last executing test programs: 4.614984149s ago: executing program 2 (id=608): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4880) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8a4, 0x8000}, 0x10000, 0xc8, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x20, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4df", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.135346944s ago: executing program 0 (id=611): r0 = gettid() r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018ca1c327106729b3cb8ca9c65000000000000000c0000000c0000000900000042c336df987931c9736d3895bd113497a9eaec066f3a0800df553a3b55000000000000071c000000002e"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[], 0x50) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r8 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x176, &(0x7f00000009c0)='@\x04\xdd\xa8\xd3}\xde\x06\xb2\x97\x95\xf6\xcb\xca\xd1\x18\xd1\x98b\xa44\xeb\"_@%\x1c\xdb\x91\x88\xac\x91[\xa1]Rd\x13\xe3b\xa0\x02\xcf\x8ay\xbb \x85\xde\x1cM\x12\x1e\x02\xc3\xc6\x93l=\xa7<\x110xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1f, 0x445}, 0x10, 0x5, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10140) 3.179352782s ago: executing program 2 (id=618): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe40, 0x1f, &(0x7f0000000140)="b9ff0300f9c76436000000e800", 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.940823255s ago: executing program 1 (id=619): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4880) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8a4, 0x8000}, 0x10000, 0xc8, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) 2.885289796s ago: executing program 0 (id=620): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 2.566029155s ago: executing program 1 (id=621): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4880) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8a4, 0x8000}, 0x10000, 0xc8, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x20, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4df", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.307236064s ago: executing program 3 (id=622): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4880) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4df", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.153433211s ago: executing program 2 (id=623): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r3) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, 0x0, &(0x7f00000002c0)=""/34}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r5 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r5, 0x6, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x6, 0x7, 0x10, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ec9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100508, 0x400, 0x2, 0x6, 0x8, 0x7, 0x9, 0x0, 0x800, 0x0, 0x80}, r7, 0x8, r0, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8", 0x57}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.229616835s ago: executing program 1 (id=624): r0 = gettid() r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018ca1c327106729b3cb8ca9c65000000000000000c0000000c0000000900000042c336df987931c9736d3895bd113497a9eaec066f3a0800df553a3b55000000000000071c000000002e"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[], 0x50) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r8 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x176, &(0x7f00000009c0)='@\x04\xdd\xa8\xd3}\xde\x06\xb2\x97\x95\xf6\xcb\xca\xd1\x18\xd1\x98b\xa44\xeb\"_@%\x1c\xdb\x91\x88\xac\x91[\xa1]Rd\x13\xe3b\xa0\x02\xcf\x8ay\xbb \x85\xde\x1cM\x12\x1e\x02\xc3\xc6\x93l=\xa7<\x110xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r11, &(0x7f0000000b00)="3b5bfdc5dbfa286c2ba29005ea17db7c3b49486e76e1b7e8307cf6f8bb06baedddb6ac4193a7d22f81d23c78d85fa00b9e708f06f3db63fbd485d2c2322f829e4d504945cce21529a6141496bcb3c44c24f91a9b1a7d6966ab4f4580a5f4798fbf6fe0b09a0f6215a09b1dacad39236a0a5336f1fbaceb1c1ca8780e6bd5206ca26c54ef846ca1748f6f209ddf4516db92189124c79a0bce82b30226ee748dd0d2b91c1fb67fe6c1827b019700dd618b0db1d19a707eaa0331c2d86be4c517a9bc22fc334248dc7857aeb497d36582169260a07b2c8014785f6f5bc740251ab4bb058226595c0d8519470f0664c28c738a21ff006cca50f3e66382a3c03c85964edf16916ee65629601e589b1c11d5421d1119f7030a6132dea8acc542e4584645d028b3bf138749f50a9a0ed380c6a48b6a8b614242fc3072faa59ba849ca15cd8809d879ef07c6e1985c0f6bd7e7730a6ea273fe8e7ad0939da2b307b311ff2a443d2af0173dfe3eb69097eef25ef34210de35f04b0bb77de14af8560a46b7af0896aef5b31218b776f46effe3f1af76f449b424cc66e51efe16d5d5c47fad74ea8179feabc73749edb3152fae070dcaa0e0e354c55be5aee143f648909efe23752bcd53cf863de07d29680882c9643981c65824c5b441e546b248747c5f920a1bfef5b07b76cc454186cd1233b92c6bcf5b49dccd3aa60e1237d09547d75fdf06b5d787dfc8886c2ecb60e2b39d08a5774ab5809f2f691cefe17e631b70b3dae9e626f49713878977c3c9851a75e9c19f15a7220f121f4581e93788fb2b9177db0bac9228c80e6981ade7a23368a4665c8c64d956c13f8d8b0dd6ec708123cf07337d6e27fba57324a38ccae2304c4873b3b40ca7006e7b34ae4c9ea8df3ba9ef5272ddc27a8d89b9592358f715e4283f0e898959aee69d8a39269e81813e00bf3915963af60cfa3395d2899911a3a78e869cf7671272878e6e5809a93ec67dab517bf3b7dbfb81cc8df12f6bfba9525966267a3feca2e5598b953e29ef6bd18e714ac5c53a44b106e4918e8b58f2ab9b40c58fbc4af980476875419f038be688ee11c9c38fbc210faa38adf6d2e510b0a1265632e3fa4a4499b025fa5c592ba1ab8dfd5d178718d187b4e3e63203147b6513a7081073f7e43f03efa0ce31ee43c66e032f952c6654884efa156fb6b377dc7776e21baf71eb246e2428c9b7847deefa4a2f7f215ee62729e7c2b29f34e9ff3787cf59d94e1fe9e5712329751d702772c893f0f679154282cc644c6ba6345094b5d9f3ec872e54016d220de36d31178879911f8f7ff999a4fe85f58caca23338a4100b8aaa9ce79d869a993be8e4b976b33566502817265c4a689c80d65ce142c6ff6e58dccbc5e4fb7623aab1e8075cda8c58a419dac78b782fd865601a4296172bab5943c8dbba550d38cddc2c153f7156f394e6335d982349adce2cc76b43d724a83e9e6505f3c94cf5f55a3c7ef5f6dc6fc47774ada233ee5f96dbf1facf52b29efdceca19fb3143783c1f1271158f1dd555b57db25136a8cc3900498da33c3ed5a33e9e251d95d2744fbc684f63563e6a87dd3d4b0721c1306f2ece326f997a999c113f648a4558768d891b0ff3cf9b56e35112e96effe70cea1432174982dab23677634dcb7df8f6c447b1e1e2bc7de85d6e3516f735d5c77340f995f1de3ad1ad1b8ccf86147fa8c494e020a1609fb67eae4d29b17fb6e6e1af9b99c51db4a3e185d663c4052aa4466f29cebe05418cf81136ef1ddc115b4be9c07291b58873f52e5201650dfa6ed9259930d9d00d38a68cd99b645466b1df5c62c80ca683c97b23548c6741620f2a797d425ffab220290b2c56355ec4f5484fc063f835e27e551d030aebcb225a30254c3cbf958df75003b35ba7868a3523d760d701d1d917569d1ef3f4f03a33b3c2ee5b5666ccfaf7b2e8d6d31468b785ff5e8fa5953a38b5cb77ed71027e1b5c10da5b2fccb102b16d98f34870785c8a08ee2eb6fcdf0e4dc89015d80ece18fa2edba11b781706198affb148e0edaea93c232857c5d72d5a4893a43a1fff8c4bf02ef4e0215e5c2f9342b6b748c71fdcad9318a871b978059e98339ad5a92c0452d60e61590eaa1df7c859302952954a7bbfbd8397f82d142766375c3fe9f4c87c0149eb22d418f3efc8f7ffea02871b7b58d2d4eadc98e342747621feeda299c415d87c410dd4f19249b1d7cfdee2e6865ac0095e680afdf5d01152ab826fa730571c3d848d86982fe48f831ba487ba4a67e254eb40e73a18df6db0b5bf57124fed9f4958c56dfd8afab6173d9d08607a2e32327b0e0b985cb8db9f1f0a5e11c17e53858105feb029791a20606115f64e0ba9aee26baed07b8793258be8b57c9c7a04bdd4d235c4cb7ae14c81db081844bb7ede5a4eba45b7b01d471a553c6b118b867f962f5f0a97949ac6fc506ebb1a229d8e5bbbfb6d6ef8ccfc0fbe54a8f7bd87e743c79cc91787073382e19341376a1f903b0b4422804493d7281f17dcfb5ca2790180569c4a3d5d6d32065c34c212f32826f3813480bf4f0c7e93c71bfb9cfa3273a05a46306c25f5d8e5ce51355ddbf630e5ef59c8f60db6017324510f5419c54aea611c33e4eded6306cd5968a3e8d2c5f883b5ea30499d7d897dad547a40b36223e67413b343c117669fb37418f946cc214091521662f7794dc882debc8d2ce49b3716c5b2ed3a641552add224768867005a1cb43364e643bb923a428bca3e3cd9bbb283d72f1aafc10c8ddc747bd697eb28d2e2bf6fd286b58eca079f11e4ab54466d2d8e8332b0d1da3cc9a0311cbacfe52b8285069d4417ac7f957552693f5d6c690562403d746c495d97267384c75215655a2d6016019adbc21cd98698a74224ce22328c74c4d7c853ff24b367512eda9f2fee787c6cbe524d63b6f3148783231576367698d39e7075af14446bececa6f8de6407fa9f05ea212743be3404db02e6212127370896bd9f11cdd8b1bd78ff88826b412dd658cf4a5ab28f0ba6deeb727ee12f349f05a4f905274f2b8ffa0629e889d542afb90063c94d943a53a112d3da03ed31d55c344edd9ec5eb95ef992ce6d60599bdd3bd8305ef61fb16ee988a0043b6808acb75dda225dfb57f2413d491f188e5da06d35b7a7bbdd39b05e9b2cd98d7ad708e1508f839d18cf2b6eda226092ea33d0ee29bba1c26b322b9800fa49ca567ff5a0dfa8a3f2434d4ee2ee8f09988cc2629e8e5d79be44856fc16e1df3b79e1f109b2207d9ab7e0e76287dc7f3f7aa6c90142dadf86a44997b0397233cab474ccdb7a6c7000444fcf82f0920d433386572747683237fc873389b6bd7fe59789dc3246218b47d4fa4048fd832bb5f84f561f72b9fbb346d931131449c6e0d87334338d915d4ddab5ff28126b31cdedaec76720a095ff59c3cce94137960e7fad287e0b36c1a444c51f42fadacae8b9eea5faad44a3f66310d6f60bcc11d4c368a08a2c2627edc127f399a383ba4ae034090878ca58e3d842d965982787d5b39f4b79ba487473c28af4dc963bc92f9051fb3810f3c58566b6282accb255144492b98fbcb4bf31a58db37dd534420982e82291945085557d610d90a0b2c020b4378d32b6c45a52717c347fcff9a14f0eff9680d3babf8f7f62352dd0b56a02712a77a33d0b7b10a25f197cdcbbf73a67f98c795b0fe2c26a84ac3cebf6f54e80a8f2a084de8ea6bbc3da49ee10ebe0fc9823b8f463fa11df7b3c65171fb5b82abc261e7372deaf1a98070bb344373e5c45328680f04750626139223e89a2a766c14c38dcd0b4d96b46af72e21f9b9d091eb2129f327a80d948a022291cfcf11fc2856399bf117ba72188d57f8d38530199c16fd587d8b6f86806de0b2265ea7f8039ad017df1a70e683cdf8f81b15d1762594cdd849508ae152b06b0713eb66166ad2f87ee918b71fba5c157b2895aae01657613c2a3212cbb7b4c07d578f9890db3986f3675650afd85216431a348058e3e618e314018250d811d329c9278fc7e8eac89cbf3911c721923cff7bf98a6ae395a3ff828a1c3c418998b81589ca167539a74e64e06f73f72db25dc907d1aa7d2da855b7a73ef12c0f12bce4c64c1eda1d6d872feb2f2c6dec441975f2f5ff3be69f852f883f9b249417de60eebb32921acf3f1f18b9f32e42ab44cccd52dbde894a00e07b1619ecf663062053327e551f9332a794e7a19919da554d2f44175e2f81c95725855d8359d1f456e11c636cd4e0032d5b26cf891184a3cf0539847e85a4d977d4b6ada527d17258f310a3fe064839e28d9cdcd5826e17a59f8a506605b742be4f49b48f2b08e68864cc34e8c929c3aaf65481f541fd0c220592e92152c62c7194ea7e4621e49ec0757e85107f9a902a403a21aea1859fbcc22c9f7b79e9f4e515947449ce5d5250b032b5f3ef60fff29cd2e7741edcdce8adb85c3f9e7eafa3bcc6705d0128de5fd44b5a8d9899fe0aeecef23928feacc1d5a63586e759197017d1527f4ae79ac99d05ad797fc7473639ae2122e25fd752176e53fa37cbcd5b45b104c6fd020a99a4d7d205d6c722eb5c3753ce7bd761b4201cb4b9d465d2e3c59cab77ea9bd5a0dfcb16893556afb458df15de4e8e15683ca57f9bd4e3e47823714a51acfa2ece45614e57fc42a0271e9911a4c349db3c39950bd517f97fd1e02226df08243dd6c79ba2a69fa1a86a68b15231d713ec6bb88e684bd611974f1a8cd4efe604235ac9fda684017a9546f28b6e4c4f29ffa491eb9419ee57d3f0a5218ce209a8a98b12d8976273e8c31d9c355ed06f3985f7fb90590d652b8b3205689aac449c245c814e8395b681e605f46c9ed273444312e03d3f40967badff8d4f97141c42c7c4519d9f205f74184281def2e4ac3a53844407f9431d7f49c15275ffaabb9a65512c2de38d917630bdcab9b822795adb127b5f44ffae3c8eda2a4d5352d138cc37f04ef6d2276b85be02f20a87bc0401c8a6cf06fd18ca8627e3e3f3a9e62cff04237f478a5b03f30d3226af9cfcf1b6ec11213fc791fd332b4d38761807d96a3e6ea7fa1b785aa104b991bb40b95d615d2adee9c2286908ddffc644ac03cb6acd782beb3d2bd93ee275da05e67489d328944e7c2c38eae279fda020861db182f2b545e9aa62183a619d82071f50215e3905634ead29c697126750b479e955c1fab42089123738d68186876ddca950be39ff6a6fd65be2f38ae072a2c0b70214b881654dbedb2695ee39beee48a9abff99f0f119091a44593de70628c1320e8b13c709fbe8a40d61e6a449fa1e7788831309786d720c4119ed844b16b94b57aaaf6dc5dcdd899c377d991c767c517dfa91de35d5de3b30dbad8f5561457f56cdaede543886b45000bfd60506e609bd8f067277697f56285f38be36edac9f079b6bc3f327169ec4e89f5290f6f1ff798d9a5b2351de714b3e76916509a5ec8f0e312831682f28d82d51bd0594933a29339772e7c7b02110516263c03bb2e093581889d296686ee91201131f44f3dff8fdbc87b11b01a3d1fa2a83b4610f338df825c4b819de4ec2310fd3b9928b8dd5b18a792c7c5f23ce77e10e6b7753d0ccab782795fe7150f129f6164ebee1faa6a6a6a4258f3c06af274b1fb690f7f14327126288638ce1ed61f56345e697fab7f686b4101761143f3f674f3ee63eba9be504519d1e23f3f2471e4a131d8a0d9e6a9adc9d067359279bb4bd302092cf19325c3f6d56254243836d8c823a1d7fd2eb11b6d79745f60e215", &(0x7f0000000780)=""/90}, 0x20) 899.920512ms ago: executing program 1 (id=628): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0xbec151108205ee6d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) 802.890957ms ago: executing program 3 (id=629): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4880) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8a4, 0x8000}, 0x10000, 0xc8, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) 726.295965ms ago: executing program 2 (id=630): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x4, 0xb}, {0x10000002, 0x0, 0x10, 0x2}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2, @perf_bp={0x0, 0x8}}) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1f, 0x445}, 0x10, 0x5, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10140) 702.022331ms ago: executing program 0 (id=631): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe40, 0x1f, &(0x7f0000000140)="b9ff0300f9c76436000000e800", 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 588.196173ms ago: executing program 3 (id=632): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4880) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8a4, 0x8000}, 0x10000, 0xc8, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x20, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4df", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) 565.855619ms ago: executing program 1 (id=633): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a11800150006", 0x21}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x1, 0x8, 0x1, 0xfe, 0x0, 0x6c59, 0x90000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x100, 0x3, 0x80000001, 0x2, 0x1, 0x0, 0x5, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0xbec151108205ee6d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 223.650515ms ago: executing program 0 (id=634): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r3) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, 0x0, &(0x7f00000002c0)=""/34}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r5 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r5, 0x6, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x6, 0x7, 0x10, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ec9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100508, 0x400, 0x2, 0x6, 0x8, 0x7, 0x9, 0x0, 0x800, 0x0, 0x80}, r7, 0x8, r0, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8", 0x57}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 0s ago: executing program 1 (id=635): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) kernel console output (not intermixed with test programs): [ 62.886709][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.896857][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 63.461268][ T5519] ssh-keygen (5519) used greatest stack depth: 19312 bytes left Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. syzkaller login: [ 83.067777][ T5758] cgroup: Unknown subsys name 'net' [ 83.207331][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.961721][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.633466][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.650121][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.658233][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.718839][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.726933][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.747986][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.755644][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.763532][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.770987][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.783314][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.789434][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.790991][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.800274][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.807320][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.820761][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.829085][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.838592][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.846673][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.847960][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.861995][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.862762][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.872687][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.884976][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.893781][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.397084][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.451845][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 87.518298][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 87.570986][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 87.634121][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.642099][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.650008][ T5773] bridge_slave_0: entered allmulticast mode [ 87.657336][ T5773] bridge_slave_0: entered promiscuous mode [ 87.694446][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.702116][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.709622][ T5773] bridge_slave_1: entered allmulticast mode [ 87.716672][ T5773] bridge_slave_1: entered promiscuous mode [ 87.767267][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.774618][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.782223][ T5772] bridge_slave_0: entered allmulticast mode [ 87.789972][ T5772] bridge_slave_0: entered promiscuous mode [ 87.818022][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.842309][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.850782][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.858044][ T5772] bridge_slave_1: entered allmulticast mode [ 87.865425][ T5772] bridge_slave_1: entered promiscuous mode [ 87.909787][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.960459][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.967610][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.978218][ T5771] bridge_slave_0: entered allmulticast mode [ 87.985800][ T5771] bridge_slave_0: entered promiscuous mode [ 87.994838][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.002273][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.009604][ T5771] bridge_slave_1: entered allmulticast mode [ 88.017169][ T5771] bridge_slave_1: entered promiscuous mode [ 88.053005][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.061301][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.068720][ T5770] bridge_slave_0: entered allmulticast mode [ 88.076333][ T5770] bridge_slave_0: entered promiscuous mode [ 88.086523][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.100736][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.141580][ T5773] team0: Port device team_slave_0 added [ 88.147997][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.156253][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.164817][ T5770] bridge_slave_1: entered allmulticast mode [ 88.172342][ T5770] bridge_slave_1: entered promiscuous mode [ 88.195185][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.206593][ T5773] team0: Port device team_slave_1 added [ 88.242152][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.311376][ T5772] team0: Port device team_slave_0 added [ 88.347747][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.360696][ T5772] team0: Port device team_slave_1 added [ 88.371125][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.394102][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.401439][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.428805][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.470880][ T5771] team0: Port device team_slave_0 added [ 88.478172][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.486396][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.512745][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.539109][ T5771] team0: Port device team_slave_1 added [ 88.572873][ T5770] team0: Port device team_slave_0 added [ 88.635125][ T5770] team0: Port device team_slave_1 added [ 88.642883][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.659328][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.686209][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.703222][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.712675][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.739228][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.753580][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.761009][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.787652][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.812911][ T5773] hsr_slave_0: entered promiscuous mode [ 88.824979][ T5773] hsr_slave_1: entered promiscuous mode [ 88.846915][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.854064][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.885242][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.899351][ T5786] Bluetooth: hci0: command tx timeout [ 88.899623][ T51] Bluetooth: hci2: command tx timeout [ 88.946652][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.953723][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.980407][ T51] Bluetooth: hci1: command tx timeout [ 88.980430][ T5786] Bluetooth: hci3: command tx timeout [ 88.992564][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.005420][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.012723][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.039084][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.111558][ T5771] hsr_slave_0: entered promiscuous mode [ 89.121992][ T5771] hsr_slave_1: entered promiscuous mode [ 89.128479][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.136361][ T5771] Cannot create hsr debugfs directory [ 89.222829][ T5770] hsr_slave_0: entered promiscuous mode [ 89.229818][ T5770] hsr_slave_1: entered promiscuous mode [ 89.236650][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.245089][ T5770] Cannot create hsr debugfs directory [ 89.257379][ T5772] hsr_slave_0: entered promiscuous mode [ 89.266211][ T5772] hsr_slave_1: entered promiscuous mode [ 89.273226][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.281361][ T5772] Cannot create hsr debugfs directory [ 89.599713][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.656945][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.697756][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.711532][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.843650][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.861703][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.880558][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.891398][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.995174][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.007522][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.024937][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.046928][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.127526][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.184217][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.195254][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.209319][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.219273][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.231029][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.276193][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.283659][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.325935][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.333155][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.362664][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.446329][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.494625][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.505670][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.513045][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.542810][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.550032][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.619121][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.654920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.662194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.689819][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.736216][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.755536][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.762718][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.811743][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.863738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.871075][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.923858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.931125][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.980360][ T51] Bluetooth: hci0: command tx timeout [ 90.985862][ T51] Bluetooth: hci2: command tx timeout [ 91.060369][ T51] Bluetooth: hci1: command tx timeout [ 91.060380][ T5786] Bluetooth: hci3: command tx timeout [ 91.144445][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.175041][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.333393][ T5773] veth0_vlan: entered promiscuous mode [ 91.364821][ T5773] veth1_vlan: entered promiscuous mode [ 91.385216][ T5771] veth0_vlan: entered promiscuous mode [ 91.417542][ T5771] veth1_vlan: entered promiscuous mode [ 91.517162][ T5773] veth0_macvtap: entered promiscuous mode [ 91.530731][ T5771] veth0_macvtap: entered promiscuous mode [ 91.545009][ T5773] veth1_macvtap: entered promiscuous mode [ 91.562084][ T5771] veth1_macvtap: entered promiscuous mode [ 91.582849][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.654178][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.689373][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.702948][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.716882][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.726896][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.755951][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767147][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.776877][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.786337][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.822307][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.833278][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.845155][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.887793][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.897413][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.907052][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.916587][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.930156][ T5770] veth0_vlan: entered promiscuous mode [ 91.985809][ T5770] veth1_vlan: entered promiscuous mode [ 91.997478][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.082901][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.098336][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.204130][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.214704][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.230317][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.238201][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.257555][ T5770] veth0_macvtap: entered promiscuous mode [ 92.305615][ T5772] veth0_vlan: entered promiscuous mode [ 92.320873][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.336827][ T5770] veth1_macvtap: entered promiscuous mode [ 92.346075][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.380748][ T5772] veth1_vlan: entered promiscuous mode [ 92.432872][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.467111][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.496913][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.516530][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.533871][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.562372][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.563030][ C0] hrtimer: interrupt took 76773 ns [ 92.586237][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.605285][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.641182][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.698124][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.727324][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.752618][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.763362][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.784182][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856978][ T5772] veth0_macvtap: entered promiscuous mode [ 92.893847][ T5772] veth1_macvtap: entered promiscuous mode [ 93.041332][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.059058][ T51] Bluetooth: hci2: command tx timeout [ 93.059182][ T5786] Bluetooth: hci0: command tx timeout [ 93.064856][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.106729][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.118620][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.133560][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.145568][ T5786] Bluetooth: hci3: command tx timeout [ 93.149700][ T51] Bluetooth: hci1: command tx timeout [ 93.160864][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.197647][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.248352][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.268970][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.291282][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.313822][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.331197][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.342521][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.391054][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.409246][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.417490][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.434709][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.454445][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.465694][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.478795][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.659259][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.677300][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.849031][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.882963][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.012984][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.048736][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.141378][ T51] Bluetooth: hci2: command tx timeout [ 95.146916][ T51] Bluetooth: hci0: command tx timeout [ 95.228518][ T5786] Bluetooth: hci1: command tx timeout [ 95.265435][ T5786] Bluetooth: hci3: command tx timeout [ 95.840477][ T5869] syzkaller0: entered promiscuous mode [ 95.854850][ T5869] syzkaller0: entered allmulticast mode [ 96.263700][ T5880] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.140966][ T5880] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 98.152120][ T5885] netlink: 'syz.0.14': attribute type 3 has an invalid length. [ 98.163873][ T5885] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.14'. [ 98.237645][ T28] cfg80211: failed to load regulatory.db [ 98.401859][ T5891] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 98.420735][ T5891] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.17'. [ 100.756511][ T5896] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 100.771806][ T5897] netlink: 'syz.0.19': attribute type 3 has an invalid length. [ 100.781372][ T5897] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.797579][ T5900] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 100.807744][ T5901] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.20'. [ 102.154078][ T5914] netlink: 'syz.2.26': attribute type 1 has an invalid length. [ 102.187467][ T5914] netlink: 'syz.2.26': attribute type 2 has an invalid length. [ 102.298853][ T5914] netlink: 'syz.2.26': attribute type 2 has an invalid length. [ 102.306763][ T5914] netlink: 'syz.2.26': attribute type 3 has an invalid length. [ 102.388705][ T5914] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 102.448840][ T5914] netlink: 'syz.2.26': attribute type 5 has an invalid length. [ 102.474038][ T5914] netlink: 'syz.2.26': attribute type 6 has an invalid length. [ 102.489012][ T5914] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.26'. [ 102.655424][ T5929] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.29'. [ 103.059504][ T137] wlan1: Trigger new scan to find an IBSS to join [ 103.060319][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 103.192835][ T5941] validate_nla: 6 callbacks suppressed [ 103.192863][ T5941] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 103.209878][ T5941] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.41'. [ 103.553096][ T5946] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 103.600062][ T5946] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.44'. [ 104.811217][ T5961] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 104.836626][ T5957] netlink: 'syz.3.37': attribute type 3 has an invalid length. [ 104.847431][ T5957] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.37'. [ 106.404872][ T5977] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 106.422147][ T5979] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.431583][ T5977] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.54'. [ 106.447009][ T5979] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.45'. [ 106.665775][ T5988] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 106.698692][ T5988] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.46'. [ 107.061012][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 107.067628][ T137] wlan1: Trigger new scan to find an IBSS to join [ 109.061269][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 109.424191][ T137] wlan1: Creating new IBSS network, BSSID 96:c7:5d:81:00:2e [ 111.022953][ T6010] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.067887][ T6014] netlink: 'syz.1.55': attribute type 3 has an invalid length. [ 111.087899][ T6014] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.55'. [ 111.815993][ T6022] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 111.828641][ T6022] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.61'. [ 111.960479][ T6020] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 112.006721][ T6020] netlink: 'syz.1.58': attribute type 3 has an invalid length. [ 112.035257][ T6020] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.58'. [ 112.104921][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 113.062110][ T146] wlan1: Trigger new scan to find an IBSS to join [ 113.189297][ T2965] wlan1: Creating new IBSS network, BSSID fe:a3:cf:23:5c:9c [ 113.715862][ T6055] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 113.738331][ T6060] netlink: 'syz.2.69': attribute type 3 has an invalid length. [ 113.759844][ T6060] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.69'. [ 113.898605][ T6061] syzkaller0: entered promiscuous mode [ 113.904387][ T6061] syzkaller0: entered allmulticast mode [ 114.067935][ T59] wlan1: Creating new IBSS network, BSSID d2:b0:bd:53:96:c9 [ 114.102889][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 115.133021][ T6071] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 115.143128][ T6071] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.74'. [ 116.020858][ T137] wlan1: Trigger new scan to find an IBSS to join [ 117.069161][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 118.814219][ T6086] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 118.828770][ T6086] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.81'. [ 120.691218][ T6078] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.705395][ T6080] netlink: 'syz.2.76': attribute type 3 has an invalid length. [ 120.713166][ T6080] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.76'. [ 120.883382][ T6092] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.926939][ T6092] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.85'. [ 121.106945][ T6101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.341534][ T6114] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 122.349843][ T6114] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.94'. [ 123.061974][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 123.078672][ T146] wlan1: Trigger new scan to find an IBSS to join [ 125.606733][ T6129] syzkaller0: entered promiscuous mode [ 125.615682][ T6129] syzkaller0: entered allmulticast mode [ 125.649367][ T6134] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.675384][ T6139] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.100'. [ 128.019597][ T12] wlan1: Trigger new scan to find an IBSS to join [ 128.035024][ T137] wlan1: Trigger new scan to find an IBSS to join [ 128.041859][ T146] wlan1: Trigger new scan to find an IBSS to join [ 128.929998][ T146] wlan1: Creating new IBSS network, BSSID 56:bf:a3:4a:a1:31 [ 128.944857][ T2965] wlan1: Creating new IBSS network, BSSID d2:4c:49:f2:50:ad [ 130.106683][ T6150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.063082][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 133.515961][ T2965] wlan1: Creating new IBSS network, BSSID 02:f5:5f:cd:e4:33 [ 133.523612][ T6169] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 133.654475][ T6175] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.113'. [ 133.989099][ T6183] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 134.017899][ T6183] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.116'. [ 134.051479][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.061196][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.396685][ T6191] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 134.426397][ T6191] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.120'. [ 134.803826][ T6189] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 134.905700][ T6193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.005383][ T6195] netlink: 'syz.0.128': attribute type 3 has an invalid length. [ 135.037251][ T6195] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.128'. [ 136.108804][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 136.165122][ T6210] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 136.207819][ T6210] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.134'. [ 137.065021][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 137.501218][ T6226] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 137.543363][ T6226] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.130'. [ 137.851390][ T6232] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 137.875519][ T6232] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.132'. [ 138.293494][ T6234] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 138.343683][ T6238] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.133'. [ 138.920612][ T6250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.973972][ T6253] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 139.000253][ T6253] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.141'. [ 139.638344][ T6262] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 139.647851][ T6262] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.144'. [ 141.059895][ T59] wlan1: Trigger new scan to find an IBSS to join [ 141.062097][ T146] wlan1: Trigger new scan to find an IBSS to join [ 141.223956][ T6277] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 141.234235][ T6277] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.148'. [ 143.305353][ T6283] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.358998][ T6284] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.152'. [ 143.700832][ T6292] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 143.713133][ T6292] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.153'. [ 143.724440][ T6293] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 143.736937][ T6290] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.765145][ T6290] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.161'. [ 143.777633][ T6293] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.163'. [ 144.168008][ T6300] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 144.239084][ T6300] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.154'. [ 144.419078][ T6307] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 144.444582][ T6307] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.157'. [ 145.717558][ T6320] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.743613][ T6324] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.165'. [ 145.769352][ T6323] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.805640][ T6325] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.166'. [ 145.956009][ T6329] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.995665][ T6329] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.175'. [ 146.008276][ T6333] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 146.019675][ T6333] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.167'. [ 147.059979][ T59] wlan1: Trigger new scan to find an IBSS to join [ 148.019623][ T59] wlan1: Trigger new scan to find an IBSS to join [ 148.026246][ T146] wlan1: Trigger new scan to find an IBSS to join [ 148.033417][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 149.090650][ T6342] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 149.099078][ T6339] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.107707][ T6342] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.171'. [ 149.121039][ T6344] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 149.153007][ T6344] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.169'. [ 149.187253][ T6339] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.170'. [ 150.456971][ T6359] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.549711][ T6359] netlink: 'syz.0.177': attribute type 3 has an invalid length. [ 150.588803][ T6359] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.177'. [ 150.807716][ T6364] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 150.869408][ T6364] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.179'. [ 151.070114][ T12] wlan1: Trigger new scan to find an IBSS to join [ 151.076737][ T146] wlan1: Trigger new scan to find an IBSS to join [ 151.543425][ T6367] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.579045][ T6368] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.180'. [ 153.058702][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 153.065371][ T12] wlan1: Trigger new scan to find an IBSS to join [ 153.252035][ T6371] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.277035][ T1304] wlan1: Creating new IBSS network, BSSID 1a:43:ae:a0:d6:6e [ 153.294130][ T6372] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.181'. [ 153.423549][ T6375] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 153.447010][ T6375] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.182'. [ 153.553469][ T6380] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.571357][ T6381] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.645629][ T6377] syzkaller0: entered promiscuous mode [ 153.664463][ T6377] syzkaller0: entered allmulticast mode [ 153.673577][ T6380] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.184'. [ 153.714798][ T6381] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.185'. [ 155.171511][ T6403] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 155.187979][ T6403] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.192'. [ 156.098854][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 157.062520][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 157.076675][ T12] wlan1: Trigger new scan to find an IBSS to join [ 158.049430][ T12] wlan1: Creating new IBSS network, BSSID 9e:c8:d2:8a:e5:1d [ 158.244394][ T6411] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 158.253610][ T6411] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.194'. [ 159.385147][ T6400] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.395178][ T6404] netlink: 'syz.3.191': attribute type 3 has an invalid length. [ 159.402973][ T6404] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.191'. [ 159.412930][ T6408] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.193'. [ 159.433149][ T6413] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.465201][ T6414] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.195'. [ 159.600934][ T6417] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.674415][ T6417] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.196'. [ 160.678213][ T6436] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 160.700868][ T6436] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.203'. [ 161.017798][ T6439] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.064933][ T6439] netlink: 'syz.2.204': attribute type 3 has an invalid length. [ 161.078887][ T6439] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.204'. [ 162.018714][ T2984] wlan1: Trigger new scan to find an IBSS to join [ 163.061561][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 163.834221][ T6444] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.874239][ T6448] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.206'. [ 163.894796][ T6449] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.207'. [ 164.119649][ T6455] Zero length message leads to an empty skb [ 166.020289][ T2984] wlan1: Trigger new scan to find an IBSS to join [ 166.027106][ T12] wlan1: Trigger new scan to find an IBSS to join [ 166.033875][ T59] wlan1: Trigger new scan to find an IBSS to join [ 167.039461][ T6458] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 167.065443][ T2965] wlan1: Creating new IBSS network, BSSID 2a:fb:62:74:97:b9 [ 167.098510][ T6461] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.209'. [ 167.403449][ T6472] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 167.457056][ T6472] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.214'. [ 168.234161][ T6479] syzkaller0: entered promiscuous mode [ 168.266649][ T6479] syzkaller0: entered allmulticast mode [ 169.059999][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 169.066715][ T12] wlan1: Trigger new scan to find an IBSS to join [ 169.073704][ T2965] wlan1: Creating new IBSS network, BSSID 56:d3:98:2c:89:fd [ 171.663614][ T6485] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 171.673095][ T6488] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.219'. [ 171.856226][ T6492] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 171.895811][ T6492] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.228'. [ 172.192952][ T6502] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.218773][ T6502] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.223'. [ 172.338338][ T6505] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 172.379160][ T6505] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.225'. [ 173.264950][ T6509] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.279307][ T6511] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.224'. [ 173.713828][ T6523] syzkaller0: entered promiscuous mode [ 173.783862][ T6523] syzkaller0: entered allmulticast mode [ 174.029356][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 176.099458][ T59] wlan1: Trigger new scan to find an IBSS to join [ 177.375433][ T6528] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.386787][ T6533] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.232'. [ 177.525494][ T6537] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.552638][ T6537] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.244'. [ 177.646158][ T6543] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 177.659583][ T6543] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.238'. [ 178.021695][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 178.746882][ T6551] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.772371][ T6555] netlink: 'syz.3.241': attribute type 3 has an invalid length. [ 178.796393][ T6555] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.241'. [ 179.058733][ T12] wlan1: Trigger new scan to find an IBSS to join [ 180.099072][ T137] wlan1: Trigger new scan to find an IBSS to join [ 181.060328][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 181.157127][ T1311] wlan1: Creating new IBSS network, BSSID d6:26:dc:6a:0f:4d [ 181.165266][ T12] wlan1: Creating new IBSS network, BSSID ba:d5:9c:6c:20:32 [ 181.507757][ T6566] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.549732][ T6566] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.248'. [ 181.879612][ T6573] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 181.904410][ T6573] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.251'. [ 182.434778][ T6579] FAULT_INJECTION: forcing a failure. [ 182.434778][ T6579] name failslab, interval 1, probability 0, space 0, times 1 [ 182.479136][ T6579] CPU: 1 PID: 6579 Comm: syz.3.253 Not tainted syzkaller #0 [ 182.486516][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.496652][ T6579] Call Trace: [ 182.500011][ T6579] [ 182.502997][ T6579] dump_stack_lvl+0x18c/0x250 [ 182.507770][ T6579] ? show_regs_print_info+0x20/0x20 [ 182.513136][ T6579] ? load_image+0x400/0x400 [ 182.517711][ T6579] ? __might_sleep+0xe0/0xe0 [ 182.522361][ T6579] ? __lock_acquire+0x7d40/0x7d40 [ 182.527445][ T6579] should_fail_ex+0x39d/0x4d0 [ 182.532204][ T6579] should_failslab+0x9/0x20 [ 182.536771][ T6579] slab_pre_alloc_hook+0x59/0x310 [ 182.541859][ T6579] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 182.547631][ T6579] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 182.553417][ T6579] __kmem_cache_alloc_node+0x53/0x250 [ 182.558906][ T6579] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 182.564684][ T6579] __kmalloc+0xa4/0x230 [ 182.568914][ T6579] tomoyo_realpath_from_path+0xe3/0x5d0 [ 182.574536][ T6579] tomoyo_path_number_perm+0x248/0x620 [ 182.580064][ T6579] ? tomoyo_path_number_perm+0x217/0x620 [ 182.585763][ T6579] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 182.591294][ T6579] ? ksys_write+0x1c4/0x260 [ 182.595923][ T6579] ? __fget_files+0x28/0x4b0 [ 182.600571][ T6579] ? __fget_files+0x28/0x4b0 [ 182.605257][ T6579] security_file_ioctl+0x70/0xa0 [ 182.610266][ T6579] __se_sys_ioctl+0x48/0x170 [ 182.614918][ T6579] do_syscall_64+0x55/0xa0 [ 182.619390][ T6579] ? clear_bhb_loop+0x40/0x90 [ 182.624144][ T6579] ? clear_bhb_loop+0x40/0x90 [ 182.628876][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.634827][ T6579] RIP: 0033:0x7f0e3199c629 [ 182.639303][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.659048][ T6579] RSP: 002b:00007f0e3279b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.667527][ T6579] RAX: ffffffffffffffda RBX: 00007f0e31c16090 RCX: 00007f0e3199c629 [ 182.675560][ T6579] RDX: 000000000000052b RSI: 0000000000002400 RDI: 0000000000000004 [ 182.683588][ T6579] RBP: 00007f0e3279b090 R08: 0000000000000000 R09: 0000000000000000 [ 182.691634][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.699659][ T6579] R13: 00007f0e31c16128 R14: 00007f0e31c16090 R15: 00007fff44c18cb8 [ 182.707717][ T6579] [ 182.769592][ T6579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.137844][ T6585] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.182815][ T6582] netlink: 'syz.1.254': attribute type 3 has an invalid length. [ 183.248716][ T6582] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.254'. [ 183.562004][ T6594] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.582035][ T6594] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.258'. [ 183.961775][ T6605] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 183.998212][ T6605] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.261'. [ 184.099287][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 185.058829][ T12] wlan1: Trigger new scan to find an IBSS to join [ 186.103958][ T2984] wlan1: Trigger new scan to find an IBSS to join [ 187.069012][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 187.964926][ T12] wlan1: Creating new IBSS network, BSSID 16:24:3d:9f:d8:67 [ 188.255527][ T6626] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.281676][ T6625] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.322578][ T6626] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.270'. [ 188.355345][ T6625] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.269'. [ 188.576755][ T6637] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 188.612842][ T6637] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.274'. [ 188.638181][ T6635] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.707071][ T6635] netlink: 'syz.0.272': attribute type 3 has an invalid length. [ 188.741709][ T6635] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.272'. [ 190.108714][ T12] wlan1: Trigger new scan to find an IBSS to join [ 191.058698][ T137] wlan1: Trigger new scan to find an IBSS to join [ 191.065325][ T137] wlan1: Trigger new scan to find an IBSS to join [ 191.076686][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 192.160707][ T1304] wlan1: Creating new IBSS network, BSSID ba:02:5d:c1:ab:06 [ 192.388255][ T6656] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 192.416509][ T6656] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.280'. [ 195.478957][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.485354][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.538743][ T6669] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.560648][ T6669] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.284'. [ 195.874326][ T6678] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 195.887799][ T6678] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.287'. [ 196.104207][ T137] wlan1: Trigger new scan to find an IBSS to join [ 196.125804][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 196.484551][ T6675] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.523473][ T6679] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.286'. [ 196.719759][ T6689] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 196.737391][ T6689] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.290'. [ 196.860501][ T6690] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.932220][ T6690] netlink: 'syz.2.289': attribute type 3 has an invalid length. [ 196.951462][ T6690] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.289'. [ 197.140716][ T146] wlan1: Creating new IBSS network, BSSID 9a:29:4c:5d:3c:28 [ 198.038212][ T6706] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.055412][ T6706] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.296'. [ 198.103291][ T59] wlan1: Trigger new scan to find an IBSS to join [ 198.250859][ T6712] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 198.318946][ T6712] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.299'. [ 199.067287][ T59] wlan1: Trigger new scan to find an IBSS to join [ 200.098562][ T137] wlan1: Trigger new scan to find an IBSS to join [ 201.380286][ T6722] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 201.388037][ T6722] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.306'. [ 202.603738][ T6738] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 202.648736][ T6739] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.310'. [ 203.059089][ T4317] wlan1: Creating new IBSS network, BSSID 8e:6a:73:0b:f0:77 [ 204.247497][ T6765] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 204.297190][ T6765] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.318'. [ 205.061474][ T146] wlan1: Trigger new scan to find an IBSS to join [ 205.111242][ T6769] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 205.158888][ T6772] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.321'. [ 205.264919][ T6776] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 205.318931][ T6776] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.322'. [ 208.264087][ T1311] wlan1: Creating new IBSS network, BSSID 6e:03:e2:aa:9b:48 [ 208.641009][ T6795] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.705137][ T6795] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.330'. [ 208.730804][ T6791] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.758243][ T6796] netlink: 'syz.2.337': attribute type 3 has an invalid length. [ 208.789151][ T6796] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.337'. [ 209.080039][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 211.058875][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 211.061083][ T59] wlan1: Trigger new scan to find an IBSS to join [ 211.839416][ T6802] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 211.873121][ T6804] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.332'. [ 212.904002][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 212.904869][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 212.910691][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 212.920098][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 214.019822][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 214.100405][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 214.111078][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 214.112111][ T146] wlan1: Trigger new scan to find an IBSS to join [ 215.175630][ T4317] wlan1: Creating new IBSS network, BSSID 5a:c5:4f:30:25:e5 [ 217.069470][ T146] wlan1: Creating new IBSS network, BSSID 2e:0c:ea:97:71:c4 [ 217.078617][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 218.165062][ T6821] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.201682][ T1311] wlan1: Creating new IBSS network, BSSID 56:33:ed:ed:75:40 [ 218.209338][ T6822] netlink: 'syz.1.339': attribute type 3 has an invalid length. [ 218.217127][ T6822] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.339'. [ 218.601583][ T6831] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.637430][ T6831] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.343'. [ 218.661004][ T6833] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.705002][ T6833] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.344'. [ 221.064610][ T146] wlan1: Trigger new scan to find an IBSS to join [ 221.599650][ T6846] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.714825][ T6847] netlink: 'syz.1.347': attribute type 3 has an invalid length. [ 221.764621][ T6847] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.347'. [ 221.854924][ T6852] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 221.867910][ T6852] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.349'. [ 224.110725][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 225.066381][ T6868] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.276505][ T6874] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.355'. [ 225.293055][ T6875] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.319104][ T6877] netlink: 'syz.0.356': attribute type 3 has an invalid length. [ 225.339841][ T6877] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.356'. [ 225.569520][ T6884] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.624914][ T6884] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.367'. [ 225.812603][ T6888] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.853846][ T6888] netlink: 'syz.3.360': attribute type 3 has an invalid length. [ 225.866519][ T6888] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.360'. [ 226.261451][ T6896] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 226.280365][ T6896] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.363'. [ 226.609420][ T6905] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 226.659297][ T6905] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.366'. [ 227.550095][ T6908] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.618607][ T6911] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.371'. [ 227.761688][ T6910] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.804682][ T6913] netlink: 'syz.2.370': attribute type 3 has an invalid length. [ 227.819130][ T6913] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.370'. [ 228.028588][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 228.120043][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 228.383370][ T6930] netlink: 'syz.2.378': attribute type 1 has an invalid length. [ 228.400653][ T6930] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.378'. [ 228.575533][ T6935] FAULT_INJECTION: forcing a failure. [ 228.575533][ T6935] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 228.603901][ T6932] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.615501][ T6935] CPU: 1 PID: 6935 Comm: syz.3.379 Not tainted syzkaller #0 [ 228.622881][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.633193][ T6935] Call Trace: [ 228.636524][ T6935] [ 228.639504][ T6935] dump_stack_lvl+0x18c/0x250 [ 228.644275][ T6935] ? show_regs_print_info+0x20/0x20 [ 228.649637][ T6935] ? load_image+0x400/0x400 [ 228.654265][ T6935] ? __might_fault+0xaa/0x120 [ 228.659026][ T6935] ? __lock_acquire+0x7d40/0x7d40 [ 228.664119][ T6935] should_fail_ex+0x39d/0x4d0 [ 228.668877][ T6935] _copy_from_iter+0x1d9/0x12e0 [ 228.673789][ T6935] ? slab_post_alloc_hook+0x8a/0x4b0 [ 228.679148][ T6935] ? __virt_addr_valid+0x18c/0x540 [ 228.684510][ T6935] ? __lock_acquire+0x7d40/0x7d40 [ 228.689600][ T6935] ? rcu_is_watching+0x15/0xb0 [ 228.694446][ T6935] ? copyout_mc+0x70/0x70 [ 228.698878][ T6935] ? __virt_addr_valid+0x18c/0x540 [ 228.704054][ T6935] ? __virt_addr_valid+0x18c/0x540 [ 228.709308][ T6935] ? __virt_addr_valid+0x469/0x540 [ 228.714570][ T6935] ? __check_object_size+0x506/0xa20 [ 228.719967][ T6935] netlink_sendmsg+0x76b/0xbf0 [ 228.724826][ T6935] ? netlink_getsockopt+0x590/0x590 [ 228.730115][ T6935] ? aa_sock_msg_perm+0x94/0x150 [ 228.735114][ T6935] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 228.740555][ T6935] ? security_socket_sendmsg+0x80/0xa0 [ 228.746071][ T6935] ? netlink_getsockopt+0x590/0x590 [ 228.751339][ T6935] ____sys_sendmsg+0x5ba/0x960 [ 228.756170][ T6935] ? __asan_memset+0x22/0x40 [ 228.760826][ T6935] ? __sys_sendmsg_sock+0x30/0x30 [ 228.765908][ T6935] ? __import_iovec+0x5f2/0x850 [ 228.770873][ T6935] ? import_iovec+0x73/0xa0 [ 228.775537][ T6935] ___sys_sendmsg+0x2a6/0x360 [ 228.780297][ T6935] ? __sys_sendmsg+0x2a0/0x2a0 [ 228.785152][ T6935] ? __lock_acquire+0x7d40/0x7d40 [ 228.790364][ T6935] __se_sys_sendmsg+0x1c2/0x2b0 [ 228.795374][ T6935] ? __x64_sys_sendmsg+0x80/0x80 [ 228.800574][ T6935] ? lockdep_hardirqs_on+0x98/0x150 [ 228.805919][ T6935] do_syscall_64+0x55/0xa0 [ 228.810395][ T6935] ? clear_bhb_loop+0x40/0x90 [ 228.815144][ T6935] ? clear_bhb_loop+0x40/0x90 [ 228.819975][ T6935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.825925][ T6935] RIP: 0033:0x7f0e3199c629 [ 228.830398][ T6935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.850408][ T6935] RSP: 002b:00007f0e327bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.858977][ T6935] RAX: ffffffffffffffda RBX: 00007f0e31c15fa0 RCX: 00007f0e3199c629 [ 228.867001][ T6935] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 228.875114][ T6935] RBP: 00007f0e327bc090 R08: 0000000000000000 R09: 0000000000000000 [ 228.883142][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.891173][ T6935] R13: 00007f0e31c16038 R14: 00007f0e31c15fa0 R15: 00007fff44c18cb8 [ 228.899218][ T6935] [ 228.926684][ T6932] netlink: 'syz.0.377': attribute type 3 has an invalid length. [ 228.941090][ T6932] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.377'. [ 229.118261][ T6938] syz.1.381 uses obsolete (PF_INET,SOCK_PACKET) [ 229.444592][ T6940] netlink: 'syz.1.381': attribute type 21 has an invalid length. [ 229.453307][ T6940] netlink: 'syz.1.381': attribute type 6 has an invalid length. [ 229.471230][ T6944] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 229.826374][ T6954] FAULT_INJECTION: forcing a failure. [ 229.826374][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 229.884753][ T6954] CPU: 1 PID: 6954 Comm: syz.3.387 Not tainted syzkaller #0 [ 229.892144][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.902263][ T6954] Call Trace: [ 229.905774][ T6954] [ 229.908823][ T6954] dump_stack_lvl+0x18c/0x250 [ 229.913641][ T6954] ? show_regs_print_info+0x20/0x20 [ 229.919082][ T6954] ? load_image+0x400/0x400 [ 229.923655][ T6954] ? __might_sleep+0xe0/0xe0 [ 229.928399][ T6954] ? __lock_acquire+0x7d40/0x7d40 [ 229.933496][ T6954] should_fail_ex+0x39d/0x4d0 [ 229.938238][ T6954] should_failslab+0x9/0x20 [ 229.942820][ T6954] slab_pre_alloc_hook+0x59/0x310 [ 229.948050][ T6954] ? sk_prot_alloc+0xe7/0x210 [ 229.953110][ T6954] ? sk_prot_alloc+0xe7/0x210 [ 229.958000][ T6954] __kmem_cache_alloc_node+0x53/0x250 [ 229.963817][ T6954] ? sk_prot_alloc+0xe7/0x210 [ 229.968665][ T6954] __kmalloc+0xa4/0x230 [ 229.973174][ T6954] sk_prot_alloc+0xe7/0x210 [ 229.978025][ T6954] ? sk_alloc+0x24/0x360 [ 229.982421][ T6954] sk_alloc+0x3a/0x360 [ 229.986693][ T6954] ? bpf_ctx_init+0x163/0x1a0 [ 229.991512][ T6954] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 229.997152][ T6954] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 230.002574][ T6954] ? __fget_files+0x28/0x4b0 [ 230.007424][ T6954] ? __fget_files+0x28/0x4b0 [ 230.012078][ T6954] ? __fget_files+0x43d/0x4b0 [ 230.017003][ T6954] ? cpu_online+0x60/0x60 [ 230.021629][ T6954] bpf_prog_test_run+0x321/0x390 [ 230.026691][ T6954] __sys_bpf+0x49d/0x890 [ 230.031017][ T6954] ? bpf_link_show_fdinfo+0x390/0x390 [ 230.036554][ T6954] ? lock_chain_count+0x20/0x20 [ 230.041539][ T6954] __x64_sys_bpf+0x7c/0x90 [ 230.046083][ T6954] do_syscall_64+0x55/0xa0 [ 230.050658][ T6954] ? clear_bhb_loop+0x40/0x90 [ 230.055491][ T6954] ? clear_bhb_loop+0x40/0x90 [ 230.060243][ T6954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.066391][ T6954] RIP: 0033:0x7f0e3199c629 [ 230.071008][ T6954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.090965][ T6954] RSP: 002b:00007f0e327bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.099546][ T6954] RAX: ffffffffffffffda RBX: 00007f0e31c15fa0 RCX: 00007f0e3199c629 [ 230.108069][ T6954] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 230.116283][ T6954] RBP: 00007f0e327bc090 R08: 0000000000000000 R09: 0000000000000000 [ 230.124521][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.132820][ T6954] R13: 00007f0e31c16038 R14: 00007f0e31c15fa0 R15: 00007fff44c18cb8 [ 230.141452][ T6954] [ 230.162849][ T137] wlan1: Trigger new scan to find an IBSS to join [ 230.171677][ T137] wlan1: Trigger new scan to find an IBSS to join [ 230.690912][ T6963] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 230.747068][ T6963] __nla_validate_parse: 2 callbacks suppressed [ 230.747099][ T6963] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.389'. [ 231.086531][ T6971] FAULT_INJECTION: forcing a failure. [ 231.086531][ T6971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.100910][ T6973] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.127067][ T6971] CPU: 1 PID: 6971 Comm: syz.0.393 Not tainted syzkaller #0 [ 231.134566][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.144765][ T6971] Call Trace: [ 231.148091][ T6971] [ 231.151074][ T6971] dump_stack_lvl+0x18c/0x250 [ 231.155918][ T6971] ? show_regs_print_info+0x20/0x20 [ 231.161298][ T6971] ? load_image+0x400/0x400 [ 231.165871][ T6971] ? __might_fault+0xaa/0x120 [ 231.170600][ T6971] ? __lock_acquire+0x7d40/0x7d40 [ 231.175688][ T6971] should_fail_ex+0x39d/0x4d0 [ 231.180515][ T6971] _copy_to_user+0x2f/0xa0 [ 231.184991][ T6971] bpf_test_finish+0x19f/0x650 [ 231.189875][ T6971] ? convert___skb_to_skb+0x590/0x590 [ 231.195307][ T6971] ? convert_skb_to___skb+0x420/0x420 [ 231.201013][ T6971] ? bpf_test_init+0x119/0x140 [ 231.205839][ T6971] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 231.211293][ T6971] ? dev_put+0x80/0x80 [ 231.215442][ T6971] ? dev_put+0x80/0x80 [ 231.219558][ T6971] bpf_prog_test_run+0x321/0x390 [ 231.224619][ T6971] __sys_bpf+0x49d/0x890 [ 231.229008][ T6971] ? bpf_link_show_fdinfo+0x390/0x390 [ 231.234461][ T6971] ? lock_chain_count+0x20/0x20 [ 231.239476][ T6971] __x64_sys_bpf+0x7c/0x90 [ 231.243923][ T6971] do_syscall_64+0x55/0xa0 [ 231.248376][ T6971] ? clear_bhb_loop+0x40/0x90 [ 231.253176][ T6971] ? clear_bhb_loop+0x40/0x90 [ 231.257970][ T6971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.263903][ T6971] RIP: 0033:0x7f41e6f9c629 [ 231.268367][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.288009][ T6971] RSP: 002b:00007f41e7d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.296545][ T6971] RAX: ffffffffffffffda RBX: 00007f41e7215fa0 RCX: 00007f41e6f9c629 [ 231.304556][ T6971] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 231.312648][ T6971] RBP: 00007f41e7d87090 R08: 0000000000000000 R09: 0000000000000000 [ 231.320735][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.328754][ T6971] R13: 00007f41e7216038 R14: 00007f41e7215fa0 R15: 00007ffc7890aa98 [ 231.336961][ T6971] [ 231.343020][ T6973] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.394'. [ 231.445744][ T6978] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.395'. [ 231.711086][ T6985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.400'. [ 232.098758][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 232.105366][ T146] wlan1: Trigger new scan to find an IBSS to join [ 232.510999][ T7007] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.527068][ T7007] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.407'. [ 233.080193][ T7025] FAULT_INJECTION: forcing a failure. [ 233.080193][ T7025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.119633][ T7025] CPU: 0 PID: 7025 Comm: syz.3.414 Not tainted syzkaller #0 [ 233.127110][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.137437][ T7025] Call Trace: [ 233.141579][ T7025] [ 233.144562][ T7025] dump_stack_lvl+0x18c/0x250 [ 233.149313][ T7025] ? show_regs_print_info+0x20/0x20 [ 233.154666][ T7025] ? load_image+0x400/0x400 [ 233.159231][ T7025] ? __might_fault+0xaa/0x120 [ 233.163949][ T7025] ? __lock_acquire+0x7d40/0x7d40 [ 233.169013][ T7025] should_fail_ex+0x39d/0x4d0 [ 233.173819][ T7025] _copy_from_iter+0x1d9/0x12e0 [ 233.178716][ T7025] ? slab_post_alloc_hook+0x8a/0x4b0 [ 233.184037][ T7025] ? __virt_addr_valid+0x18c/0x540 [ 233.189201][ T7025] ? __lock_acquire+0x7d40/0x7d40 [ 233.194266][ T7025] ? rcu_is_watching+0x15/0xb0 [ 233.199071][ T7025] ? copyout_mc+0x70/0x70 [ 233.203530][ T7025] ? __virt_addr_valid+0x18c/0x540 [ 233.208691][ T7025] ? __virt_addr_valid+0x18c/0x540 [ 233.213839][ T7025] ? __virt_addr_valid+0x469/0x540 [ 233.218983][ T7025] ? __check_object_size+0x506/0xa20 [ 233.224345][ T7025] netlink_sendmsg+0x76b/0xbf0 [ 233.229158][ T7025] ? netlink_getsockopt+0x590/0x590 [ 233.234486][ T7025] ? aa_sock_msg_perm+0x94/0x150 [ 233.239470][ T7025] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 233.244796][ T7025] ? security_socket_sendmsg+0x80/0xa0 [ 233.250368][ T7025] ? netlink_getsockopt+0x590/0x590 [ 233.255610][ T7025] ____sys_sendmsg+0x5ba/0x960 [ 233.260415][ T7025] ? __asan_memset+0x22/0x40 [ 233.265081][ T7025] ? __sys_sendmsg_sock+0x30/0x30 [ 233.270220][ T7025] ? __import_iovec+0x5f2/0x850 [ 233.275121][ T7025] ? import_iovec+0x73/0xa0 [ 233.279665][ T7025] ___sys_sendmsg+0x2a6/0x360 [ 233.284371][ T7025] ? get_pid_task+0x20/0x1e0 [ 233.288997][ T7025] ? __sys_sendmsg+0x2a0/0x2a0 [ 233.293806][ T7025] ? __lock_acquire+0x7d40/0x7d40 [ 233.299066][ T7025] __se_sys_sendmsg+0x1c2/0x2b0 [ 233.303973][ T7025] ? __x64_sys_sendmsg+0x80/0x80 [ 233.309048][ T7025] ? lockdep_hardirqs_on+0x98/0x150 [ 233.314287][ T7025] do_syscall_64+0x55/0xa0 [ 233.318751][ T7025] ? clear_bhb_loop+0x40/0x90 [ 233.323473][ T7025] ? clear_bhb_loop+0x40/0x90 [ 233.328201][ T7025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.334210][ T7025] RIP: 0033:0x7f0e3199c629 [ 233.338748][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.358825][ T7025] RSP: 002b:00007f0e327bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.367620][ T7025] RAX: ffffffffffffffda RBX: 00007f0e31c15fa0 RCX: 00007f0e3199c629 [ 233.375621][ T7025] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 233.383616][ T7025] RBP: 00007f0e327bc090 R08: 0000000000000000 R09: 0000000000000000 [ 233.391715][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.399716][ T7025] R13: 00007f0e31c16038 R14: 00007f0e31c15fa0 R15: 00007fff44c18cb8 [ 233.407730][ T7025] [ 233.509244][ T7030] Driver unsupported XDP return value 0 on prog (id 523) dev N/A, expect packet loss! [ 233.510815][ T7033] netlink: 'syz.0.416': attribute type 2 has an invalid length. [ 233.536451][ T7033] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.416'. [ 233.758036][ T7039] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 233.795620][ T7039] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.418'. [ 233.859657][ T7045] FAULT_INJECTION: forcing a failure. [ 233.859657][ T7045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.874532][ T7045] CPU: 0 PID: 7045 Comm: syz.1.421 Not tainted syzkaller #0 [ 233.881974][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.892091][ T7045] Call Trace: [ 233.895412][ T7045] [ 233.898388][ T7045] dump_stack_lvl+0x18c/0x250 [ 233.903127][ T7045] ? show_regs_print_info+0x20/0x20 [ 233.908376][ T7045] ? load_image+0x400/0x400 [ 233.913016][ T7045] ? __might_fault+0xaa/0x120 [ 233.917740][ T7045] ? __lock_acquire+0x7d40/0x7d40 [ 233.922856][ T7045] should_fail_ex+0x39d/0x4d0 [ 233.927607][ T7045] _copy_from_iter+0x1d9/0x12e0 [ 233.932606][ T7045] ? slab_post_alloc_hook+0x8a/0x4b0 [ 233.937960][ T7045] ? __virt_addr_valid+0x18c/0x540 [ 233.943121][ T7045] ? __lock_acquire+0x7d40/0x7d40 [ 233.948201][ T7045] ? rcu_is_watching+0x15/0xb0 [ 233.953027][ T7045] ? copyout_mc+0x70/0x70 [ 233.957403][ T7045] ? __virt_addr_valid+0x18c/0x540 [ 233.962637][ T7045] ? __virt_addr_valid+0x18c/0x540 [ 233.967783][ T7045] ? __virt_addr_valid+0x469/0x540 [ 233.972954][ T7045] ? __check_object_size+0x506/0xa20 [ 233.978427][ T7045] netlink_sendmsg+0x76b/0xbf0 [ 233.983251][ T7045] ? netlink_getsockopt+0x590/0x590 [ 233.988487][ T7045] ? aa_sock_msg_perm+0x94/0x150 [ 233.993551][ T7045] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 233.998866][ T7045] ? security_socket_sendmsg+0x80/0xa0 [ 234.004371][ T7045] ? netlink_getsockopt+0x590/0x590 [ 234.009609][ T7045] ____sys_sendmsg+0x5ba/0x960 [ 234.014491][ T7045] ? __asan_memset+0x22/0x40 [ 234.019127][ T7045] ? __sys_sendmsg_sock+0x30/0x30 [ 234.024190][ T7045] ? __import_iovec+0x5f2/0x850 [ 234.029099][ T7045] ? import_iovec+0x73/0xa0 [ 234.033650][ T7045] ___sys_sendmsg+0x2a6/0x360 [ 234.038381][ T7045] ? get_pid_task+0x20/0x1e0 [ 234.043017][ T7045] ? __sys_sendmsg+0x2a0/0x2a0 [ 234.047829][ T7045] ? __lock_acquire+0x7d40/0x7d40 [ 234.052930][ T7045] __se_sys_sendmsg+0x1c2/0x2b0 [ 234.057809][ T7045] ? __x64_sys_sendmsg+0x80/0x80 [ 234.062786][ T7045] ? lockdep_hardirqs_on+0x98/0x150 [ 234.068026][ T7045] do_syscall_64+0x55/0xa0 [ 234.072565][ T7045] ? clear_bhb_loop+0x40/0x90 [ 234.077359][ T7045] ? clear_bhb_loop+0x40/0x90 [ 234.082195][ T7045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.088137][ T7045] RIP: 0033:0x7f2a3ab9c629 [ 234.092601][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.112247][ T7045] RSP: 002b:00007f2a3b975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.120782][ T7045] RAX: ffffffffffffffda RBX: 00007f2a3ae15fa0 RCX: 00007f2a3ab9c629 [ 234.128782][ T7045] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 234.136865][ T7045] RBP: 00007f2a3b975090 R08: 0000000000000000 R09: 0000000000000000 [ 234.144870][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.152865][ T7045] R13: 00007f2a3ae16038 R14: 00007f2a3ae15fa0 R15: 00007ffce61a8068 [ 234.160966][ T7045] [ 234.170469][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 234.737181][ T7061] FAULT_INJECTION: forcing a failure. [ 234.737181][ T7061] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 234.753132][ T7061] CPU: 0 PID: 7061 Comm: syz.1.425 Not tainted syzkaller #0 [ 234.760497][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.770608][ T7061] Call Trace: [ 234.773959][ T7061] [ 234.776969][ T7061] dump_stack_lvl+0x18c/0x250 [ 234.781726][ T7061] ? show_regs_print_info+0x20/0x20 [ 234.787087][ T7061] ? load_image+0x400/0x400 [ 234.791663][ T7061] ? __lock_acquire+0x7d40/0x7d40 [ 234.796925][ T7061] should_fail_ex+0x39d/0x4d0 [ 234.801797][ T7061] prepare_alloc_pages+0x1e2/0x5f0 [ 234.806985][ T7061] __alloc_pages+0x134/0x460 [ 234.811633][ T7061] ? zone_statistics+0x170/0x170 [ 234.816772][ T7061] ? do_raw_spin_lock+0x11f/0x2c0 [ 234.821925][ T7061] ? __rwlock_init+0x150/0x150 [ 234.826905][ T7061] ? __mod_lruvec_page_state+0xa5/0x410 [ 234.832589][ T7061] pte_alloc_one+0x84/0x530 [ 234.837212][ T7061] ? pfn_modify_allowed+0x560/0x560 [ 234.842452][ T7061] ? __pud_alloc+0x1f0/0x1f0 [ 234.847081][ T7061] __pte_alloc+0x22/0x2a0 [ 234.851458][ T7061] handle_mm_fault+0x3ff8/0x4c00 [ 234.856435][ T7061] ? handle_mm_fault+0xe7/0x4c00 [ 234.861423][ T7061] ? numa_migrate_prep+0x350/0x350 [ 234.866577][ T7061] ? lock_chain_count+0x20/0x20 [ 234.871465][ T7061] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 234.876819][ T7061] do_user_addr_fault+0x730/0x12c0 [ 234.882000][ T7061] exc_page_fault+0x64/0x100 [ 234.886653][ T7061] asm_exc_page_fault+0x26/0x30 [ 234.891558][ T7061] RIP: 0010:__put_user_4+0x11/0x20 [ 234.896706][ T7061] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 234.916450][ T7061] RSP: 0018:ffffc90019d87e80 EFLAGS: 00050202 [ 234.922640][ T7061] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000280 [ 234.930647][ T7061] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c82e0 [ 234.938654][ T7061] RBP: 0000000000000004 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 234.946710][ T7061] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: 0000000000000800 [ 234.954729][ T7061] R13: 0000200000000280 R14: 0000000000000018 R15: 0000000000000800 [ 234.962926][ T7061] __sys_socketpair+0xb8/0x550 [ 234.967756][ T7061] __x64_sys_socketpair+0x9b/0xb0 [ 234.972914][ T7061] do_syscall_64+0x55/0xa0 [ 234.977403][ T7061] ? clear_bhb_loop+0x40/0x90 [ 234.982117][ T7061] ? clear_bhb_loop+0x40/0x90 [ 234.986841][ T7061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.992763][ T7061] RIP: 0033:0x7f2a3ab9c629 [ 234.997205][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.016946][ T7061] RSP: 002b:00007f2a3b975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 235.025482][ T7061] RAX: ffffffffffffffda RBX: 00007f2a3ae15fa0 RCX: 00007f2a3ab9c629 [ 235.033493][ T7061] RDX: 0000000000000003 RSI: 0000000000000800 RDI: 0000000000000018 [ 235.041546][ T7061] RBP: 00007f2a3b975090 R08: 0000000000000000 R09: 0000000000000000 [ 235.049556][ T7061] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 235.057648][ T7061] R13: 00007f2a3ae16038 R14: 00007f2a3ae15fa0 R15: 00007ffce61a8068 [ 235.065672][ T7061] [ 235.075002][ T137] wlan1: Trigger new scan to find an IBSS to join [ 235.596710][ T7083] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 235.604795][ T7083] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.434'. [ 235.615231][ T7079] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.651671][ T7079] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.432'. [ 236.236251][ T7095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 236.302657][ T7093] syzkaller0: entered promiscuous mode [ 236.327155][ T7093] syzkaller0: entered allmulticast mode [ 236.372965][ T7095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 236.632160][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 236.682738][ T4317] wlan1: Creating new IBSS network, BSSID f6:71:73:24:0a:2a [ 237.061362][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 238.018810][ T12] wlan1: Trigger new scan to find an IBSS to join [ 238.034861][ T12] wlan1: Creating new IBSS network, BSSID 6a:0c:85:de:3d:7e [ 238.104872][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 238.994428][ T59] wlan1: Creating new IBSS network, BSSID 32:53:5a:02:69:1f [ 240.315313][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 240.526991][ T7117] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 240.550381][ T7117] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.446'. [ 240.621184][ T7121] netlink: 'syz.0.448': attribute type 1 has an invalid length. [ 240.638686][ T7121] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.448'. [ 241.059822][ T146] wlan1: Trigger new scan to find an IBSS to join [ 243.454479][ T59] wlan1: Creating new IBSS network, BSSID a6:af:77:5d:5d:9a [ 243.463655][ T7126] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 243.544260][ T7127] netlink: 'syz.1.449': attribute type 3 has an invalid length. [ 243.588867][ T7127] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.449'. [ 244.669778][ T7143] syzkaller0: entered promiscuous mode [ 244.701200][ T7143] syzkaller0: entered allmulticast mode [ 246.019355][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 248.318233][ T7149] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.328549][ T7151] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.457'. [ 248.473078][ T7157] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 248.496701][ T7157] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.459'. [ 248.677635][ T7161] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.787360][ T7161] netlink: 'syz.1.461': attribute type 3 has an invalid length. [ 248.818958][ T7161] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.461'. [ 251.068782][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 251.075435][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 254.734575][ T7184] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 254.810889][ T7189] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.468'. [ 254.965168][ T7197] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 255.006579][ T7197] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.471'. [ 255.363141][ T7207] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 255.423930][ T7207] netlink: 'syz.0.475': attribute type 3 has an invalid length. [ 255.443661][ T7207] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.475'. [ 256.902218][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.918493][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.065368][ T146] wlan1: Trigger new scan to find an IBSS to join [ 257.075112][ T59] wlan1: Trigger new scan to find an IBSS to join [ 258.021779][ T146] wlan1: Trigger new scan to find an IBSS to join [ 258.937297][ T59] wlan1: Creating new IBSS network, BSSID a2:1f:13:98:aa:5a [ 258.947170][ T137] wlan1: Creating new IBSS network, BSSID ee:12:6e:1b:e8:f2 [ 259.169651][ T7229] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 259.236674][ T7229] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.482'. [ 259.392628][ T7237] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 259.419355][ T7237] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.486'. [ 259.920835][ T7248] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 260.004245][ T7248] netlink: 'syz.1.490': attribute type 3 has an invalid length. [ 260.058208][ T7248] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.490'. [ 262.100468][ T12] wlan1: Trigger new scan to find an IBSS to join [ 263.071274][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 263.362368][ T7266] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 263.426886][ T7266] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.496'. [ 263.638069][ T7273] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 263.650819][ T7273] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.499'. [ 264.421020][ T7282] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.489617][ T7282] netlink: 'syz.2.503': attribute type 3 has an invalid length. [ 264.508917][ T7282] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.503'. [ 265.104797][ T7299] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 265.117716][ T7299] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.508'. [ 265.739238][ T7296] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.759142][ T7298] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.507'. [ 266.749150][ T7324] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 266.773318][ T7324] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.517'. [ 266.860138][ T7322] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.956789][ T7322] netlink: 'syz.3.516': attribute type 3 has an invalid length. [ 266.990058][ T7322] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.516'. [ 267.081117][ T146] wlan1: Trigger new scan to find an IBSS to join [ 267.857899][ T7332] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 267.881324][ T7335] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.519'. [ 268.021314][ T12] wlan1: Trigger new scan to find an IBSS to join [ 268.100112][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 268.212897][ T7343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.575174][ T7353] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 268.594612][ T7353] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.527'. [ 268.780999][ T7358] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 268.861905][ T7358] netlink: 'syz.0.529': attribute type 3 has an invalid length. [ 268.904787][ T7358] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.529'. [ 269.061815][ T12] wlan1: Trigger new scan to find an IBSS to join [ 271.755692][ T7365] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.788048][ T7367] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.531'. [ 272.353689][ T7379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.028805][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 274.035692][ T2984] wlan1: Trigger new scan to find an IBSS to join [ 274.037670][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 274.042633][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 275.006655][ T1304] wlan1: Creating new IBSS network, BSSID 92:aa:9c:aa:b9:17 [ 275.014806][ T2984] wlan1: Creating new IBSS network, BSSID fe:b6:98:41:4a:40 [ 275.194537][ T7388] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 275.207377][ T7388] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.539'. [ 276.336811][ T7396] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 276.361130][ T7399] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.543'. [ 279.068999][ T59] wlan1: Trigger new scan to find an IBSS to join [ 279.575093][ T7395] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 279.594362][ T7401] netlink: 'syz.2.542': attribute type 3 has an invalid length. [ 279.613699][ T7401] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.542'. [ 279.877745][ T7413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.902529][ T7416] netlink: 'syz.0.550': attribute type 1 has an invalid length. [ 279.959524][ T7416] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.550'. [ 280.831258][ T7429] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 280.856406][ T7429] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.554'. [ 282.018653][ T137] wlan1: Trigger new scan to find an IBSS to join [ 283.058570][ T12] wlan1: Trigger new scan to find an IBSS to join [ 284.074300][ T7433] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 284.088122][ T7438] netlink: 'syz.1.555': attribute type 3 has an invalid length. [ 284.133408][ T7438] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.555'. [ 284.403435][ T7448] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 284.424796][ T7448] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.562'. [ 284.450202][ T7450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.804108][ T7458] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 284.865695][ T7458] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.565'. [ 285.912862][ T7467] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 285.962737][ T7471] netlink: 'syz.0.568': attribute type 3 has an invalid length. [ 285.987365][ T7471] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.568'. [ 286.145229][ T7479] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 286.189499][ T7479] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.573'. [ 286.349940][ T7483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.943513][ T7487] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 286.977942][ T7488] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.576'. [ 288.018621][ T59] wlan1: Trigger new scan to find an IBSS to join [ 288.025327][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 288.033030][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 289.058805][ T2984] wlan1: Trigger new scan to find an IBSS to join [ 290.344733][ T1304] wlan1: Creating new IBSS network, BSSID 52:6a:9f:af:e5:76 [ 290.420855][ T7507] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.449853][ T7509] netlink: 'syz.3.582': attribute type 3 has an invalid length. [ 290.478747][ T7509] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.582'. [ 290.523367][ T7514] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 290.531537][ T7514] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.584'. [ 290.819505][ T7518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.664092][ T7523] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 291.722940][ T7525] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.589'. [ 292.967659][ T7544] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 292.975750][ T7544] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.596'. [ 293.017094][ T7542] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.027178][ T7545] netlink: 'syz.2.595': attribute type 3 has an invalid length. [ 293.044616][ T7545] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.595'. [ 293.059928][ T146] wlan1: Trigger new scan to find an IBSS to join [ 293.066564][ T1311] wlan1: Trigger new scan to find an IBSS to join [ 293.562392][ T7553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.586112][ T7554] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.650590][ T7554] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.600'. [ 294.100484][ T2965] wlan1: Trigger new scan to find an IBSS to join [ 294.723081][ T146] wlan1: Creating new IBSS network, BSSID 72:10:32:61:ed:1f [ 294.751073][ T7572] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 294.779706][ T7572] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.607'. [ 295.687295][ T7577] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 295.720275][ T7580] netlink: 'syz.3.609': attribute type 3 has an invalid length. [ 295.754099][ T7580] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.609'. [ 295.778032][ T7583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.954295][ T7587] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 295.997612][ T7587] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.612'. [ 296.023072][ T1304] wlan1: Trigger new scan to find an IBSS to join [ 296.257674][ T7597] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 296.281883][ T7597] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.617'. [ 298.022360][ T137] wlan1: Trigger new scan to find an IBSS to join [ 298.030580][ T2984] wlan1: Trigger new scan to find an IBSS to join [ 298.037292][ T2984] wlan1: Trigger new scan to find an IBSS to join [ 298.153626][ T7614] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 298.171400][ T7615] netlink: 'syz.2.623': attribute type 3 has an invalid length. [ 298.187560][ T7615] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.623'. [ 298.334622][ T7618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.422018][ T7620] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 298.443310][ T7623] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 298.464359][ T7623] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.627'. [ 298.478075][ T7620] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.625'. [ 299.860299][ T12] wlan1: Creating new IBSS network, BSSID 92:bf:e7:ac:88:a4 [ 299.947338][ T2965] ------------[ cut here ]------------ [ 299.953609][ T2965] WARNING: CPU: 0 PID: 2965 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 299.963840][ T2965] Modules linked in: [ 299.967843][ T2965] CPU: 0 PID: 2965 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 299.975766][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.986146][ T2965] Workqueue: cfg80211 cfg80211_event_work [ 299.992095][ T2965] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 299.998452][ T2965] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 58 a2 f7 0f 0b eb bb e8 3e 58 a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 30 58 a2 f7 0f 0b e9 e0 fd ff ff e8 [ 300.018562][ T2965] RSP: 0018:ffffc9000bfc7a20 EFLAGS: 00010293 [ 300.024742][ T2965] RAX: ffffffff89e4bcd2 RBX: dffffc0000000000 RCX: ffff88802be91e00 [ 300.033201][ T2965] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 300.041343][ T2965] RBP: ffffc9000bfc7af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead [ 300.049500][ T2965] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff88805cbc8c90 [ 300.051202][ T7642] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 300.057523][ T2965] R13: 1ffff920017f8f4c R14: ffff8880771ab5b8 R15: 000000000000001f [ 300.057575][ T2965] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 300.057599][ T2965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.057620][ T2965] CR2: 00007f2a38df5ff8 CR3: 000000004d6be000 CR4: 00000000003506f0 [ 300.057645][ T2965] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.057663][ T2965] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 300.057684][ T2965] Call Trace: [ 300.057700][ T2965] [ 300.057722][ T2965] ? mutex_lock_nested+0x20/0x20 [ 300.057787][ T2965] ? trace_rdev_return_void+0x1c0/0x1c0 [ 300.057869][ T2965] cfg80211_process_wdev_events+0x3bc/0x550 [ 300.057946][ T2965] cfg80211_process_rdev_events+0xa1/0x110 [ 300.057991][ T2965] cfg80211_event_work+0x2f/0x40 [ 300.058021][ T2965] ? process_scheduled_works+0x96f/0x15d0 [ 300.058054][ T2965] process_scheduled_works+0xa5d/0x15d0 [ 300.058214][ T2965] ? assign_work+0x430/0x430 [ 300.058280][ T2965] ? assign_work+0x3d0/0x430 [ 300.058418][ T2965] worker_thread+0xa55/0xfc0 [ 300.058568][ T2965] kthread+0x2fa/0x390 [ 300.058595][ T2965] ? pr_cont_work+0x560/0x560 [ 300.058638][ T2965] ? kthread_blkcg+0xd0/0xd0 [ 300.058672][ T2965] ret_from_fork+0x48/0x80 [ 300.058704][ T2965] ? kthread_blkcg+0xd0/0xd0 [ 300.058740][ T2965] ret_from_fork_asm+0x11/0x20 [ 300.058840][ T2965] [ 300.058857][ T2965] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 300.058870][ T2965] CPU: 0 PID: 2965 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 300.058892][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.058908][ T2965] Workqueue: cfg80211 cfg80211_event_work [ 300.058934][ T2965] Call Trace: [ 300.058945][ T2965] [ 300.058957][ T2965] dump_stack_lvl+0x18c/0x250 [ 300.059012][ T2965] ? show_regs_print_info+0x20/0x20 [ 300.059052][ T2965] ? load_image+0x400/0x400 [ 300.059145][ T2965] panic+0x2dc/0x730 [ 300.059199][ T2965] ? bpf_jit_dump+0xd0/0xd0 [ 300.059272][ T2965] ? ret_from_fork_asm+0x11/0x20 [ 300.059329][ T2965] __warn+0x2e0/0x470 [ 300.059352][ T2965] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 300.059393][ T2965] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 300.059424][ T2965] report_bug+0x2be/0x4f0 [ 300.059459][ T2965] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 300.059493][ T2965] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 300.059525][ T2965] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 300.059556][ T2965] handle_bug+0xcf/0x120 [ 300.059596][ T2965] exc_invalid_op+0x1a/0x50 [ 300.059634][ T2965] asm_exc_invalid_op+0x1a/0x20 [ 300.059659][ T2965] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 300.059686][ T2965] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 58 a2 f7 0f 0b eb bb e8 3e 58 a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 30 58 a2 f7 0f 0b e9 e0 fd ff ff e8 [ 300.059705][ T2965] RSP: 0018:ffffc9000bfc7a20 EFLAGS: 00010293 [ 300.059728][ T2965] RAX: ffffffff89e4bcd2 RBX: dffffc0000000000 RCX: ffff88802be91e00 [ 300.059746][ T2965] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 300.059763][ T2965] RBP: ffffc9000bfc7af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead [ 300.059780][ T2965] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff88805cbc8c90 [ 300.059797][ T2965] R13: 1ffff920017f8f4c R14: ffff8880771ab5b8 R15: 000000000000001f [ 300.059846][ T2965] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 300.059907][ T2965] ? mutex_lock_nested+0x20/0x20 [ 300.059961][ T2965] ? trace_rdev_return_void+0x1c0/0x1c0 [ 300.060038][ T2965] cfg80211_process_wdev_events+0x3bc/0x550 [ 300.060114][ T2965] cfg80211_process_rdev_events+0xa1/0x110 [ 300.060153][ T2965] cfg80211_event_work+0x2f/0x40 [ 300.060178][ T2965] ? process_scheduled_works+0x96f/0x15d0 [ 300.060229][ T2965] process_scheduled_works+0xa5d/0x15d0 [ 300.060374][ T2965] ? assign_work+0x430/0x430 [ 300.060435][ T2965] ? assign_work+0x3d0/0x430 [ 300.060494][ T2965] worker_thread+0xa55/0xfc0 [ 300.060635][ T2965] kthread+0x2fa/0x390 [ 300.060657][ T2965] ? pr_cont_work+0x560/0x560 [ 300.060696][ T2965] ? kthread_blkcg+0xd0/0xd0 [ 300.060723][ T2965] ret_from_fork+0x48/0x80 [ 300.060750][ T2965] ? kthread_blkcg+0xd0/0xd0 [ 300.060781][ T2965] ret_from_fork_asm+0x11/0x20 [ 300.060874][ T2965] [ 300.061482][ T2965] Kernel Offset: disabled