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x20000000000002cd, &(0x7f00000003c0)=ANY=[@ANYBLOB="d840d0cafd034ea9d0727a1881f374f5ea8660e3d472f162e1b1894f6ccf84f9df46859a3b3f3af9abb1bd1224155d19e05a480fa30d55091ca67521d8f0e85e81a854edeb504b3f7f20b3d7d79f5595ae959f3340056d7a2fd589cb2a89f17d1678f52126e5e00ed7b5695e7288b3a5c25862b51f772e13148dbe3f22ceea2234f1919921d735b616", @ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x36) ioctl$TUNSETLINK(r2, 0x400454cd, 0x307) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) r3 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x9, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r4, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86db4e0cf9420000000000000000", 0x0, 0x55efa3f9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8", 0x1}], 0x1}, 0x4008014) recvmsg(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000500)=""/252, 0xfc}], 0x1}, 0x40000122) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="98", 0x43}], 0x1}, 0x40101) 7.302517425s ago: executing program 0 (id=291): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@phonet={0x23, 0x45, 0xc0, 0x5}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="312d380aad"], 0x31) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000007c0)="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", 0x4f8}, {&(0x7f00000030c0)="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", 0x553}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000080)="f6f4e9a100", 0x0, 0x86, 0x0, 0x25, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904c", 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x69d, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x118000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4800000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x92, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000100)='syz1\x00', 0x1ff) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 7.257259987s ago: executing program 2 (id=292): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5f, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r7 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r2, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r7, &(0x7f0000000ac0)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8fb60c14101db59c5fe50699c60d20a4db6ee8c7b110128a691656bb8acf99e35ffdef5551b7343e8d87e62c2b3f83bcca859f2eeb7d1ab9b287ca048249438295d4ba71ce8e66c84591", 0x4a}, {&(0x7f0000000340)="070ff5ddb616449eccc7b449e0506d", 0xf}, {&(0x7f00000004c0)="45753d94ffcd3a3b04751291ce57b01422ec602bbadb9dac4da0ed5759587be6aab7b0845fabe039707140388c62ae7437eb968081828bbf11aa680ab45bff41b9060c0db3edd8291c1709f486ebffa19b472f33f5c228b06e83576a69527776e9f3e63fa87098204d12e9ac2fb679cbca8169632bbc848b2d435b9c44275eeaa369b6a3f842e6d7f6e17362825e081f2fef1bb18edd0f3e4f", 0x99}, {&(0x7f0000000580)="e8ec66367ef6b74d9799756dbe73d2", 0xf}, {&(0x7f0000000740)="d08f6712d30f1e2e3030e3d3ad670e51fb4af39b297bb4edfbd0b74bd95304eb48c75a9595610f26254385d338cb7aab1d93b2716944ff5590b1bc2febe533ea4a5d1ed6933b6d37e11631e500e4c98b47fb7ef2c7a107d5b58f65fa28617778d6c73e43037ca39303f2e7edb7bb3bbfc85bbbb727c26f", 0x77}, {&(0x7f00000007c0)="6910b450a83f52cad6873543d5f1fc3c9d383c48f62c2de56ce91b0d2acc3a5fdac084c92d94fffab187bcb202dc39d14943d28d953fe379d6e3482b63d4cb69e7f99f259c124c5e06bc19635a32b98df4e38886cfd2ad7877eadaedffa06e9f3343d310682e6ccfef0c9313dbe79e8b58e6c35e69ed255df0acc2ebf7b3ba1614755af64737937efc0dcb6c852fb2303070e96898ef3daf3465543f4490698ab246d72c174b554a7bdab58a622f712f573bc8c0bf6a", 0xb6}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14}}], 0x80}, 0x4000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 7.225380307s ago: executing program 1 (id=293): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x40, 0x5, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x13) 6.766831512s ago: executing program 0 (id=294): r0 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1e, 0x9, 0x40, 0x9, 0x0, 0x1, 0x2000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x129, 0x6}, 0x28b, 0x80000001, 0x8, 0x8, 0x8, 0x8, 0x4}, 0xffffffffffffffff, 0x10, r1, 0x8) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) close(0x3) close(r5) socket$kcm(0x2b, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r7, 0x29, 0x22, &(0x7f0000000100)=r8, 0x120) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada744195f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) 6.766499132s ago: executing program 1 (id=295): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x28}, 0x4044454) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000940)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], 0x0, 0xb3, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000100)="f67535fd7fb3077e1967163ec81f56dc120ef3", 0x13}, {&(0x7f0000000140)="56109ddb8749abf6719610cbbb11191edc4d492dd60f5fa6584e65f81a76048bcf639d38932444f4de3390d52e47abd485eb6077355c87471dde1d0a90f55174501043689c499846e888b64bc4cc81270d64c484bf542672afaefd111611124e5c24a6e5080155d9514d81ae96c8ae718583baf1fa8ca0da9917ce0e0b6241b73fad79644cf0597881fdceab926bafff78d44a152aaf7ac836937c2fdf54e467c6cd83a0f5ab5ed5fa44e82ef9abe8ac2abcd53e444a90b635ba3a1f01eb27605d765f46983fa3e40a76a60786cd02e4f042e7a75f896d206a1cf7a563b86166d3b1a6b4e0e190712da14e4e3dc921", 0xef}, {&(0x7f0000000300)="c81d9c729fa7ed541a54312100b7eb1d80c3b5130fa0afa57215fe9abe3a7fbc7a88ed98859355c2a565ce2cb736a31b8067c9c627483f5994a3eef453da07559256f94240a4578a53a0c89edee8f256abee22b7c639fc01d7d7fc71e9f3391dc9bd3696f495aca16aae224d804ecea38aebe783c6143120ec40de31b3e7fac663b2843cebb6c62e85e099fa7ee03a3d8c6beafbfbed12e48144db52a39c091a1528a24fa9ee82ad99140843b771baeb13bdda0c39143aabe7580051f08d5452105d79c79d", 0xc5}, {&(0x7f0000000400)="2e3243c7c9f1d4ca710ec9aa483381778e35296fc4f9439ae61e5b91d87d61e0efc78c404d441a2fcbaa2c18e5593d849b96", 0x32}, {&(0x7f0000000440)="5c22ee79c25196157cb98c1009e6732aa3c234b2f699402d48748a47c7362de236d11149cbe67e485f049b81ab06f2a4052e79deef3dde8dbb8315b2d51804af5d4eb03f36afc853af23d65ceeca0cbe4c00b43cb9a6f18d26b74e00889d4752e5670bbec22dead71d160e0fcbef16603f04d7f95106e18c652cbc6d25bf3c6b5d9c18d061fb462a1f62961907b6e2bc834a97fff6d6c9", 0x97}, {&(0x7f0000000500)="5604b42745ce03cb9bb4c2c8724219cb2fef11392dc7f3ad4c83b1723a95927639f95ee0896bc5d67e70d212007ee8c237bcfe6a129f4db1fa37195ecfa1ef4ef6e1c4fbf1394f748ebb6b9a6a84e24a4f869a976b2704a6bdfe330eb50a5a7a308b81323b3fc6186545f65aa7e11becbab37aebbf985e29a58f6f6eaf6c0fc1a1bb09b5cf2055609772f64029f66303aeaa49b35d8e3fad3158e20a8a6253d6aaa2077808d7944716203e78abfff7d77bbb158e7a6b830ff5641f173f3a805172259ab7ebe62911c9d2d92b46997b7ad2a331aa9efe3d03e8ce73d53c8b86c288230e65ae51e0fc7e", 0xe9}, {&(0x7f0000000600)="8c75e227d2213b5177720e781c7f9927228f6978f73908fc0abcc4d9dceef839176d88543cf7cc52062ec05a7689d7798fab3f1aa307eb8222200111760ab94866d04133e0e71cab61d83a68606a5756d914b009af789a2f1ef99a1414acbc554a85671ed4d67abe79d1748c00faa666965796c7cc9461ec3b07301ebbe6a183b8a38c08144494c5eaadf9b22c231f0293bb1bc6d412b3ccdb4cecb03a0309360bb0e042efd4fed07ec0f420d1a63ca0895c77da92e3d4b97856d1da934fb373e308c433c5722f47c54df2c413c04d575d053d7c7211964525d78d7189b8b6b62cbcf30d617c0b0de1", 0xe9}, {&(0x7f0000000700)="c3bf6b19598f0d05c299d95f8cd5d04f4cb3b5f11e9c8f2144332a010ab48059da6d9dc67747f9f8d9a73a4001d5c1beb8522f627ad1b340d4e60315ba56bd78169694e9c73d25d755c59413a5eb95cb1838b6c250acc14d296ef702e3", 0x5d}, {&(0x7f0000000780)="0bc8109bd5cbfcfda006a75817be745238c2659e80f8774623b62e7deca24432130b838586156fbe2288fec08d7c9d0f41c2c318a9b023c6b7ddce8eb42eb47da26d58dc194a1ac60273251d30af837822fe3520817c7e5283d27dc56c28fee7e75362d9d8faffd623b3cfef0ace3583dc3c41a7256ba7c7602c7b3fe07cfd8ed9c75e687d3d83f4bf47a56a878c66570a091bf53879f2f72fedfd56de83003301f82665223c7d95c86a31da2e37ef40d0ba009510bc92bbb00b4c36edcc8202a72fbd405472723ac44cab32d89ffc967a19e549c56e1f74", 0xd8}], 0x9, &(0x7f0000000c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010102}}}], 0x38}, 0x804) 6.695800644s ago: executing program 2 (id=296): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0050003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f018951e5277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4b85ddfa1ba963d8469f5f6741f2cedef3d93452a", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000001c0)=0xffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001fc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000200), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x24) r4 = syz_clone(0x100000, &(0x7f0000000100)="f81309238df8bc5b93e4e6f030e1e76ff39165cb414069bb1fe4fcee90a366a501972de336040036b9ee1013608323bf659bdf9481040ee0bb008a7355f557ff40dddcc225ec62958d6b3e995e8e4bc3ca6d38a8f2fb73a6f3b0", 0x5a, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)="cae07dc42e73ea558293221c14d126dc19b4ced110413916a2b4cecc147348a986ee75f9a95f145097d55f5c99bb352b47a9dfa3ed0a525ddec637ebbc1aa008fa98abc13f853648d516104dd07b45567a18a6d9409161bc43c5a880535e4a1d9412a5e85277e2788bcff9e4437c1aa1fb35489e4fdb55eb06818f133f04e7f42989e5d2cdd855060dfd77eda8c8275cb5f2e1e9cdc486055a19bf49e973f8b2e96027f0ff70683701c26059038e809bcd84341753cf722d969a0326fec9c1f71471dd8a4d74fe24619518cef200344630cc34514b27f52022c97b8375e531007f27693026") r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0xffffffffffffdda8, 0x0, 0x1, 0x0, 0x0, 0x1}, r4, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8922, &(0x7f0000000080)) 6.588898238s ago: executing program 1 (id=297): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r2, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8fb60c14101db59c5fe50699c60d20a4db6ee8c7b110128a691656bb8acf99e35ffdef5551b7343e8d87e62c2b3f83bcca859f2eeb7d1ab9b287ca048249438295d4ba71ce8e66c84591", 0x4a}, {&(0x7f0000000340)="070ff5ddb616449eccc7b449e0506d", 0xf}, {&(0x7f00000004c0)="45753d94ffcd3a3b04751291ce57b01422ec602bbadb9dac4da0ed5759587be6aab7b0845fabe039707140388c62ae7437eb968081828bbf11aa680ab45bff41b9060c0db3edd8291c1709f486ebffa19b472f33f5c228b06e83576a69527776e9f3e63fa87098204d12e9ac2fb679cbca8169632bbc848b2d435b9c44275eeaa369b6a3f842e6d7f6e17362825e081f2fef1bb18edd0f3e4f", 0x99}, {&(0x7f0000000580)="e8ec66367ef6b74d9799756dbe73d280", 0x10}, {&(0x7f0000000740)="d08f6712d30f1e2e3030e3d3ad670e51fb4af39b297bb4edfbd0b74bd95304eb48c75a9595610f26254385d338cb7aab1d93b2716944ff5590b1bc2febe533ea4a5d1ed6933b6d37e11631e500e4c98b47fb7ef2c7a107d5b58f65fa28617778d6c73e43037ca39303f2e7edb7bb3bbfc85bbbb727c26f", 0x77}, {&(0x7f00000007c0)}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14}}], 0x80}, 0x4000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 6.561860408s ago: executing program 0 (id=298): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX=r0, @ANYBLOB="0600000000000000000000000000000000000000a5f4fe5bf070d9cc80f37cd5acf87f5401ac1ff06b4ea71d1dff520e336f7e83a19c1d9ab164c4f603f9c722e30bdd7223", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESHEX=0x0], 0x50) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)="7e50ad76cccbee03a4bd8da085f1f9e1696c390d596a10e25839e0d94818674f069dd677f8972d672aa0cb4c837381b6612ffad4179e6c5e2469aa0bb60c230af567a521615a8792d0802d8876423ae5c2327c1e76a72e63acc2dca6584cdfd88081b9951b173ec5da866637af4ffc8bd801c80b0ab0b45460cc4244247b5a3d96c9075a51e791dab6342ed5ee3870156bde41ea9d51579266037683ae413da130a249056f1d4e6cad5d5a68117dcd784b1ac68c956c1c0c683c364dba1f1ccbf0360cdae5c197bd561a2964499248c7a4053a864a7b783b08a9a8a875848ca2f4e771a8", 0xe4}, {&(0x7f0000000940)="c80e40ab95022f73e4ce4934b1215100e94db5c994e2966d89f5e88fa3a24a24fe5539de8469da78c96cd4409e1c155e5d323516b6a3ce588f0c2aac34b28d6b200026e74f65663e205ffdbabb215b8fc58e046a1d15347dc873d9c7c91db63104ed93ca2761798ab73c4cfcce2a8827ac4c9d6cb50a5e5f1ad1ca3f44db5b02d9ee716af70b9d361d0f14bdc0b5c616241005d8984464aebc7ab24ccad8ebdd9b949de0575888bb6e40ec", 0xab}, {&(0x7f0000000a00)="033caa3f7ecf587e7077b2456625f2681490ce99d27de2662200dd33301bb24dcad1a104b364af65b6e07d978ac7aeaad9cc36b6fd7e531bdc5dcaf2548eded6639d1cfc71e7ddedcc1d13c81933b45898e9cdef77db504b4f2ab1a14fd8e282a5a09e45e3eca31556312004bffa5652b1fb02a430e83813663709a79099f468994d1dc6771de99ae1039adcdb7a9f8380520f403d1389d9aef9e6881867cb7752aa1085d0f73d0320d4c43bbce0abb705421916dd5deabd466e8b59180c8099d02c3ce7f430c03dfa5d0908eac2c999188ccb69d93ef2a70440c8860ad798aeeb3e5a12ce4bb21073ec3dbbe58cb557e22e41c4db515c0cc5", 0xf9}, {&(0x7f0000000b00)="74876468454901043ea896647c92b0d6e60e726b80960c2a6c07459ab85639e4c1859c9a97783d907679d52e46fa805fecc536c98b90ac276aea14ff6142b97e6096d25f5e2e2c02f842a2ce751af393f9aedfc5683e54512b47d5165de288f20903d006b02b4fd065fb899188f15a54ea5448ffd1124efca04cfe20e2cf7c3aca4c90c36ebd633fda7da25730322740b36b7fb60057a438efdc667ce2a8a89f1662c51afcbb5ab9e8e6880d6651eecef9c141eb221ab8513165f96c7705a30e6f6d01fdb7ee8fcedf723f802ad06474e8bcaecbbecf8275c5789a9bb6c4c9dd4989dfdef875be01808fe1c0", 0xec}], 0x4, &(0x7f0000001000)=[{0x110, 0x10f, 0x3, "1eb0194e944c3a76a1ad11e7a8bd462ff867908a8e8feab43ea41a99493694cf650a0fee34cffcd2b438fb932ce2aa972212a4fad22704230560f89c7066affb6e8573656309951cad7bfde0afa0b1ff032f78ad1ebc6bca2b6fbd3cf9c2c9e3509a2a8ae45ae0a40aa7e301127dd32083c5458d1028ef18fc6be5967fc5224e4761ab9166248b6f9ca212d1721601604fb1b4015f67070179f66a8fa57461bd2e997fb5fa247bce9141e2531d53161fcdc93399f671c1d2cbbb5e04c9abd2943832d83717f23ea6dc43e68cc1609c3ed57a509d97096208c5c0b2f8ba93bfb71785a5b73477f40ddc254719db95f992af137b9e50a0a557e8"}, {0xd0, 0x119, 0xfffffff7, "e61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa3056df83cbabf9b4e51875f96bbe889c916e4c35932dcbcb44c37f78235faae7ef960a21fef21d2055e2b21747b025b10f494bd0b31f22e94b4073efe007279b416bd3bba40ef1676277a0d3de9db661e7d9bc7f5ea74b596025dd3103b9c2476a7a512c51151a6662da27d9981ec744f13f7bbddc89ed4d85498bba76da35ffc0f99a88d1e29ae57aa20a76e"}, {0xe8, 0x6, 0xf, "6c89539a11cd1dcabbc9926cdc93eedb14f8dbbd00e83cf55c201ad1d3ae99882f705cf96d3d596fb5d8df742b608d92269ebe1385d5f92bf52446f0b7081c03091b8cc19ee29d17cfe1a9b415269ce9d9f7897bc37571a398d591213f761c1f11a2e3d09e0de29ae07e6389d064a4009644c94bf6a35f2a5ac936d586439e7a46c64560164bc94ac9a931b68c7166e2ce5876787c54aac7cd8dacdd9591cfe3ec06e867a37469ec9a8223a8bf6f97492efd3dd2cd657c89a34a8c388cf5271109545cb7d40bed0b1850c3cb18f0d5ae33"}], 0x2c8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) sendmsg(r5, 0x0, 0x40001) recvmsg$kcm(r5, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/231, 0xe7}, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000100000500"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079108900000000009500000000007b9b"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 6.329179965s ago: executing program 1 (id=299): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pB \x00'}, 0x20) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000002600), 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002780)={0x6, 0x1, &(0x7f00000021c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000002200)='GPL\x00', 0x7a, 0xaf, &(0x7f0000002240)=""/175, 0x41100, 0x20, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000002640)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000002680)={0x3, 0xb, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000026c0)=[r0, r2], &(0x7f0000002700)=[{0x5, 0x3, 0x2, 0x8}, {0x1, 0x2, 0x7, 0x2}, {0x3, 0x2, 0xd, 0x8}, {0x5, 0x4, 0x4, 0x7}, {0x2, 0x1, 0x10}], 0x10, 0x4}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000028c0)={{r0, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)=r4}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002900)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200281, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x81000600, 0xe, 0x0, &(0x7f00000005c0)="8cd52c4d36b1ba70dba56dd28035", 0x0, 0xadf0, 0x80ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.299596076s ago: executing program 0 (id=300): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000027b, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0xa4, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) 6.267405337s ago: executing program 3 (id=301): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x20014000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000500000003000000010000fd020000000501040000000080050000004d3655070000000000000f01000000b500612e6100d2fd08c3499d6c4e74f01d4e21082b1abb5ea8a506d5d6531d9d5707184c896c7bf8fdbc"], 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={0xffffffffffffffff, 0x8, 0x18}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001900)={{0x1, 0xffffffffffffffff}, &(0x7f0000001880), &(0x7f00000018c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x1b, 0x5, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x3, 0xb, 0x0, 0x30, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x29}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf6}], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x7f, &(0x7f0000000280)=""/127, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2d, r3, 0x8, &(0x7f0000001500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xc, 0x5}, 0x10, 0x0, r4, 0x2, &(0x7f0000001940)=[r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff], &(0x7f0000001980)=[{0x0, 0x4, 0x10, 0x3}, {0x0, 0x2, 0x6, 0x5}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0xf}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x600b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000001580), 0x4}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x66de85fb, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x11, 0x0, 0x40019) socket$kcm(0x1e, 0x5, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000321053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6.049756804s ago: executing program 2 (id=302): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000480)=r3, 0x4) (fail_nth: 2) 3.169754562s ago: executing program 0 (id=303): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0xfe, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.078448095s ago: executing program 1 (id=304): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x40, 0x5, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x13) 2.953355809s ago: executing program 2 (id=305): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5f, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r7 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r2, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r7, &(0x7f0000000ac0)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8fb60c14101db59c5fe50699c60d20a4db6ee8c7b110128a691656bb8acf99e35ffdef5551b7343e8d87e62c2b3f83bcca859f2eeb7d1ab9b287ca048249438295d4ba71ce8e66c84591", 0x4a}, {&(0x7f0000000340)="070ff5ddb616449eccc7b449e0506d", 0xf}, {&(0x7f00000004c0)="45753d94ffcd3a3b04751291ce57b01422ec602bbadb9dac4da0ed5759587be6aab7b0845fabe039707140388c62ae7437eb968081828bbf11aa680ab45bff41b9060c0db3edd8291c1709f486ebffa19b472f33f5c228b06e83576a69527776e9f3e63fa87098204d12e9ac2fb679cbca8169632bbc848b2d435b9c44275eeaa369b6a3f842e6d7f6e17362825e081f2fef1bb18edd0f3e4f", 0x99}, {&(0x7f0000000580)="e8ec66367ef6b74d9799756dbe73d2", 0xf}, {&(0x7f0000000740)="d08f6712d30f1e2e3030e3d3ad670e51fb4af39b297bb4edfbd0b74bd95304eb48c75a9595610f26254385d338cb7aab1d93b2716944ff5590b1bc2febe533ea4a5d1ed6933b6d37e11631e500e4c98b47fb7ef2c7a107d5b58f65fa28617778d6c73e43037ca39303f2e7edb7bb3bbfc85bbbb727c26f", 0x77}, {&(0x7f00000007c0)="6910b450a83f52cad6873543d5f1fc3c9d383c48f62c2de56ce91b0d2acc3a5fdac084c92d94fffab187bcb202dc39d14943d28d953fe379d6e3482b63d4cb69e7f99f259c124c5e06bc19635a32b98df4e38886cfd2ad7877eadaedffa06e9f3343d310682e6ccfef0c9313dbe79e8b58e6c35e69ed255df0acc2ebf7b3ba1614755af64737937efc0dcb6c852fb2303070e96898ef3daf3465543f4490698ab246d72c174b554a7bdab58a622f712f573bc8c0bf6a", 0xb6}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14}}], 0x80}, 0x4000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 8.013409ms ago: executing program 1 (id=306): r0 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1e, 0x9, 0x40, 0x9, 0x0, 0x1, 0x2000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x129, 0x6}, 0x28b, 0x80000001, 0x8, 0x8, 0x8, 0x8, 0x4}, 0xffffffffffffffff, 0x10, r1, 0x8) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r1, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) close(0x3) close(r5) socket$kcm(0x2b, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r7, 0x29, 0x22, &(0x7f0000000100)=r8, 0x120) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada744195f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) 7.699909ms ago: executing program 3 (id=307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002000000018010000696c6c2500000000002020207b1af8ff"], 0x0, 0x4}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a00000700000000000000000600142603600e1209001800", 0x28}], 0x1}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xffffff53) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48, 0xffffffff}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x400002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 0 (id=308): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r2, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8fb60c14101db59c5fe50699c60d20a4db6ee8c7b110128a691656bb8acf99e35ffdef5551b7343e8d87e62c2b3f83bcca859f2eeb7d1ab9b287ca048249438295d4ba71ce8e66c84591", 0x4a}, {&(0x7f0000000340)="070ff5ddb616449eccc7b449e0506d", 0xf}, {&(0x7f00000004c0)="45753d94ffcd3a3b04751291ce57b01422ec602bbadb9dac4da0ed5759587be6aab7b0845fabe039707140388c62ae7437eb968081828bbf11aa680ab45bff41b9060c0db3edd8291c1709f486ebffa19b472f33f5c228b06e83576a69527776e9f3e63fa87098204d12e9ac2fb679cbca8169632bbc848b2d435b9c44275eeaa369b6a3f842e6d7f6e17362825e081f2fef1bb18edd0f3e4f", 0x99}, {&(0x7f0000000580)="e8ec66367ef6b74d9799756dbe73d280", 0x10}, {&(0x7f0000000740)="d08f6712d30f1e2e3030e3d3ad670e51fb4af39b297bb4edfbd0b74bd95304eb48c75a9595610f26254385d338cb7aab1d93b2716944ff5590b1bc2febe533ea4a5d1ed6933b6d37e11631e500e4c98b47fb7ef2c7a107d5b58f65fa28617778d6c73e43037ca39303f2e7edb7bb3bbfc85bbbb727c26f", 0x77}, {&(0x7f00000007c0)}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14}}], 0x80}, 0x4000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 61.485693][ T5764] cgroup: Unknown subsys name 'net' [ 61.620246][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.994917][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.762478][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.771094][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.778914][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.786847][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.794646][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.801906][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.810482][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.818362][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.825840][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.834763][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.842445][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.851147][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.858264][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.864559][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.866006][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.872799][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.881301][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.895846][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.896861][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.911240][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.911290][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.918776][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.926404][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.940355][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.319354][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 65.398939][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 65.427571][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 65.506024][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 65.566739][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.576899][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.584732][ T5778] bridge_slave_0: entered allmulticast mode [ 65.591827][ T5778] bridge_slave_0: entered promiscuous mode [ 65.601851][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.609098][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.616455][ T5778] bridge_slave_1: entered allmulticast mode [ 65.623080][ T5778] bridge_slave_1: entered promiscuous mode [ 65.697090][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.704315][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.711450][ T5776] bridge_slave_0: entered allmulticast mode [ 65.718966][ T5776] bridge_slave_0: entered promiscuous mode [ 65.726460][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.733615][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.740819][ T5776] bridge_slave_1: entered allmulticast mode [ 65.747560][ T5776] bridge_slave_1: entered promiscuous mode [ 65.754873][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.761966][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.769463][ T5777] bridge_slave_0: entered allmulticast mode [ 65.776274][ T5777] bridge_slave_0: entered promiscuous mode [ 65.784368][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.791568][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.798909][ T5777] bridge_slave_1: entered allmulticast mode [ 65.806181][ T5777] bridge_slave_1: entered promiscuous mode [ 65.815332][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.828083][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.899751][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.921401][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.942222][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.955852][ T5778] team0: Port device team_slave_0 added [ 65.964789][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.999086][ T5778] team0: Port device team_slave_1 added [ 66.020334][ T5777] team0: Port device team_slave_0 added [ 66.026909][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.036619][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.044437][ T5775] bridge_slave_0: entered allmulticast mode [ 66.051078][ T5775] bridge_slave_0: entered promiscuous mode [ 66.060470][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.067791][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.075088][ T5775] bridge_slave_1: entered allmulticast mode [ 66.081843][ T5775] bridge_slave_1: entered promiscuous mode [ 66.108080][ T5777] team0: Port device team_slave_1 added [ 66.151574][ T5776] team0: Port device team_slave_0 added [ 66.160040][ T5776] team0: Port device team_slave_1 added [ 66.168426][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.175442][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.201449][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.215339][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.222299][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.248247][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.268006][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.275062][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.301217][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.335566][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.345295][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.352261][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.378953][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.409666][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.426841][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.434826][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.467932][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.489261][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.496334][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.522355][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.565029][ T5777] hsr_slave_0: entered promiscuous mode [ 66.571239][ T5777] hsr_slave_1: entered promiscuous mode [ 66.630967][ T5775] team0: Port device team_slave_0 added [ 66.642163][ T5776] hsr_slave_0: entered promiscuous mode [ 66.649117][ T5776] hsr_slave_1: entered promiscuous mode [ 66.655607][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.663356][ T5776] Cannot create hsr debugfs directory [ 66.674608][ T5778] hsr_slave_0: entered promiscuous mode [ 66.680786][ T5778] hsr_slave_1: entered promiscuous mode [ 66.687275][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.694989][ T5778] Cannot create hsr debugfs directory [ 66.707012][ T5775] team0: Port device team_slave_1 added [ 66.779910][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.787002][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.813430][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.859810][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.867126][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.893165][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.923969][ T5780] Bluetooth: hci0: command tx timeout [ 67.004460][ T5783] Bluetooth: hci3: command tx timeout [ 67.010148][ T5783] Bluetooth: hci2: command tx timeout [ 67.016393][ T5780] Bluetooth: hci1: command tx timeout [ 67.066609][ T5775] hsr_slave_0: entered promiscuous mode [ 67.073690][ T5775] hsr_slave_1: entered promiscuous mode [ 67.079788][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.088021][ T5775] Cannot create hsr debugfs directory [ 67.259117][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.286815][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.297794][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.312660][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.395965][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.408292][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.436947][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.456033][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.495738][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.527703][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.563501][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.589918][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.601605][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.616937][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.629296][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.640539][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.681424][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.711944][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.755186][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.762458][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.790689][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.797870][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.895767][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.942052][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.980333][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.998180][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.016748][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.049780][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.057002][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.067760][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.074935][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.088413][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.095578][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.109904][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.138432][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.145600][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.167430][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.174632][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.215964][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.223132][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.329470][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.463827][ T5777] veth0_vlan: entered promiscuous mode [ 68.514996][ T5777] veth1_vlan: entered promiscuous mode [ 68.596482][ T5777] veth0_macvtap: entered promiscuous mode [ 68.637446][ T5777] veth1_macvtap: entered promiscuous mode [ 68.705504][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.741617][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.765405][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.776571][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.786091][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.795335][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.859238][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.868927][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.885272][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.962495][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.982835][ T5778] veth0_vlan: entered promiscuous mode [ 68.989370][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.014474][ T5783] Bluetooth: hci0: command tx timeout [ 69.059625][ T5778] veth1_vlan: entered promiscuous mode [ 69.066904][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.080699][ T5776] veth0_vlan: entered promiscuous mode [ 69.084367][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.093500][ T5775] veth0_vlan: entered promiscuous mode [ 69.096476][ T5783] Bluetooth: hci3: command tx timeout [ 69.104914][ T5780] Bluetooth: hci2: command tx timeout [ 69.104928][ T5790] Bluetooth: hci1: command tx timeout [ 69.148731][ T5775] veth1_vlan: entered promiscuous mode [ 69.162777][ T5776] veth1_vlan: entered promiscuous mode [ 69.241598][ T5776] veth0_macvtap: entered promiscuous mode [ 69.268375][ T5778] veth0_macvtap: entered promiscuous mode [ 69.293011][ T5776] veth1_macvtap: entered promiscuous mode [ 69.310933][ T5775] veth0_macvtap: entered promiscuous mode [ 69.331868][ C1] hrtimer: interrupt took 69139 ns [ 69.336738][ T5778] veth1_macvtap: entered promiscuous mode [ 69.351730][ T5775] veth1_macvtap: entered promiscuous mode [ 69.367174][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.377951][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.395693][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.411815][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.425131][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.436590][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.453232][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.462111][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.471461][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.481004][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.517692][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.535883][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.547170][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.557758][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.570373][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.589669][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.601030][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.611385][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.621859][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.634021][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.655738][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.669137][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.685936][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.699180][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.712660][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.728770][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.741519][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.766876][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.776460][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.786052][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.794937][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.816504][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.827275][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.838894][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.850675][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.860749][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.872492][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.886012][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.912646][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.921673][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.943854][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.952589][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.084359][ T5790] Bluetooth: hci0: command tx timeout [ 71.163650][ T5783] Bluetooth: hci2: command tx timeout [ 71.169335][ T5783] Bluetooth: hci1: command tx timeout [ 71.176402][ T5790] Bluetooth: hci3: command tx timeout [ 71.489957][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.500911][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.015602][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.026522][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.112161][ T5846] sctp: [Deprecated]: syz.0.6 (pid 5846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.112161][ T5846] Use struct sctp_sack_info instead [ 73.123596][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.164182][ T5783] Bluetooth: hci0: command tx timeout [ 73.164868][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.210779][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.219640][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.246658][ T5783] Bluetooth: hci1: command tx timeout [ 73.252400][ T5783] Bluetooth: hci3: command tx timeout [ 73.258308][ T5783] Bluetooth: hci2: command tx timeout [ 73.295051][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.310680][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.322538][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.330114][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.390733][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.413219][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.525561][ T5851] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.561748][ T5851] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 74.302061][ T5856] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 74.331233][ T5856] geneve0: entered promiscuous mode [ 74.498464][ T5856] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 74.725797][ T5856] syz.3.4 (5856) used greatest stack depth: 20008 bytes left [ 75.966211][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 77.696691][ T5869] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 77.709221][ T5869] geneve0: entered promiscuous mode [ 77.750342][ T5869] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 77.938099][ T5886] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.14'. [ 79.974366][ T3007] wlan1: Trigger new scan to find an IBSS to join [ 80.870059][ T2932] wlan1: Creating new IBSS network, BSSID 0a:d6:73:49:bf:4b [ 81.744994][ T28] cfg80211: failed to load regulatory.db [ 81.889275][ T5886] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.14'. [ 81.898676][ T5886] tipc: Started in network mode [ 81.903616][ T5886] tipc: Node identity b, cluster identity 73 [ 81.909774][ T5886] tipc: Node number set to 11 [ 82.341810][ T5905] netlink: 'syz.2.19': attribute type 2 has an invalid length. [ 82.391003][ T5905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19'. [ 82.551396][ T5907] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 82.563488][ T5907] geneve0: entered promiscuous mode [ 82.656896][ T5907] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 82.869113][ T5904] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 82.932626][ T5916] Zero length message leads to an empty skb [ 82.944684][ T5904] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 83.560069][ T5927] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 83.692453][ T5904] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 83.743847][ T5927] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 83.781144][ T5904] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 83.816469][ T5901] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 83.843053][ T5927] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 84.280505][ T5936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.608028][ T5939] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.27'. [ 88.874391][ T5945] netlink: 188 bytes leftover after parsing attributes in process `syz.3.29'. [ 89.358219][ T5939] validate_nla: 2 callbacks suppressed [ 89.358235][ T5939] netlink: 'syz.0.27': attribute type 29 has an invalid length. [ 89.636025][ T5960] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 90.058554][ T5969] netlink: 'syz.0.36': attribute type 10 has an invalid length. [ 90.233978][ T5971] netlink: 'syz.3.37': attribute type 2 has an invalid length. [ 90.241940][ T5971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.37'. [ 90.372983][ T5971] syzkaller0: entered promiscuous mode [ 90.391168][ T5971] syzkaller0: entered allmulticast mode [ 90.418908][ T5979] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 90.490951][ T5982] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.40'. [ 90.508194][ T5982] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.40'. [ 93.636210][ T5987] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 96.378908][ T5987] geneve0: entered promiscuous mode [ 96.427766][ T5987] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 96.436721][ T5994] netlink: 'syz.3.45': attribute type 10 has an invalid length. [ 99.844958][ T6020] netlink: 'syz.1.52': attribute type 2 has an invalid length. [ 99.864335][ T6020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.52'. [ 99.874956][ T6023] netlink: 'syz.3.55': attribute type 10 has an invalid length. [ 99.975866][ T6026] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.53'. [ 99.987109][ T6026] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.53'. [ 100.014620][ T6026] tipc: Started in network mode [ 100.020071][ T6026] tipc: Node identity b, cluster identity 73 [ 100.030414][ T6026] tipc: Node number set to 11 [ 100.089833][ T6020] syzkaller0: entered promiscuous mode [ 100.110481][ T6020] syzkaller0: entered allmulticast mode [ 103.474918][ T6041] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.60'. [ 103.540905][ T6041] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.60'. [ 103.577263][ T6033] netlink: 'syz.0.58': attribute type 29 has an invalid length. [ 103.579442][ T6041] tipc: Started in network mode [ 103.594146][ T6041] tipc: Node identity b, cluster identity 73 [ 103.615810][ T6041] tipc: Node number set to 11 [ 103.630097][ T6033] netlink: 'syz.0.58': attribute type 29 has an invalid length. [ 103.661451][ T6034] netlink: 'syz.0.58': attribute type 29 has an invalid length. [ 104.292531][ T6059] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 107.146429][ T6072] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 107.190719][ T6073] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.68'. [ 107.244095][ T6073] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.68'. [ 107.253186][ T6073] tipc: Started in network mode [ 107.273915][ T6073] tipc: Node identity b, cluster identity 73 [ 107.293210][ T6073] tipc: Node number set to 11 [ 110.026333][ T6083] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 110.060629][ T6079] netlink: 'syz.2.69': attribute type 2 has an invalid length. [ 110.173223][ T6079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.69'. [ 110.332380][ T6080] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 110.549767][ T6079] syzkaller0: entered promiscuous mode [ 110.624095][ T6079] syzkaller0: entered allmulticast mode [ 110.897921][ T3509] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 111.021594][ T6094] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.74'. [ 111.057328][ T6094] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.74'. [ 111.115466][ T6101] netlink: 'syz.3.76': attribute type 10 has an invalid length. [ 111.143347][ T6103] sctp: [Deprecated]: syz.1.78 (pid 6103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.143347][ T6103] Use struct sctp_sack_info instead [ 111.483423][ T6108] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 113.963977][ T3554] wlan1: Trigger new scan to find an IBSS to join [ 114.761354][ T6116] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 115.005931][ T6119] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.81'. [ 115.038062][ T6119] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.81'. [ 115.372971][ T6128] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 116.107563][ T6121] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 116.116650][ T6121] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 116.141943][ T6130] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 116.226095][ T6121] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 116.235977][ T6121] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 116.246527][ T6113] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 116.256653][ T6121] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 116.269985][ T6113] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 116.379674][ T6132] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 116.523505][ T6138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.86'. [ 116.654451][ T6140] syzkaller0: entered promiscuous mode [ 116.662396][ T6140] syzkaller0: entered allmulticast mode [ 116.688863][ T6143] sctp: [Deprecated]: syz.3.90 (pid 6143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.688863][ T6143] Use struct sctp_sack_info instead [ 116.928987][ T3554] wlan1: Trigger new scan to find an IBSS to join [ 119.571583][ T3509] wlan1: Creating new IBSS network, BSSID ee:30:cb:af:46:3b [ 121.455609][ T6160] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 121.629776][ T6167] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 121.838435][ T6169] validate_nla: 2 callbacks suppressed [ 121.838524][ T6169] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 122.761175][ T6174] netlink: 'syz.2.98': attribute type 29 has an invalid length. [ 122.954385][ T6179] netlink: 'syz.2.98': attribute type 29 has an invalid length. [ 123.964764][ T2932] wlan1: Trigger new scan to find an IBSS to join [ 123.982940][ T1322] wlan1: Trigger new scan to find an IBSS to join [ 124.585868][ T6174] netlink: 'syz.2.98': attribute type 29 has an invalid length. [ 124.604195][ T6179] netlink: 'syz.2.98': attribute type 29 has an invalid length. [ 124.771867][ T6184] netlink: 'syz.1.100': attribute type 10 has an invalid length. [ 124.855562][ T6188] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.489145][ T6200] netlink: 'syz.2.109': attribute type 10 has an invalid length. [ 126.907455][ T6207] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 127.040039][ T6213] netlink: 'syz.1.114': attribute type 29 has an invalid length. [ 127.049118][ T6213] netlink: 'syz.1.114': attribute type 29 has an invalid length. [ 127.125671][ T6213] netlink: 'syz.1.114': attribute type 29 has an invalid length. [ 127.184496][ T6216] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 127.193351][ T6213] netlink: 'syz.1.114': attribute type 29 has an invalid length. [ 127.221226][ T6213] netlink: 'syz.1.114': attribute type 29 has an invalid length. [ 127.352030][ T6220] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.070521][ T6237] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.578615][ T6249] FAULT_INJECTION: forcing a failure. [ 128.578615][ T6249] name failslab, interval 1, probability 0, space 0, times 1 [ 128.591749][ T6249] CPU: 0 PID: 6249 Comm: syz.0.127 Not tainted syzkaller #0 [ 128.599084][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.609201][ T6249] Call Trace: [ 128.612521][ T6249] [ 128.615493][ T6249] dump_stack_lvl+0x18c/0x250 [ 128.620249][ T6249] ? show_regs_print_info+0x20/0x20 [ 128.625500][ T6249] ? load_image+0x420/0x420 [ 128.630043][ T6249] ? add_lock_to_list+0x191/0x280 [ 128.635130][ T6249] ? __lock_acquire+0x357f/0x7d80 [ 128.640210][ T6249] ? trace_call_bpf+0xc3/0x6c0 [ 128.645044][ T6249] should_fail_ex+0x394/0x4c0 [ 128.649791][ T6249] should_failslab+0x9/0x20 [ 128.654344][ T6249] slab_pre_alloc_hook+0x59/0x300 [ 128.659443][ T6249] kmem_cache_alloc+0x5a/0x2c0 [ 128.664250][ T6249] ? radix_tree_node_alloc+0x7e/0x3a0 [ 128.669691][ T6249] radix_tree_node_alloc+0x7e/0x3a0 [ 128.674961][ T6249] idr_get_free+0x28f/0xa10 [ 128.679558][ T6249] idr_alloc_cyclic+0x28a/0x610 [ 128.684490][ T6249] ? idr_alloc+0x2e0/0x2e0 [ 128.688964][ T6249] ? do_raw_spin_lock+0x11f/0x2b0 [ 128.694071][ T6249] ? bpf_link_prime+0x4c/0x1d0 [ 128.698893][ T6249] bpf_link_prime+0x6b/0x1d0 [ 128.703538][ T6249] bpf_perf_link_attach+0x1ca/0x3c0 [ 128.708808][ T6249] link_create+0x509/0x720 [ 128.713289][ T6249] __sys_bpf+0x4d7/0x890 [ 128.717586][ T6249] ? bpf_link_show_fdinfo+0x390/0x390 [ 128.723057][ T6249] ? lock_chain_count+0x20/0x20 [ 128.727982][ T6249] __x64_sys_bpf+0x7c/0x90 [ 128.732446][ T6249] do_syscall_64+0x55/0xb0 [ 128.736898][ T6249] ? clear_bhb_loop+0x40/0x90 [ 128.741618][ T6249] ? clear_bhb_loop+0x40/0x90 [ 128.746348][ T6249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.752305][ T6249] RIP: 0033:0x7f625759ce59 [ 128.756861][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.776511][ T6249] RSP: 002b:00007f6258522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.784984][ T6249] RAX: ffffffffffffffda RBX: 00007f6257815fa0 RCX: 00007f625759ce59 [ 128.793002][ T6249] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 128.801013][ T6249] RBP: 00007f6258522090 R08: 0000000000000000 R09: 0000000000000000 [ 128.809023][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.817032][ T6249] R13: 00007f6257816038 R14: 00007f6257815fa0 R15: 00007fff63913098 [ 128.825096][ T6249] [ 128.842767][ T6251] FAULT_INJECTION: forcing a failure. [ 128.842767][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 128.874511][ T6251] CPU: 1 PID: 6251 Comm: syz.1.129 Not tainted syzkaller #0 [ 128.881831][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.891886][ T6251] Call Trace: [ 128.895184][ T6251] [ 128.898135][ T6251] dump_stack_lvl+0x18c/0x250 [ 128.901088][ T6253] tap0: tun_chr_ioctl cmd 1074025684 [ 128.902826][ T6251] ? show_regs_print_info+0x20/0x20 [ 128.913312][ T6251] ? load_image+0x420/0x420 [ 128.917839][ T6251] ? __might_sleep+0xe0/0xe0 [ 128.922442][ T6251] ? __lock_acquire+0x7d80/0x7d80 [ 128.927476][ T6251] should_fail_ex+0x394/0x4c0 [ 128.932184][ T6251] should_failslab+0x9/0x20 [ 128.936687][ T6251] slab_pre_alloc_hook+0x59/0x300 [ 128.941701][ T6251] ? __lock_acquire+0x7d80/0x7d80 [ 128.946728][ T6251] kmem_cache_alloc_node+0x5e/0x310 [ 128.951934][ T6251] ? __alloc_skb+0x103/0x2c0 [ 128.956516][ T6251] __alloc_skb+0x103/0x2c0 [ 128.960919][ T6251] netlink_sendmsg+0x66a/0xbf0 [ 128.965692][ T6251] ? netlink_getsockopt+0x590/0x590 [ 128.970902][ T6251] ? aa_sock_msg_perm+0x94/0x150 [ 128.975843][ T6251] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 128.981125][ T6251] ? security_socket_sendmsg+0x80/0xa0 [ 128.986582][ T6251] ? netlink_getsockopt+0x590/0x590 [ 128.991790][ T6251] ____sys_sendmsg+0x61b/0x980 [ 128.996558][ T6251] ? __asan_memset+0x22/0x40 [ 129.001144][ T6251] ? __sys_sendmsg_sock+0x30/0x30 [ 129.006164][ T6251] ? __import_iovec+0x5f2/0x850 [ 129.011017][ T6251] ? import_iovec+0x73/0xa0 [ 129.015517][ T6251] ___sys_sendmsg+0x2a6/0x360 [ 129.020190][ T6251] ? get_pid_task+0x20/0x1e0 [ 129.024786][ T6251] ? __sys_sendmsg+0x2b0/0x2b0 [ 129.029562][ T6251] ? __lock_acquire+0x7d80/0x7d80 [ 129.034600][ T6251] __se_sys_sendmsg+0x1d0/0x2c0 [ 129.039453][ T6251] ? __x64_sys_sendmsg+0x80/0x80 [ 129.044398][ T6251] ? lockdep_hardirqs_on+0x98/0x150 [ 129.049596][ T6251] do_syscall_64+0x55/0xb0 [ 129.054010][ T6251] ? clear_bhb_loop+0x40/0x90 [ 129.058680][ T6251] ? clear_bhb_loop+0x40/0x90 [ 129.063348][ T6251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.069242][ T6251] RIP: 0033:0x7f376699ce59 [ 129.073655][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.093256][ T6251] RSP: 002b:00007f3767811028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.101669][ T6251] RAX: ffffffffffffffda RBX: 00007f3766c15fa0 RCX: 00007f376699ce59 [ 129.109647][ T6251] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 129.117611][ T6251] RBP: 00007f3767811090 R08: 0000000000000000 R09: 0000000000000000 [ 129.125577][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.133545][ T6251] R13: 00007f3766c16038 R14: 00007f3766c15fa0 R15: 00007ffef03147a8 [ 129.141524][ T6251] [ 129.249207][ T6255] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.487244][ T6260] FAULT_INJECTION: forcing a failure. [ 129.487244][ T6260] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.556815][ T6260] CPU: 0 PID: 6260 Comm: syz.2.132 Not tainted syzkaller #0 [ 129.564157][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.574225][ T6260] Call Trace: [ 129.577519][ T6260] [ 129.580464][ T6260] dump_stack_lvl+0x18c/0x250 [ 129.585169][ T6260] ? show_regs_print_info+0x20/0x20 [ 129.590393][ T6260] ? load_image+0x420/0x420 [ 129.594919][ T6260] ? __lock_acquire+0x7d80/0x7d80 [ 129.599969][ T6260] ? snprintf+0xe9/0x140 [ 129.604231][ T6260] should_fail_ex+0x394/0x4c0 [ 129.608955][ T6260] _copy_to_user+0x2f/0xa0 [ 129.613390][ T6260] simple_read_from_buffer+0xe7/0x150 [ 129.618792][ T6260] proc_fail_nth_read+0x1e8/0x260 [ 129.623842][ T6260] ? proc_fault_inject_write+0x360/0x360 [ 129.629495][ T6260] ? fsnotify_perm+0x271/0x5e0 [ 129.634277][ T6260] ? proc_fault_inject_write+0x360/0x360 [ 129.639934][ T6260] vfs_read+0x298/0x990 [ 129.644119][ T6260] ? kernel_read+0x1e0/0x1e0 [ 129.648730][ T6260] ? __fget_files+0x28/0x460 [ 129.653337][ T6260] ? __fget_files+0x3fc/0x460 [ 129.658042][ T6260] ? __fdget_pos+0x2a3/0x330 [ 129.662650][ T6260] ? ksys_read+0x74/0x260 [ 129.667000][ T6260] ksys_read+0x151/0x260 [ 129.671273][ T6260] ? vfs_write+0x9a0/0x9a0 [ 129.675715][ T6260] ? lockdep_hardirqs_on+0x98/0x150 [ 129.680942][ T6260] do_syscall_64+0x55/0xb0 [ 129.685375][ T6260] ? clear_bhb_loop+0x40/0x90 [ 129.690072][ T6260] ? clear_bhb_loop+0x40/0x90 [ 129.694768][ T6260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.700681][ T6260] RIP: 0033:0x7fd2b015d68e [ 129.705111][ T6260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.724731][ T6260] RSP: 002b:00007fd2b1060fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.733163][ T6260] RAX: ffffffffffffffda RBX: 00007fd2b10616c0 RCX: 00007fd2b015d68e [ 129.741157][ T6260] RDX: 000000000000000f RSI: 00007fd2b10610a0 RDI: 0000000000000004 [ 129.749145][ T6260] RBP: 00007fd2b1061090 R08: 0000000000000000 R09: 0000000000000000 [ 129.757134][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.765118][ T6260] R13: 00007fd2b0416038 R14: 00007fd2b0415fa0 R15: 00007ffd2eab7548 [ 129.773114][ T6260] [ 129.999151][ T6271] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.134'. [ 130.010069][ T6271] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.134'. [ 130.145201][ T6277] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.229562][ T6280] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 130.303158][ T6280] hsr0: entered promiscuous mode [ 130.309402][ T6280] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 130.490556][ T6286] FAULT_INJECTION: forcing a failure. [ 130.490556][ T6286] name failslab, interval 1, probability 0, space 0, times 0 [ 130.494331][ T6284] netlink: 209816 bytes leftover after parsing attributes in process `syz.0.140'. [ 130.516729][ T6287] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 130.529295][ T6286] CPU: 0 PID: 6286 Comm: syz.2.141 Not tainted syzkaller #0 [ 130.536624][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.546694][ T6286] Call Trace: [ 130.549987][ T6286] [ 130.552930][ T6286] dump_stack_lvl+0x18c/0x250 [ 130.557634][ T6286] ? show_regs_print_info+0x20/0x20 [ 130.562856][ T6286] ? load_image+0x420/0x420 [ 130.567380][ T6286] ? __lock_acquire+0x7d80/0x7d80 [ 130.572424][ T6286] ? trace_raw_output_contention_end+0xd0/0xd0 [ 130.578588][ T6286] should_fail_ex+0x394/0x4c0 [ 130.583260][ T6286] should_failslab+0x9/0x20 [ 130.587761][ T6286] slab_pre_alloc_hook+0x59/0x300 [ 130.592790][ T6286] ? __inet_diag_dump_start+0x8b/0x9f0 [ 130.598249][ T6286] __kmem_cache_alloc_node+0x53/0x250 [ 130.603625][ T6286] ? __inet_diag_dump_start+0x8b/0x9f0 [ 130.609076][ T6286] kmalloc_trace+0x2a/0xe0 [ 130.613490][ T6286] __inet_diag_dump_start+0x8b/0x9f0 [ 130.618774][ T6286] ? netlink_lookup+0x30/0x200 [ 130.623534][ T6286] ? netlink_lookup+0x30/0x200 [ 130.628297][ T6286] __netlink_dump_start+0x43c/0x7a0 [ 130.633491][ T6286] inet_diag_handler_cmd+0x1e0/0x2c0 [ 130.638778][ T6286] ? sock_diag_lock_handler+0x19/0x280 [ 130.644237][ T6286] ? inet_diag_unregister+0xb0/0xb0 [ 130.649427][ T6286] ? inet_diag_handler_get_info+0x790/0x790 [ 130.655312][ T6286] ? inet_diag_dump_start+0x20/0x20 [ 130.660502][ T6286] ? inet_diag_dump+0x50/0x50 [ 130.665182][ T6286] ? sock_diag_lock_handler+0x19/0x280 [ 130.670650][ T6286] ? inet_diag_unregister+0xb0/0xb0 [ 130.675839][ T6286] sock_diag_rcv_msg+0x3d3/0x5f0 [ 130.680779][ T6286] netlink_rcv_skb+0x235/0x4c0 [ 130.685540][ T6286] ? sock_diag_bind+0xb0/0xb0 [ 130.690218][ T6286] ? netlink_ack+0x1160/0x1160 [ 130.694986][ T6286] ? __lock_acquire+0x7d80/0x7d80 [ 130.700043][ T6286] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.705237][ T6286] sock_diag_rcv+0x2a/0x40 [ 130.709648][ T6286] netlink_unicast+0x7b1/0x930 [ 130.714413][ T6286] netlink_sendmsg+0x8d0/0xbf0 [ 130.719273][ T6286] ? netlink_getsockopt+0x590/0x590 [ 130.724465][ T6286] ? aa_sock_msg_perm+0x94/0x150 [ 130.729402][ T6286] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 130.734681][ T6286] ? security_socket_sendmsg+0x80/0xa0 [ 130.740132][ T6286] ? netlink_getsockopt+0x590/0x590 [ 130.745324][ T6286] ____sys_sendmsg+0x61b/0x980 [ 130.750089][ T6286] ? __asan_memset+0x22/0x40 [ 130.754675][ T6286] ? __sys_sendmsg_sock+0x30/0x30 [ 130.759692][ T6286] ? __import_iovec+0x5f2/0x850 [ 130.764545][ T6286] ? import_iovec+0x73/0xa0 [ 130.769044][ T6286] ___sys_sendmsg+0x2a6/0x360 [ 130.773719][ T6286] ? __sys_sendmsg+0x2b0/0x2b0 [ 130.778493][ T6286] ? trace_call_bpf+0xc3/0x6c0 [ 130.783280][ T6286] __se_sys_sendmsg+0x1d0/0x2c0 [ 130.788127][ T6286] ? perf_trace_preemptirq_template+0x269/0x330 [ 130.794365][ T6286] ? __x64_sys_sendmsg+0x80/0x80 [ 130.799307][ T6286] ? lockdep_hardirqs_on+0x98/0x150 [ 130.804509][ T6286] do_syscall_64+0x55/0xb0 [ 130.808919][ T6286] ? clear_bhb_loop+0x40/0x90 [ 130.813589][ T6286] ? clear_bhb_loop+0x40/0x90 [ 130.818255][ T6286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.824143][ T6286] RIP: 0033:0x7fd2b019ce59 [ 130.828556][ T6286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.848154][ T6286] RSP: 002b:00007fd2b1061028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.856562][ T6286] RAX: ffffffffffffffda RBX: 00007fd2b0415fa0 RCX: 00007fd2b019ce59 [ 130.864528][ T6286] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 130.872497][ T6286] RBP: 00007fd2b1061090 R08: 0000000000000000 R09: 0000000000000000 [ 130.880459][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.888425][ T6286] R13: 00007fd2b0416038 R14: 00007fd2b0415fa0 R15: 00007ffd2eab7548 [ 130.896402][ T6286] [ 130.900880][ T6287] hsr0: entered promiscuous mode [ 130.904890][ T6289] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 130.907274][ T6287] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 130.934627][ T6284] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.140'. [ 130.946856][ T6288] netlink: 199800 bytes leftover after parsing attributes in process `syz.0.140'. [ 131.242735][ T6297] netlink: 'syz.0.145': attribute type 39 has an invalid length. [ 132.138180][ T6314] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 132.264891][ T6313] netlink: 209816 bytes leftover after parsing attributes in process `syz.3.150'. [ 132.285031][ T6313] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.150'. [ 132.435031][ T6319] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 132.915479][ T6319] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 132.933504][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 132.951733][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.962028][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.288453][ T6322] netlink: 209816 bytes leftover after parsing attributes in process `syz.1.152'. [ 133.325514][ T6322] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.152'. [ 133.380978][ T6323] netlink: 199800 bytes leftover after parsing attributes in process `syz.1.152'. [ 133.417981][ T6325] FAULT_INJECTION: forcing a failure. [ 133.417981][ T6325] name failslab, interval 1, probability 0, space 0, times 0 [ 133.507227][ T6325] CPU: 0 PID: 6325 Comm: syz.3.153 Not tainted syzkaller #0 [ 133.514588][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.524674][ T6325] Call Trace: [ 133.527980][ T6325] [ 133.530937][ T6325] dump_stack_lvl+0x18c/0x250 [ 133.535658][ T6325] ? show_regs_print_info+0x20/0x20 [ 133.540892][ T6325] ? load_image+0x420/0x420 [ 133.545454][ T6325] should_fail_ex+0x394/0x4c0 [ 133.550175][ T6325] should_failslab+0x9/0x20 [ 133.554710][ T6325] slab_pre_alloc_hook+0x59/0x300 [ 133.559781][ T6325] kmem_cache_alloc+0x5a/0x2c0 [ 133.564572][ T6325] ? dst_alloc+0x105/0x170 [ 133.569032][ T6325] dst_alloc+0x105/0x170 [ 133.573324][ T6325] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 133.579419][ T6325] ? ip_route_output_key_hash_rcu+0x1241/0x2350 [ 133.585701][ T6325] ? ip_route_output_key_hash+0x13d/0x330 [ 133.591448][ T6325] ip_route_output_key_hash+0x1f3/0x330 [ 133.597027][ T6325] ? ip_route_input_rcu+0x3120/0x3120 [ 133.602422][ T6325] ? mark_lock+0x94/0x320 [ 133.606816][ T6325] tcp_v4_connect+0x6c1/0x18a0 [ 133.611609][ T6325] ? lockdep_hardirqs_on+0x98/0x150 [ 133.616872][ T6325] ? tcp_twsk_unique+0x970/0x970 [ 133.621842][ T6325] ? mptcp_token_new_connect+0x4b9/0x620 [ 133.627511][ T6325] mptcp_connect+0x403/0x5e0 [ 133.632121][ T6325] __inet_stream_connect+0x254/0xdf0 [ 133.637437][ T6325] ? inet_dgram_connect+0x340/0x340 [ 133.642667][ T6325] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 133.647879][ T6325] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 133.653267][ T6325] mptcp_sendmsg+0x144c/0x1670 [ 133.658054][ T6325] ? aa_sk_perm+0x83c/0x970 [ 133.662571][ T6325] ? aa_af_perm+0x330/0x330 [ 133.667073][ T6325] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 133.673489][ T6325] ? mptcp_shutdown+0x80/0x80 [ 133.678175][ T6325] ? sock_rps_record_flow+0x19/0x3f0 [ 133.683468][ T6325] ? inet_sendmsg+0xce/0x2a0 [ 133.688065][ T6325] ? inet_send_prepare+0x250/0x250 [ 133.693186][ T6325] ____sys_sendmsg+0x61b/0x980 [ 133.697962][ T6325] ? __asan_memset+0x22/0x40 [ 133.702553][ T6325] ? __sys_sendmsg_sock+0x30/0x30 [ 133.707577][ T6325] ? __import_iovec+0x3fa/0x850 [ 133.712444][ T6325] ? import_iovec+0x73/0xa0 [ 133.716956][ T6325] ___sys_sendmsg+0x2a6/0x360 [ 133.721646][ T6325] ? __sys_sendmsg+0x2b0/0x2b0 [ 133.726444][ T6325] ? __lock_acquire+0x7d80/0x7d80 [ 133.731509][ T6325] __se_sys_sendmsg+0x1d0/0x2c0 [ 133.736367][ T6325] ? __x64_sys_sendmsg+0x80/0x80 [ 133.741333][ T6325] ? lockdep_hardirqs_on+0x98/0x150 [ 133.746542][ T6325] do_syscall_64+0x55/0xb0 [ 133.750960][ T6325] ? clear_bhb_loop+0x40/0x90 [ 133.755632][ T6325] ? clear_bhb_loop+0x40/0x90 [ 133.760312][ T6325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.766212][ T6325] RIP: 0033:0x7f525df9ce59 [ 133.770639][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.790245][ T6325] RSP: 002b:00007f525eef3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.798663][ T6325] RAX: ffffffffffffffda RBX: 00007f525e215fa0 RCX: 00007f525df9ce59 [ 133.806632][ T6325] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000004 [ 133.814603][ T6325] RBP: 00007f525eef3090 R08: 0000000000000000 R09: 0000000000000000 [ 133.822572][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.830540][ T6325] R13: 00007f525e216038 R14: 00007f525e215fa0 R15: 00007ffe0f12ba28 [ 133.838539][ T6325] [ 134.231478][ T5783] Bluetooth: hci1: unexpected subevent 0x0a length: 15 < 30 [ 134.791427][ T6333] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 134.957386][ T3554] wlan1: Trigger new scan to find an IBSS to join [ 135.578684][ T6342] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 136.069626][ T6350] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 136.934383][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 138.041326][ T6357] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.163'. [ 138.221664][ T3554] wlan1: Creating new IBSS network, BSSID 4a:dd:6d:ba:fa:e2 [ 138.359713][ T6362] netlink: 611 bytes leftover after parsing attributes in process `syz.1.163'. [ 138.470358][ T6366] þ26±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 139.128353][ T6379] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 139.378023][ T6380] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.170'. [ 139.395641][ T6380] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.170'. [ 139.512487][ T6386] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.172'. [ 139.525413][ T6386] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.172'. [ 139.966235][ T3554] wlan1: Trigger new scan to find an IBSS to join [ 140.058552][ T5783] Bluetooth: hci2: unexpected subevent 0x0a length: 15 < 30 [ 140.962367][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'. [ 140.982309][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'. [ 141.210841][ T1079] wlan1: Creating new IBSS network, BSSID ca:5a:0c:78:dc:19 [ 141.414445][ T6417] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 141.692345][ T6419] netlink: 'syz.2.184': attribute type 13 has an invalid length. [ 141.730030][ T6419] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.184'. [ 141.760704][ T6421] Driver unsupported XDP return value 0 on prog (id 168) dev N/A, expect packet loss! [ 142.083734][ T5783] Bluetooth: hci3: unexpected subevent 0x0a length: 15 < 30 [ 142.432511][ T6437] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 142.462112][ T6437] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 142.502543][ T6442] netlink: 'syz.3.188': attribute type 11 has an invalid length. [ 142.510788][ T6442] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.188'. [ 142.551260][ T6437] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 142.607187][ T6437] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 142.669848][ T6437] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 142.740385][ T6445] macsec0: entered promiscuous mode [ 142.764888][ T6445] macsec0: entered allmulticast mode [ 142.770235][ T6445] veth1_macvtap: entered allmulticast mode [ 143.044149][ T6456] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.410566][ T6465] FAULT_INJECTION: forcing a failure. [ 143.410566][ T6465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.434738][ T6465] CPU: 0 PID: 6465 Comm: syz.2.197 Not tainted syzkaller #0 [ 143.442075][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.452149][ T6465] Call Trace: [ 143.455438][ T6465] [ 143.458377][ T6465] dump_stack_lvl+0x18c/0x250 [ 143.463075][ T6465] ? show_regs_print_info+0x20/0x20 [ 143.468293][ T6465] ? load_image+0x420/0x420 [ 143.472824][ T6465] ? __lock_acquire+0x7d80/0x7d80 [ 143.477862][ T6465] ? snprintf+0xe9/0x140 [ 143.482118][ T6465] should_fail_ex+0x394/0x4c0 [ 143.486815][ T6465] _copy_to_user+0x2f/0xa0 [ 143.491246][ T6465] simple_read_from_buffer+0xe7/0x150 [ 143.496646][ T6465] proc_fail_nth_read+0x1e8/0x260 [ 143.501693][ T6465] ? proc_fault_inject_write+0x360/0x360 [ 143.507349][ T6465] ? fsnotify_perm+0x271/0x5e0 [ 143.512218][ T6465] ? proc_fault_inject_write+0x360/0x360 [ 143.517867][ T6465] vfs_read+0x298/0x990 [ 143.522042][ T6465] ? kernel_read+0x1e0/0x1e0 [ 143.526651][ T6465] ? __fget_files+0x28/0x460 [ 143.531259][ T6465] ? __fget_files+0x3fc/0x460 [ 143.535961][ T6465] ? __fdget_pos+0x2a3/0x330 [ 143.540564][ T6465] ? ksys_read+0x74/0x260 [ 143.544910][ T6465] ksys_read+0x151/0x260 [ 143.549167][ T6465] ? vfs_write+0x9a0/0x9a0 [ 143.553596][ T6465] ? lockdep_hardirqs_on+0x98/0x150 [ 143.558821][ T6465] do_syscall_64+0x55/0xb0 [ 143.563248][ T6465] ? clear_bhb_loop+0x40/0x90 [ 143.567946][ T6465] ? clear_bhb_loop+0x40/0x90 [ 143.572646][ T6465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.578563][ T6465] RIP: 0033:0x7fd2b015d68e [ 143.583000][ T6465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.602624][ T6465] RSP: 002b:00007fd2b1060fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.611052][ T6465] RAX: ffffffffffffffda RBX: 00007fd2b10616c0 RCX: 00007fd2b015d68e [ 143.619030][ T6465] RDX: 000000000000000f RSI: 00007fd2b10610a0 RDI: 0000000000000005 [ 143.627010][ T6465] RBP: 00007fd2b1061090 R08: 0000000000000000 R09: 0000000000000000 [ 143.634985][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.642960][ T6465] R13: 00007fd2b0416038 R14: 00007fd2b0415fa0 R15: 00007ffd2eab7548 [ 143.650962][ T6465] [ 143.771413][ T5783] Bluetooth: hci2: unexpected subevent 0x0a length: 15 < 30 [ 143.925313][ T6472] FAULT_INJECTION: forcing a failure. [ 143.925313][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 143.985077][ T6472] CPU: 0 PID: 6472 Comm: syz.1.199 Not tainted syzkaller #0 [ 143.992422][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.002489][ T6472] Call Trace: [ 144.003987][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 144.005760][ T6472] [ 144.005769][ T6472] dump_stack_lvl+0x18c/0x250 [ 144.019892][ T6472] ? show_regs_print_info+0x20/0x20 [ 144.025122][ T6472] ? load_image+0x420/0x420 [ 144.029646][ T6472] ? __might_sleep+0xe0/0xe0 [ 144.034260][ T6472] ? __lock_acquire+0x7d80/0x7d80 [ 144.039308][ T6472] should_fail_ex+0x394/0x4c0 [ 144.044010][ T6472] should_failslab+0x9/0x20 [ 144.048535][ T6472] slab_pre_alloc_hook+0x59/0x300 [ 144.053584][ T6472] kmem_cache_alloc+0x5a/0x2c0 [ 144.058363][ T6472] ? security_file_alloc+0x34/0x120 [ 144.063575][ T6472] security_file_alloc+0x34/0x120 [ 144.068615][ T6472] init_file+0x94/0x1f0 [ 144.072799][ T6472] alloc_empty_file+0xb7/0x1d0 [ 144.077587][ T6472] alloc_file+0x5b/0x600 [ 144.081841][ T6472] alloc_file_pseudo+0x184/0x210 [ 144.086779][ T6472] ? alloc_empty_backing_file+0xe0/0xe0 [ 144.092330][ T6472] ? alloc_fd+0x590/0x640 [ 144.096656][ T6472] sock_alloc_file+0xb7/0x280 [ 144.101330][ T6472] __sys_socket+0x140/0x1b0 [ 144.105829][ T6472] __x64_sys_socket+0x7a/0x90 [ 144.110499][ T6472] do_syscall_64+0x55/0xb0 [ 144.114908][ T6472] ? clear_bhb_loop+0x40/0x90 [ 144.119579][ T6472] ? clear_bhb_loop+0x40/0x90 [ 144.124248][ T6472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.130138][ T6472] RIP: 0033:0x7f376699ce59 [ 144.134545][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.154139][ T6472] RSP: 002b:00007f3767811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 144.162543][ T6472] RAX: ffffffffffffffda RBX: 00007f3766c15fa0 RCX: 00007f376699ce59 [ 144.170505][ T6472] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 144.178464][ T6472] RBP: 00007f3767811090 R08: 0000000000000000 R09: 0000000000000000 [ 144.186428][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.194390][ T6472] R13: 00007f3766c16038 R14: 00007f3766c15fa0 R15: 00007ffef03147a8 [ 144.202362][ T6472] [ 144.338434][ T6478] netlink: 'syz.3.201': attribute type 11 has an invalid length. [ 144.354990][ T6478] __nla_validate_parse: 1 callbacks suppressed [ 144.355008][ T6478] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.201'. [ 144.411982][ T6478] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 144.433707][ T6478] CPU: 1 PID: 6478 Comm: syz.3.201 Not tainted syzkaller #0 [ 144.441050][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.451118][ T6478] Call Trace: [ 144.454398][ T6478] [ 144.457326][ T6478] dump_stack_lvl+0x18c/0x250 [ 144.462022][ T6478] ? show_regs_print_info+0x20/0x20 [ 144.467222][ T6478] ? load_image+0x420/0x420 [ 144.471736][ T6478] sysfs_warn_dup+0x8e/0xa0 [ 144.476241][ T6478] sysfs_do_create_link_sd+0xc0/0x110 [ 144.481614][ T6478] device_add_class_symlinks+0x1cf/0x240 [ 144.487254][ T6478] device_add+0x4f9/0xc40 [ 144.491592][ T6478] wiphy_register+0x1d99/0x2ac0 [ 144.496460][ T6478] ? cfg80211_event_work+0x40/0x40 [ 144.501568][ T6478] ? minstrel_ht_alloc+0x88a/0x990 [ 144.506685][ T6478] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 144.512756][ T6478] ieee80211_register_hw+0x2dd8/0x3b30 [ 144.518225][ T6478] ? ieee80211_register_hw+0xfc1/0x3b30 [ 144.523776][ T6478] ? ieee80211_tasklet_handler+0x20/0x20 [ 144.529407][ T6478] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 144.535307][ T6478] ? __debug_object_init+0xec/0x450 [ 144.540534][ T6478] ? __asan_memset+0x22/0x40 [ 144.545123][ T6478] ? __hrtimer_init+0x189/0x270 [ 144.549973][ T6478] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 144.555710][ T6478] ? mac80211_hwsim_free+0x220/0x220 [ 144.560989][ T6478] ? rcu_is_watching+0x15/0xb0 [ 144.565749][ T6478] ? kstrndup+0xbd/0x140 [ 144.569997][ T6478] hwsim_new_radio_nl+0xdad/0x1a70 [ 144.575108][ T6478] ? __nla_validate+0x50/0x50 [ 144.579790][ T6478] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 144.586126][ T6478] ? __nla_parse+0x40/0x50 [ 144.590547][ T6478] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 144.596877][ T6478] genl_family_rcv_msg_doit+0x21a/0x310 [ 144.602430][ T6478] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 144.608330][ T6478] ? bpf_lsm_capable+0x9/0x10 [ 144.613004][ T6478] ? security_capable+0x89/0xb0 [ 144.617858][ T6478] genl_rcv_msg+0x611/0x7a0 [ 144.622366][ T6478] ? genl_bind+0x360/0x360 [ 144.626781][ T6478] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 144.633111][ T6478] ? ref_tracker_free+0x686/0x830 [ 144.638131][ T6478] ? __kasan_kmalloc_large+0x8b/0xa0 [ 144.643420][ T6478] netlink_rcv_skb+0x235/0x4c0 [ 144.648186][ T6478] ? genl_bind+0x360/0x360 [ 144.652602][ T6478] ? netlink_ack+0x1160/0x1160 [ 144.657370][ T6478] ? __lock_acquire+0x7d80/0x7d80 [ 144.662397][ T6478] ? down_read+0x1ac/0x2e0 [ 144.666815][ T6478] genl_rcv+0x28/0x40 [ 144.670791][ T6478] netlink_unicast+0x7b1/0x930 [ 144.675560][ T6478] netlink_sendmsg+0x8d0/0xbf0 [ 144.680325][ T6478] ? netlink_getsockopt+0x590/0x590 [ 144.685521][ T6478] ? aa_sock_msg_perm+0x94/0x150 [ 144.690461][ T6478] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 144.695743][ T6478] ? security_socket_sendmsg+0x80/0xa0 [ 144.701195][ T6478] ? netlink_getsockopt+0x590/0x590 [ 144.706390][ T6478] ____sys_sendmsg+0x61b/0x980 [ 144.711157][ T6478] ? __asan_memset+0x22/0x40 [ 144.715746][ T6478] ? __sys_sendmsg_sock+0x30/0x30 [ 144.720763][ T6478] ? __import_iovec+0x5f2/0x850 [ 144.725623][ T6478] ? import_iovec+0x73/0xa0 [ 144.730124][ T6478] ___sys_sendmsg+0x2a6/0x360 [ 144.734806][ T6478] ? __sys_sendmsg+0x2b0/0x2b0 [ 144.739583][ T6478] ? trace_call_bpf+0xc3/0x6c0 [ 144.744368][ T6478] __se_sys_sendmsg+0x1d0/0x2c0 [ 144.749217][ T6478] ? perf_trace_preemptirq_template+0x269/0x330 [ 144.755456][ T6478] ? __x64_sys_sendmsg+0x80/0x80 [ 144.760409][ T6478] ? lockdep_hardirqs_on+0x98/0x150 [ 144.765610][ T6478] do_syscall_64+0x55/0xb0 [ 144.770021][ T6478] ? clear_bhb_loop+0x40/0x90 [ 144.774689][ T6478] ? clear_bhb_loop+0x40/0x90 [ 144.779358][ T6478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.785255][ T6478] RIP: 0033:0x7f525df9ce59 [ 144.789669][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.809268][ T6478] RSP: 002b:00007f525eef3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.817677][ T6478] RAX: ffffffffffffffda RBX: 00007f525e215fa0 RCX: 00007f525df9ce59 [ 144.825647][ T6478] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 144.833612][ T6478] RBP: 00007f525e032e6f R08: 0000000000000000 R09: 0000000000000000 [ 144.841574][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.849552][ T6478] R13: 00007f525e216038 R14: 00007f525e215fa0 R15: 00007ffe0f12ba28 [ 144.857542][ T6478] [ 145.258225][ T6487] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.629271][ T5783] Bluetooth: hci1: unexpected subevent 0x0a length: 15 < 30 [ 145.778947][ T6508] FAULT_INJECTION: forcing a failure. [ 145.778947][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 145.782954][ T6506] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 145.791975][ T6508] CPU: 0 PID: 6508 Comm: syz.0.214 Not tainted syzkaller #0 [ 145.792023][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.792036][ T6508] Call Trace: [ 145.792046][ T6508] [ 145.792057][ T6508] dump_stack_lvl+0x18c/0x250 [ 145.828076][ T6508] ? lock_chain_count+0x20/0x20 [ 145.832967][ T6508] ? show_regs_print_info+0x20/0x20 [ 145.838212][ T6508] ? load_image+0x420/0x420 [ 145.842771][ T6508] should_fail_ex+0x394/0x4c0 [ 145.847500][ T6508] should_failslab+0x9/0x20 [ 145.852037][ T6508] slab_pre_alloc_hook+0x59/0x300 [ 145.857107][ T6508] kmem_cache_alloc+0x5a/0x2c0 [ 145.861900][ T6508] ? __inet_hash_connect+0x808/0x1870 [ 145.867320][ T6508] __inet_hash_connect+0x808/0x1870 [ 145.872571][ T6508] ? inet_hash_connect+0x130/0x130 [ 145.877742][ T6508] ? inet_bhash2_reset_saddr+0x80/0x80 [ 145.883260][ T6508] tcp_v4_connect+0xc55/0x18a0 [ 145.888055][ T6508] ? lockdep_hardirqs_on+0x98/0x150 [ 145.893317][ T6508] ? tcp_twsk_unique+0x970/0x970 [ 145.898283][ T6508] ? mptcp_token_new_connect+0x4b9/0x620 [ 145.903965][ T6508] mptcp_connect+0x403/0x5e0 [ 145.908602][ T6508] __inet_stream_connect+0x254/0xdf0 [ 145.913941][ T6508] ? inet_dgram_connect+0x340/0x340 [ 145.919205][ T6508] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 145.924452][ T6508] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 145.929874][ T6508] mptcp_sendmsg+0x144c/0x1670 [ 145.934699][ T6508] ? aa_sk_perm+0x83c/0x970 [ 145.939246][ T6508] ? aa_af_perm+0x330/0x330 [ 145.943775][ T6508] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 145.950224][ T6508] ? mptcp_shutdown+0x80/0x80 [ 145.954938][ T6508] ? sock_rps_record_flow+0x19/0x3f0 [ 145.960261][ T6508] ? inet_sendmsg+0xce/0x2a0 [ 145.964886][ T6508] ? inet_send_prepare+0x250/0x250 [ 145.970038][ T6508] ____sys_sendmsg+0x61b/0x980 [ 145.974849][ T6508] ? __asan_memset+0x22/0x40 [ 145.979472][ T6508] ? __sys_sendmsg_sock+0x30/0x30 [ 145.984522][ T6508] ? __import_iovec+0x3fa/0x850 [ 145.989430][ T6508] ? import_iovec+0x73/0xa0 [ 145.993973][ T6508] ___sys_sendmsg+0x2a6/0x360 [ 145.998696][ T6508] ? __sys_sendmsg+0x2b0/0x2b0 [ 146.003538][ T6508] ? __lock_acquire+0x7d80/0x7d80 [ 146.008644][ T6508] __se_sys_sendmsg+0x1d0/0x2c0 [ 146.013536][ T6508] ? __x64_sys_sendmsg+0x80/0x80 [ 146.018548][ T6508] ? lockdep_hardirqs_on+0x98/0x150 [ 146.023795][ T6508] do_syscall_64+0x55/0xb0 [ 146.028251][ T6508] ? clear_bhb_loop+0x40/0x90 [ 146.032948][ T6508] ? clear_bhb_loop+0x40/0x90 [ 146.037640][ T6508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.043548][ T6508] RIP: 0033:0x7f625759ce59 [ 146.047968][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.067589][ T6508] RSP: 002b:00007f6258522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.076022][ T6508] RAX: ffffffffffffffda RBX: 00007f6257815fa0 RCX: 00007f625759ce59 [ 146.084007][ T6508] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000004 [ 146.091995][ T6508] RBP: 00007f6258522090 R08: 0000000000000000 R09: 0000000000000000 [ 146.099967][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.107941][ T6508] R13: 00007f6257816038 R14: 00007f6257815fa0 R15: 00007fff63913098 [ 146.115937][ T6508] [ 147.975180][ T3554] wlan1: Trigger new scan to find an IBSS to join [ 148.283095][ T6518] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 148.869823][ T6536] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.224'. [ 148.894758][ T6536] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.224'. [ 148.926421][ T6539] netlink: 'syz.1.226': attribute type 10 has an invalid length. [ 151.838282][ T6563] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.980836][ T6567] netlink: 'syz.3.234': attribute type 21 has an invalid length. [ 151.988932][ T6567] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.998469][ T6567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.006039][ T6567] IPv6: NLM_F_CREATE should be set when creating new route [ 152.013264][ T6567] IPv6: NLM_F_CREATE should be set when creating new route [ 152.020548][ T6567] IPv6: NLM_F_CREATE should be set when creating new route [ 152.092449][ T6569] netlink: 'syz.3.234': attribute type 21 has an invalid length. [ 152.105365][ T6569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.150410][ T6571] netlink: 'syz.2.237': attribute type 10 has an invalid length. [ 153.963885][ T1079] wlan1: Trigger new scan to find an IBSS to join [ 153.970456][ T1079] wlan1: Trigger new scan to find an IBSS to join [ 155.355827][ T1079] wlan1: Creating new IBSS network, BSSID 0a:90:2c:14:c8:49 [ 155.654177][ T6593] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.942956][ T6599] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.246'. [ 155.960394][ T6601] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 155.979805][ T6599] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.246'. [ 157.963898][ T1322] wlan1: Trigger new scan to find an IBSS to join [ 159.369285][ T6622] netlink: 140 bytes leftover after parsing attributes in process `syz.3.256'. [ 159.379070][ T6622] netlink: 10 bytes leftover after parsing attributes in process `syz.3.256'. [ 159.404498][ T6622] bond0: (slave bond_slave_0): Releasing backup interface [ 159.445340][ T6622] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 159.508929][ T6624] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 159.569026][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.616029][ T6624] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.740762][ T6631] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 160.247829][ T5783] Bluetooth: hci3: unknown advertising packet type: 0x74 [ 160.247901][ T5783] Bluetooth: hci3: Dropping invalid advertising data [ 160.262838][ T5783] Bluetooth: hci3: unknown advertising packet type: 0xdc [ 160.262862][ T5783] Bluetooth: hci3: Malformed LE Event: 0x02 [ 160.302553][ T6638] netlink: 'syz.2.261': attribute type 10 has an invalid length. [ 160.350014][ T6638] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.261'. [ 160.421960][ T6638] openvswitch: netlink: Flow key attr not present in new flow. [ 160.444843][ T6642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.261'. [ 160.538873][ T6645] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.263'. [ 160.548830][ T6645] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.263'. [ 160.845238][ T6651] FAULT_INJECTION: forcing a failure. [ 160.845238][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 160.858472][ T6651] CPU: 1 PID: 6651 Comm: syz.0.266 Not tainted syzkaller #0 [ 160.865815][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.875899][ T6651] Call Trace: [ 160.879202][ T6651] [ 160.882164][ T6651] dump_stack_lvl+0x18c/0x250 [ 160.886891][ T6651] ? show_regs_print_info+0x20/0x20 [ 160.892122][ T6651] ? load_image+0x420/0x420 [ 160.896677][ T6651] ? __might_sleep+0xe0/0xe0 [ 160.901302][ T6651] ? __lock_acquire+0x7d80/0x7d80 [ 160.906380][ T6651] should_fail_ex+0x394/0x4c0 [ 160.911112][ T6651] should_failslab+0x9/0x20 [ 160.915648][ T6651] slab_pre_alloc_hook+0x59/0x300 [ 160.920702][ T6651] ? __lock_acquire+0x7d80/0x7d80 [ 160.925775][ T6651] kmem_cache_alloc_node+0x5e/0x310 [ 160.931004][ T6651] ? __alloc_skb+0x103/0x2c0 [ 160.935646][ T6651] __alloc_skb+0x103/0x2c0 [ 160.940109][ T6651] netlink_sendmsg+0x66a/0xbf0 [ 160.944910][ T6651] ? perf_trace_lock+0x303/0x3b0 [ 160.949905][ T6651] ? netlink_getsockopt+0x590/0x590 [ 160.955151][ T6651] ? aa_sock_msg_perm+0x94/0x150 [ 160.960129][ T6651] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 160.965447][ T6651] ? security_socket_sendmsg+0x80/0xa0 [ 160.970936][ T6651] ? netlink_getsockopt+0x590/0x590 [ 160.976201][ T6651] ____sys_sendmsg+0x61b/0x980 [ 160.981035][ T6651] ? __asan_memset+0x22/0x40 [ 160.985672][ T6651] ? __sys_sendmsg_sock+0x30/0x30 [ 160.990730][ T6651] ? __import_iovec+0x3fa/0x850 [ 160.995651][ T6651] ? import_iovec+0x73/0xa0 [ 161.000213][ T6651] ___sys_sendmsg+0x2a6/0x360 [ 161.004976][ T6651] ? __sys_sendmsg+0x2b0/0x2b0 [ 161.009883][ T6651] ? __lock_acquire+0x7d80/0x7d80 [ 161.015054][ T6651] __se_sys_sendmsg+0x1d0/0x2c0 [ 161.019956][ T6651] ? __x64_sys_sendmsg+0x80/0x80 [ 161.024999][ T6651] ? lockdep_hardirqs_on+0x98/0x150 [ 161.030252][ T6651] do_syscall_64+0x55/0xb0 [ 161.034698][ T6651] ? clear_bhb_loop+0x40/0x90 [ 161.039407][ T6651] ? clear_bhb_loop+0x40/0x90 [ 161.044132][ T6651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.050056][ T6651] RIP: 0033:0x7f625759ce59 [ 161.054507][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.074145][ T6651] RSP: 002b:00007f6258522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.082601][ T6651] RAX: ffffffffffffffda RBX: 00007f6257815fa0 RCX: 00007f625759ce59 [ 161.090600][ T6651] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 161.098597][ T6651] RBP: 00007f6258522090 R08: 0000000000000000 R09: 0000000000000000 [ 161.106591][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.114584][ T6651] R13: 00007f6257816038 R14: 00007f6257815fa0 R15: 00007fff63913098 [ 161.122643][ T6651] [ 161.132248][ T6652] netlink: 'syz.2.267': attribute type 11 has an invalid length. [ 161.153592][ T6652] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.267'. [ 161.182768][ T6652] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 161.367396][ T6657] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.268'. [ 161.403770][ T6657] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.268'. [ 161.662527][ T6667] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.963784][ T3554] wlan1: Trigger new scan to find an IBSS to join [ 162.122473][ T6676] netlink: 'syz.2.274': attribute type 11 has an invalid length. [ 162.132561][ T6676] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.274'. [ 162.691078][ T6681] FAULT_INJECTION: forcing a failure. [ 162.691078][ T6681] name failslab, interval 1, probability 0, space 0, times 0 [ 162.721386][ T6681] CPU: 0 PID: 6681 Comm: syz.2.278 Not tainted syzkaller #0 [ 162.728727][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.738800][ T6681] Call Trace: [ 162.742100][ T6681] [ 162.745043][ T6681] dump_stack_lvl+0x18c/0x250 [ 162.749740][ T6681] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.755883][ T6681] ? show_regs_print_info+0x20/0x20 [ 162.761072][ T6681] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.767222][ T6681] should_fail_ex+0x394/0x4c0 [ 162.771887][ T6681] should_failslab+0x9/0x20 [ 162.776386][ T6681] slab_pre_alloc_hook+0x59/0x300 [ 162.781414][ T6681] ? allocate_cgrp_cset_links+0xaa/0x320 [ 162.787049][ T6681] __kmem_cache_alloc_node+0x53/0x250 [ 162.792421][ T6681] ? allocate_cgrp_cset_links+0xaa/0x320 [ 162.798051][ T6681] kmalloc_trace+0x2a/0xe0 [ 162.802467][ T6681] allocate_cgrp_cset_links+0xaa/0x320 [ 162.807922][ T6681] find_css_set+0xa12/0x15c0 [ 162.812523][ T6681] ? cgroup_migrate_prepare_dst+0x610/0x610 [ 162.818422][ T6681] ? mark_lock+0x94/0x320 [ 162.822758][ T6681] cgroup_migrate_prepare_dst+0x118/0x610 [ 162.828486][ T6681] cgroup_attach_task+0x5a6/0x8e0 [ 162.833511][ T6681] ? cgroup_attach_task+0x25d/0x8e0 [ 162.838709][ T6681] ? cgroup_migrate_execute+0xf20/0xf20 [ 162.844260][ T6681] ? get_task_cred+0x23/0x300 [ 162.848935][ T6681] ? get_task_cred+0x2c1/0x300 [ 162.853699][ T6681] ? get_task_cred+0x23/0x300 [ 162.858382][ T6681] __cgroup1_procs_write+0x2d8/0x3c0 [ 162.863679][ T6681] ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0 [ 162.869931][ T6681] ? cgroup_pidlist_stop+0xf0/0xf0 [ 162.875046][ T6681] cgroup_file_write+0x2cd/0x6a0 [ 162.879976][ T6681] ? kernfs_fop_write_iter+0x1dc/0x520 [ 162.885436][ T6681] ? cgroup_seqfile_stop+0xd0/0xd0 [ 162.890538][ T6681] ? __virt_addr_valid+0x10c/0x380 [ 162.895646][ T6681] ? __virt_addr_valid+0x10c/0x380 [ 162.900758][ T6681] ? cgroup_seqfile_stop+0xd0/0xd0 [ 162.905862][ T6681] kernfs_fop_write_iter+0x3a4/0x520 [ 162.911146][ T6681] vfs_write+0x474/0x9a0 [ 162.915390][ T6681] ? file_end_write+0x250/0x250 [ 162.920234][ T6681] ? lockdep_hardirqs_on+0x98/0x150 [ 162.925450][ T6681] ? __fdget_pos+0x2ab/0x330 [ 162.930046][ T6681] ksys_write+0x151/0x260 [ 162.934378][ T6681] ? __ia32_sys_read+0x90/0x90 [ 162.939140][ T6681] ? syscall_enter_from_user_mode+0x2e/0x80 [ 162.945038][ T6681] do_syscall_64+0x55/0xb0 [ 162.949449][ T6681] ? clear_bhb_loop+0x40/0x90 [ 162.954117][ T6681] ? clear_bhb_loop+0x40/0x90 [ 162.958784][ T6681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.964673][ T6681] RIP: 0033:0x7fd2b019ce59 [ 162.969082][ T6681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.988680][ T6681] RSP: 002b:00007fd2b1061028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.997086][ T6681] RAX: ffffffffffffffda RBX: 00007fd2b0415fa0 RCX: 00007fd2b019ce59 [ 163.005051][ T6681] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000007 [ 163.013014][ T6681] RBP: 00007fd2b1061090 R08: 0000000000000000 R09: 0000000000000000 [ 163.021004][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.028992][ T6681] R13: 00007fd2b0416038 R14: 00007fd2b0415fa0 R15: 00007ffd2eab7548 [ 163.036986][ T6681] [ 163.116058][ T6693] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.376145][ T6690] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.280'. [ 163.967204][ T1322] wlan1: Trigger new scan to find an IBSS to join [ 166.384467][ T6711] FAULT_INJECTION: forcing a failure. [ 166.384467][ T6711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.417839][ T6711] CPU: 1 PID: 6711 Comm: syz.3.287 Not tainted syzkaller #0 [ 166.425175][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.435246][ T6711] Call Trace: [ 166.438540][ T6711] [ 166.441481][ T6711] dump_stack_lvl+0x18c/0x250 [ 166.446176][ T6711] ? show_regs_print_info+0x20/0x20 [ 166.451377][ T6711] ? load_image+0x420/0x420 [ 166.455880][ T6711] ? __might_fault+0xaa/0x120 [ 166.460550][ T6711] ? __lock_acquire+0x7d80/0x7d80 [ 166.465569][ T6711] should_fail_ex+0x394/0x4c0 [ 166.470246][ T6711] _copy_from_user+0x2f/0xe0 [ 166.474831][ T6711] ___sys_sendmsg+0x1c7/0x360 [ 166.479500][ T6711] ? get_pid_task+0x20/0x1e0 [ 166.484093][ T6711] ? __sys_sendmsg+0x2b0/0x2b0 [ 166.488865][ T6711] ? __lock_acquire+0x7d80/0x7d80 [ 166.493987][ T6711] __se_sys_sendmsg+0x1d0/0x2c0 [ 166.498833][ T6711] ? perf_trace_preemptirq_template+0x269/0x330 [ 166.505072][ T6711] ? __x64_sys_sendmsg+0x80/0x80 [ 166.510013][ T6711] ? lockdep_hardirqs_on+0x98/0x150 [ 166.515207][ T6711] do_syscall_64+0x55/0xb0 [ 166.519615][ T6711] ? clear_bhb_loop+0x40/0x90 [ 166.524284][ T6711] ? clear_bhb_loop+0x40/0x90 [ 166.528951][ T6711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.534839][ T6711] RIP: 0033:0x7f525df9ce59 [ 166.539246][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.558844][ T6711] RSP: 002b:00007f525eef3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.567251][ T6711] RAX: ffffffffffffffda RBX: 00007f525e215fa0 RCX: 00007f525df9ce59 [ 166.575213][ T6711] RDX: 0000000000040001 RSI: 00002000000008c0 RDI: 0000000000000004 [ 166.583175][ T6711] RBP: 00007f525eef3090 R08: 0000000000000000 R09: 0000000000000000 [ 166.591136][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.599095][ T6711] R13: 00007f525e216038 R14: 00007f525e215fa0 R15: 00007ffe0f12ba28 [ 166.607069][ T6711] [ 166.888581][ T6718] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.289'. [ 166.900370][ T6718] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.289'. [ 169.823056][ T6727] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.116418][ T6732] netlink: 140 bytes leftover after parsing attributes in process `syz.0.294'. [ 170.128028][ T6732] netlink: 10 bytes leftover after parsing attributes in process `syz.0.294'. [ 170.143304][ T6732] bond0: (slave bond_slave_0): Releasing backup interface [ 170.168085][ T6732] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 170.194015][ T6736] netlink: 'syz.2.296': attribute type 21 has an invalid length. [ 170.397426][ T6740] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 170.557365][ T6736] syzkaller0: entered promiscuous mode [ 170.562915][ T6736] syzkaller0: entered allmulticast mode [ 170.646817][ T6736] syzkaller0: mtu less than device minimum [ 170.784462][ T6750] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.301'. [ 170.820085][ T6750] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.301'. [ 170.990586][ T6753] FAULT_INJECTION: forcing a failure. [ 170.990586][ T6753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.069111][ T6753] CPU: 1 PID: 6753 Comm: syz.2.302 Not tainted syzkaller #0 [ 171.076459][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.086534][ T6753] Call Trace: [ 171.089833][ T6753] [ 171.092780][ T6753] dump_stack_lvl+0x18c/0x250 [ 171.097488][ T6753] ? show_regs_print_info+0x20/0x20 [ 171.102708][ T6753] ? load_image+0x420/0x420 [ 171.107242][ T6753] ? __lock_acquire+0x7d80/0x7d80 [ 171.112285][ T6753] ? snprintf+0xe9/0x140 [ 171.116552][ T6753] should_fail_ex+0x394/0x4c0 [ 171.121262][ T6753] _copy_to_user+0x2f/0xa0 [ 171.125702][ T6753] simple_read_from_buffer+0xe7/0x150 [ 171.131105][ T6753] proc_fail_nth_read+0x1e8/0x260 [ 171.136158][ T6753] ? proc_fault_inject_write+0x360/0x360 [ 171.141817][ T6753] ? fsnotify_perm+0x271/0x5e0 [ 171.146598][ T6753] ? proc_fault_inject_write+0x360/0x360 [ 171.152253][ T6753] vfs_read+0x298/0x990 [ 171.156437][ T6753] ? kernel_read+0x1e0/0x1e0 [ 171.161050][ T6753] ? __fget_files+0x28/0x460 [ 171.165664][ T6753] ? __fget_files+0x3fc/0x460 [ 171.170368][ T6753] ? __fdget_pos+0x2a3/0x330 [ 171.174984][ T6753] ? ksys_read+0x74/0x260 [ 171.179333][ T6753] ksys_read+0x151/0x260 [ 171.183601][ T6753] ? vfs_write+0x9a0/0x9a0 [ 171.188041][ T6753] ? lockdep_hardirqs_on+0x98/0x150 [ 171.193261][ T6753] do_syscall_64+0x55/0xb0 [ 171.197697][ T6753] ? clear_bhb_loop+0x40/0x90 [ 171.202394][ T6753] ? clear_bhb_loop+0x40/0x90 [ 171.207092][ T6753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.213007][ T6753] RIP: 0033:0x7fd2b015d68e [ 171.217445][ T6753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.237075][ T6753] RSP: 002b:00007fd2b1060fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.245508][ T6753] RAX: ffffffffffffffda RBX: 00007fd2b10616c0 RCX: 00007fd2b015d68e [ 171.253499][ T6753] RDX: 000000000000000f RSI: 00007fd2b10610a0 RDI: 0000000000000006 [ 171.261488][ T6753] RBP: 00007fd2b1061090 R08: 0000000000000000 R09: 0000000000000000 [ 171.269477][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.277467][ T6753] R13: 00007fd2b0416038 R14: 00007fd2b0415fa0 R15: 00007ffd2eab7548 [ 171.285474][ T6753] [ 171.975395][ T3554] wlan1: Trigger new scan to find an IBSS to join [ 171.982030][ T12] wlan1: Trigger new scan to find an IBSS to join [ 173.600151][ T1079] wlan1: Creating new IBSS network, BSSID ee:98:11:da:7c:1d [ 175.963938][ T1079] wlan1: Trigger new scan to find an IBSS to join [ 176.870096][ T2977] wlan1: Creating new IBSS network, BSSID ce:3b:45:e4:f1:ec [ 176.906806][ T6764] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.919455][ T3509] ------------[ cut here ]------------ [ 176.925227][ T3509] WARNING: CPU: 0 PID: 3509 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 176.935161][ T3509] Modules linked in: [ 176.939079][ T3509] CPU: 0 PID: 3509 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 176.946948][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.957210][ T3509] Workqueue: cfg80211 cfg80211_event_work [ 176.962963][ T3509] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 176.969509][ T3509] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ae 8b a2 f7 0f 0b eb bf e8 a5 8b a2 f7 <0f> 0b eb b6 e8 9c 8b a2 f7 0f 0b e9 e2 fd ff ff e8 90 8b a2 f7 0f [ 176.989232][ T3509] RSP: 0018:ffffc9000d277a40 EFLAGS: 00010293 [ 176.995499][ T3509] RAX: ffffffff89e459ab RBX: dffffc0000000000 RCX: ffff88802e4a5a00 [ 177.003493][ T3509] RDX: 0000000000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0 [ 177.011558][ T3509] RBP: ffffc9000d277af8 R08: ffffffff911bc56f R09: 1ffffffff22378ad [ 177.019641][ T3509] R10: dffffc0000000000 R11: fffffbfff22378ae R12: ffff88807db60d10 [ 177.027760][ T3509] R13: ffff88807b043618 R14: 1ffff92001a4ef4c R15: 000000000000001f [ 177.035826][ T3509] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 177.044829][ T3509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.051596][ T3509] CR2: 0000001b2dd17ff8 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 177.059704][ T3509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.067748][ T3509] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 177.075845][ T3509] Call Trace: [ 177.079149][ T3509] [ 177.082107][ T3509] ? trace_rdev_return_void+0x1c0/0x1c0 [ 177.088036][ T3509] cfg80211_process_wdev_events+0x396/0x500 [ 177.094051][ T3509] cfg80211_process_rdev_events+0xa1/0x110 [ 177.099892][ T3509] cfg80211_event_work+0x2f/0x40 [ 177.104891][ T3509] ? process_scheduled_works+0x975/0x1600 [ 177.110641][ T3509] process_scheduled_works+0xa60/0x1600 [ 177.116392][ T3509] ? worker_attach_to_pool+0x370/0x370 [ 177.121883][ T3509] ? assign_work+0x3cc/0x5d0 [ 177.126582][ T3509] worker_thread+0xa5e/0xfe0 [ 177.131233][ T3509] kthread+0x2fa/0x390 [ 177.135389][ T3509] ? pr_cont_work+0x550/0x550 [ 177.140093][ T3509] ? kthread_blkcg+0xd0/0xd0 [ 177.144761][ T3509] ret_from_fork+0x48/0x80 [ 177.149345][ T3509] ? kthread_blkcg+0xd0/0xd0 [ 177.154032][ T3509] ret_from_fork_asm+0x11/0x20 [ 177.158843][ T3509] [ 177.161877][ T3509] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.169163][ T3509] CPU: 0 PID: 3509 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 177.176806][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.186877][ T3509] Workqueue: cfg80211 cfg80211_event_work [ 177.192622][ T3509] Call Trace: [ 177.195906][ T3509] [ 177.198842][ T3509] dump_stack_lvl+0x18c/0x250 [ 177.203540][ T3509] ? show_regs_print_info+0x20/0x20 [ 177.208756][ T3509] ? load_image+0x420/0x420 [ 177.213274][ T3509] panic+0x2ca/0x720 [ 177.217185][ T3509] ? bpf_jit_dump+0xd0/0xd0 [ 177.221731][ T3509] ? ret_from_fork_asm+0x11/0x20 [ 177.226700][ T3509] __warn+0x2e0/0x470 [ 177.230702][ T3509] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 177.236269][ T3509] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 177.241845][ T3509] report_bug+0x2be/0x4f0 [ 177.246206][ T3509] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 177.251777][ T3509] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 177.257340][ T3509] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 177.262910][ T3509] handle_bug+0xcf/0x120 [ 177.267175][ T3509] exc_invalid_op+0x1a/0x50 [ 177.271698][ T3509] asm_exc_invalid_op+0x1a/0x20 [ 177.274672][ T6776] netlink: 140 bytes leftover after parsing attributes in process `syz.1.306'. [ 177.274689][ T6776] netlink: 10 bytes leftover after parsing attributes in process `syz.1.306'. [ 177.294315][ T3509] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 177.300491][ T3509] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ae 8b a2 f7 0f 0b eb bf e8 a5 8b a2 f7 <0f> 0b eb b6 e8 9c 8b a2 f7 0f 0b e9 e2 fd ff ff e8 90 8b a2 f7 0f [ 177.320114][ T3509] RSP: 0018:ffffc9000d277a40 EFLAGS: 00010293 [ 177.326194][ T3509] RAX: ffffffff89e459ab RBX: dffffc0000000000 RCX: ffff88802e4a5a00 [ 177.334159][ T3509] RDX: 0000000000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0 [ 177.342121][ T3509] RBP: ffffc9000d277af8 R08: ffffffff911bc56f R09: 1ffffffff22378ad [ 177.350085][ T3509] R10: dffffc0000000000 R11: fffffbfff22378ae R12: ffff88807db60d10 [ 177.358050][ T3509] R13: ffff88807b043618 R14: 1ffff92001a4ef4c R15: 000000000000001f [ 177.366024][ T3509] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 177.371580][ T3509] ? trace_rdev_return_void+0x1c0/0x1c0 [ 177.377151][ T3509] cfg80211_process_wdev_events+0x396/0x500 [ 177.383065][ T3509] cfg80211_process_rdev_events+0xa1/0x110 [ 177.388878][ T3509] cfg80211_event_work+0x2f/0x40 [ 177.393816][ T3509] ? process_scheduled_works+0x975/0x1600 [ 177.399535][ T3509] process_scheduled_works+0xa60/0x1600 [ 177.405100][ T3509] ? worker_attach_to_pool+0x370/0x370 [ 177.410560][ T3509] ? assign_work+0x3cc/0x5d0 [ 177.415150][ T3509] worker_thread+0xa5e/0xfe0 [ 177.419754][ T3509] kthread+0x2fa/0x390 [ 177.423816][ T3509] ? pr_cont_work+0x550/0x550 [ 177.428489][ T3509] ? kthread_blkcg+0xd0/0xd0 [ 177.433069][ T3509] ret_from_fork+0x48/0x80 [ 177.438358][ T3509] ? kthread_blkcg+0xd0/0xd0 [ 177.442954][ T3509] ret_from_fork_asm+0x11/0x20 [ 177.447730][ T3509] [ 177.451007][ T3509] Kernel Offset: disabled [ 177.455387][ T3509] Rebooting in 86400 seconds..