last executing test programs: 6.526801794s ago: executing program 2 (id=1362): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f0000000880)=""/267, 0x10b}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f00000010c0)=""/260, 0x104}, {&(0x7f0000000bc0)=""/42, 0x2a}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000e80)=""/232, 0xe8}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0x10}, 0x1a000) 5.407714591s ago: executing program 0 (id=1368): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000180)=[{0x0, 0x52}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fe718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435ae5b317c6c818976d92f97879f07a515bb7b015d24933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x40) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a7052520957086ce998f701e6182949a3651f60a84c9f4d49380", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab971573", 0x32}, {&(0x7f0000000380)="7cdb015fbb1990080000006a2615837b64e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab810f9b28f1c727dfb762e85fded2f0afcd5f12f4584d19a07664fe9334ce42ee0246bbeb87b187029b705f4501", 0x5c}, {&(0x7f00000016c0)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f725e1165f4333f06cbce55a5f20f3095d1492f30e34c2e78534aa2059bcdd5e6c215f8a1d23f5b78a8119bd6c6c6e104923606c286343b114791a0a866bcccd0fb4fa8a960d6e7a59fd52884294b949a1a028d0fd8aefa6ee1070863365ffdfc3ab2876f7423594e3ff0182a3b92a1d51842ad30dab67f17c9938c758102e63c18870f229e0ffd2398686915f863c49fdc6e949856be1d47dac4f6d56e49c9fe34ec3306a64761d6fce755e911854ad8aaf1eb5411bdd83773c3dbf8a774f02e39ce9a13692a2e62e497588697b3406011dff49e483b7af2e2ab2324cdb0854dd9c05fcd9f7891d3f4d166b88a26a1463ac7f87ab1108eb14620661c1eb302caa7417ef79e468c0447f90f85a5b7c8dfed05edcd6cd56eb526a10b859e6e23f7e8d0911defae5937f74d4b60e05992585a3a88d7234c77a5038ae4c84942a6dd682094421a9d22e412f8500823a9482dcddef53022db0e12a7ba36547b7a62e5a22279966bf8c9783d5ca2ebcff237bbbc50ae48f87e4bca97b69279826358efe838bd7a503a2d42ee1989e9302a221882e5d149588122a48becb9d21da437bd16fb3f5de45b8a2098d7597c2d12229f5887719ffeacbf702dd2ca8d3208c56f125a4e90207112d664a279eefb37ed3bd9cd4087a1ade4f8afb23bdf540d2342c714425a382c9c70dc444caa1cccb4f378851829702787c5386caed6b9361e8525cb6b25a8caaf3c6090b43a981f03dcc806caaf5d70750859be2de86be08795188b55538e5bb687bacd577d8d8c12dbdd6fb1f180a19012a052d563fef0ed3a87b3df41a64331db2bf12473d38e03160cc18210425e4aeb63766899824508ba8bdf44f97351d1c9d0fd503863bc10443ec1636cd29a611cc2df523eb995d909d1a4f2807853f6f3dc238d59306367fb25ef0b43be8b4b74d49eb1e0a5fd0b2d682b9f42203026c279b470e31da23e41bfa3fb17fcdeca7b27a14a9fcc1b0e6d41efe6f5b357eaff60460cf61fe3ddddb1cf9b19569f98dc79f1280ae1e163f5b2d8efee979ec17d6108d82443189cffb15baca91855646745d319bae3d6cae9dfbb9bbe70d20e74ac9e55b06bf40eb987112f8cd370f212f03c996baf884d4dab522a23d98bd3699fa244c5abac50a9650d199d9ef94ea932edf2153e02c9ec9c2d3d516a128584e4071b6f8aa04727f2703e80523504880b921d4326d648ba677bc920567e5282e4630c0e414b24e5c0799ca1ced216f86aec82fe9687b3f924dfef531b3bc2686a1e3042885bfe23445a7c15dce0090a7eb0ebd69be730c01bca3125e0e17f6e6d3496e599ee2ac90c6d6bb21d2e42ce7cb018ec5d8097d074393a5700c646f7c7ca8d0a81f3d6babdf028ef740f2272a5f2bf8f6978c3c6167f49fb5383e286e603ea58251409f6eb9412387fba434d6a2adae5d87ad5b3eae0b990f4a2860d4eaf4f36cd16762361514b9a5b20523c57771b87b921631113d5a1400de65766c57a2b94939cb4170afbd9cbd1be74832bcb81a8c2ceff17bdb76761ca2b7a2aed7f880ee1e3064271b456bd78f1e7cdf192ddc495a9356ce36d95d75b01616528bfdca5523ab300b1221b1690cb76bc41125b67fed8d04d6115cd2afd8569c1c5c25a007ab9638168d6c16ff4bb4e62cb4f723f43758675e7139c12690ecb34fb9334cf54aefd4d91adda73842bccd2e4d5ce192a92a8a6984156df13fef823cbdcf87ca87dd4d6a1d7a61ce161d319c72a0936a05b0da86fa08091436af30ea6234bffe2c163f9b521c2f886aef8b715a7e48055204172228ad64278968ccd01db0df89806cc8557e5f8a66fcf1dadae893f0b51db73c8035846fee2461fb272546d3b6b96ff24d0beff07ef96c2d157fd751d76079276effada716a933be58bf3ffc4b16fcea0736a508fb73e92cffdf72a7be5accce5fe0d62d79f7776945c474339c89452cc7e02ea69585d2451a1b21b8c3d9f785e62eb55e4927435165e95d807144f82355a8ab35c144c2e9cbfb7e7880344960fbe96283b828a403279d6aefcef8a9d88f615a3ee576d86c6d708d65b959d5954b95ace30f1e6beb145e0d41f544f78791034f325b12af763004ecb9f045c66f9a6812ab148a3ca4d28076c81829e7e41f2dbc65d814c6561cf9209e7d723917fb3e657a3d9f60d65ebac8d7e7e7fe94ddf8e3cf360cb65097d1ac76b893fd730ce923cf96cb6b6e5782b83b10f289621b82c37cafe04c8c5a521d3c6a43f6d15941aaa428bc22db8d53255aa217ffe8e0b02334a2bade0960066e9c84f9713b9912cfb55223d3bd17f3d3df7825bc03e3739a7cdf7e1a3ce0b77df0c6b3bb566922f52e85fbfb3f9dbcd46bf18f1a6734a3ca727a316f750d1d03eaad603674fecb1ec7d879e771c1c37b6c97b098717b40553a13d6a4831c557ab449614f780e68becfeffb8c2af86a3be388658ae1a86d4715f0c7892ffc39158d2f8348ce98eed5fe0ab1afcbd256a5f464867ddcfd077f12f6c8716859c9a46b007191455558efe2f5c4c816104f4515e96d461331d9e69dbdfa6d8e23bb9c5b8012726819f365d50f258ef30d675876fd95e06791864af2e6b4fc08e0f8162341c0cc0f5d238bd8b25e1036ef8f111c69818391237571330e174793350c9c2aada62f21108e144abe0b86ae2711e5f81cf0c1c7b9f89d36b144feada6aae488fc2f613d3868e388a141794162268b33aa35a5096259127328f22811be740daccb6bb78967e24be01cadf0c7344d1a4f01a94b3daaa4d4193ac1a6e651346a3ac7637ff852526ece318a40e9479189163d8f8d17593d0f5354c141a6461922ffbd80ea70105dcc903c3318ee185aba86d227a79e7744249743cd9b7ac651ce2528aee678c6608b373a9acc9906c3b97263a94a20a7af97d558ce3035879eb4ffdb52f40a70b27c888a7b92e5e9be492d6fbf0292a9debcf5bb28e681ed31fc929f7899036b6825c1e7bf9bbef7f92049bbc3047bd0a4315f7d2359cf8956c02f4c28a4ec3d1a8964ed79b52d2f0f2e8e8fa2987fd088f0afd26feda64efde38412ac3b0c1af45e4a56755b1e80d4879e8b1a63cdb0ddc834021db256305fe6f57b86927dbffce49269edcdd4938063f677a007ff4b0cfe3a304acdb665e3ceb0c4ca5398398a16ed9bfab650cda3e99e4872e5e4507a59263d0e7fbdda2414e3608466626becce4d4c4bc620a1c5824fcaf9e6f7394e6b954f5001de631b84148fd8e71f14dbd046c2aba8260c1c4467e6099ba569950bfc102a3e5d3e42bd65d6c11f61b91b9a9e0ede1ee8ee807803d3b2215989657f86d1e5f9289fc2823d64f9a0abfff0f3acbd4558e2bb02be2b15e84732f140672f72978b6e159ced84cf399f02824fb72828ef8cb2982dc1c1a0de6efa442dfc7e28b58fc67c752518fcd5b6ca58b626adaa3ffe1161eb586497841454ff80c96d70e4686885d94b84336c82f554fbcfaee9ff26924e478227b54895f0a14bd497f17924bc64a59ccc77fa322a75bd3f0d5278de02c2020e7b57f3ec63274dd4d5f921a9de61b39b068e093a9fddedb10a6b3cbc2567bfad1013c2c19fcb4e74708fc68c28472df82c85700248514cc294877762bf5371c7507f46614e015fbcecf3b273dd73266b45113146464a3eaf46bdb7118f91a87c85c955b971b427e9cb284ec8667a7797b59261c97a9698b9d448128c4042c1c23fbd4f69b009cb812fdfd534713d75889153bc86bf7616d7aafd0e1251bfe3c21632b6b265620e87f1c3f4889276529f256aeaff16aadc02554d59ea1664317494d7fe675fa814abe2d590c1eb425e7df8dd30887fbc2541b12d0ca36062a522074738e75399865a4dd142ceafe90f76cf505a34d30a2aafc211a7a753cc93342b6f107902b3656c127c401e2d00a68720279200065885982b4a553f29b3e9512621f2d7ea7ca521b3281d92ec844eb42997a53f819bafe1dd5d5c9b20a8aa2370cd8c6f4d554f87f2df542ec8a221218c1ad2df9ad9184d57e7aa0341805dc4b3b8f61697c1a365ec543d74ecb4a58bdd0a30b8245d82753616ef6f6a2bfcc661af785903c9022e092449f1ef5bc7d55217a56f7e8bd91243db88fc408d82dd6f9aee62f0558212e8d53b6b50947d4999d751186b81fcac95d0e2dc7612ee5573d88c44887c2963d33a468189d9e76ed98e77aa67509bc168272e737dee018a93e125637abf2355b449b87bb8fd502af240e73a6aa250ae823c5df567ddabd017adbf54790007a9d777a16d23c9f1ab300125dad2b9d91217527b518018590a1ea53ce6008622f30810b2bdc503fe6d8593a3e72be54c540bb34fafe134077569712c96e1cc7047d3578119ffc545779b6bffb7e40a955cd96abd57f0cab09d787f063606e7aded4678908965f41b6353bdf295f38572aed0281162dcab62b69f9fcbcf8373d1f304fda317b69724284bd2b1c1aa4f8b96b580870944612317559978f471dd47c605f64e656f67f8c8eea0e135ac2f04c8d09fe6cbfdf9110313ef90c3cc936bc8d4e4994856edaaa4e7d4a207da2136fdabe6c686c44b9c262c28f828b332d1cba03e5b9fb0f27692dd5068e4d99096ce52c25b0a3a9cc0665ca9f24d9d782a427276c4f06bb97cd03b02add5fe55035cf63061b7d2543d85822f698583e664bce8a7146694de9651e84f2dbba325c7d32015b413206a2605b5bd7bf681b14099264d82ff98f0abd6c5c4a500a10c7c32587bfed5e592f971e6ace5026a4977a7d91a89eb579651d1c50b800d8e8c7fd9389bb8ba3c4e4642854695dd1299a726d6edbbfee72a608b4d44df4d6b3355af506199c3c061bb94f6d841ff16f9d77e750aaf4fab6682af32277813cd892a9eadb0f98fe5cd2cac80e5b678f65094f11d0d13d380a385ee0d43a7b5204f09a2dec453047353b40b53602da5d1dc4f3f22f5d8b6e28b21ee3ed19876b38d4515a7293a9c2c32d0e52cccb359395ba27ea38e2dab9eb8e6593eaec15ecf9a25bf1354533a025a0eefa9c846355128b8d6973db2eb91bac31614f9d9d0d51fa7cde3161b9155956929330db2a77ac77a7b1cd8906d11709518469df8e699d260c2d58343e9dc44c1c38484181e01a9b554aaf9e9229ed63d29730c86b7bb445c8efa546c0903b0a16f7601f28094b17f88e9eb597dbe3abbcbd5282dc1c35fedb2da269c9c32ee9fc9fd7adbc019dc7b2907d27b988805d857fff68f260aab55b1e933629f1a5c04fb2f38", 0xebc}], 0x3}, 0x24000008) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r6}, 0x20) recvmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e002f81007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.259991833s ago: executing program 2 (id=1369): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x9}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) 3.950424833s ago: executing program 1 (id=1374): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000009c413a45000000000000000000000b010000"]) 3.873608588s ago: executing program 2 (id=1375): r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000000800008500000075000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00000000000000b70500000800000085040000a7000000890000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0xfe33) write$cgroup_devices(r1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r0, r1, 0x0, 0x9, &(0x7f0000000440)='(%%\xe7^\x8b.@\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0500000000000000000000003f3769ea46c606000000c0ec5128dfcdc25eaf92218dec", @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='-freezer +blkio +net_prio -blkio -memory ;pids -io +cpuset -perf_event '], 0x47) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r12, 0x0, 0x0}, 0x10) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r13, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 3.713983188s ago: executing program 0 (id=1378): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 7) 3.249133079s ago: executing program 4 (id=1379): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001400600", 0x3a}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="95"], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x5b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe", 0x1a}], 0x1}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.811546936s ago: executing program 1 (id=1380): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) write$cgroup_subtree(r0, &(0x7f0000000840)=ANY=[], 0xfdef) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd6c00"/14, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.810938436s ago: executing program 3 (id=1381): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$kcm(0xa, 0x3, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000f80)={&(0x7f0000000880), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000900)}, {&(0x7f0000000940)=""/99, 0x63}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000c40)=""/242, 0xf2}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/141, 0x8d}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000b80)=""/64, 0x40}], 0x8, &(0x7f0000000ec0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x100) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000)=r2, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000640)=r4, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x9, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800592c00000002000000000000000018150000", @ANYRESHEX=r7, @ANYBLOB="f18d2a75c0f5f60e349914cd980508e24b2e79cb2e13a23b0ba6b5e38111ec8d6525111feded8b956cd6094687aa990226d891c70e32"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r9, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x7}, 0xc) 2.686501762s ago: executing program 0 (id=1382): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10c0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x10000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="312d380aad"], 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 2.577890851s ago: executing program 1 (id=1383): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x9}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) 2.345201167s ago: executing program 3 (id=1384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.194900708s ago: executing program 3 (id=1385): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x6, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x11301}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="85cc9c69fe745b8f9d8067608ff506f7606d0b6af12b69553486269758ffb487e2862f515b83dcccbaf2f09442158b063fb16ae17338fce58f6c8b21a7294dbd6619bfd69d2196cd1a89e295f23dd3a4968b76824a7460645d961a78ab4a72ce6bcec374a46bade065db6631974c38835d8277b2f467b7a2696a19ecdbb9cf9ce4603d263ccac5b1edae2fb6abc8018e6dd76f03fe434aa510a9158757aae1207b3860401119452e6e16ace90f8a2debb04424ef93cc8cd3b49928d95690c23446179356938f50b74f542b602d6b81f2743974e685cec90bd08fbbf212f3fb8268901fc21b1d32578723443b620a1fde7de7dd83e1a66d72c4", 0xf9}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x150}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xffffffff, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = getpid() syz_open_procfs$namespace(r4, &(0x7f0000000340)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0xe}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 2.026516916s ago: executing program 4 (id=1386): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000040000000400000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.952604422s ago: executing program 0 (id=1387): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.853910853s ago: executing program 3 (id=1388): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="950001"], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x5b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe", 0x1a}], 0x1}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.853193823s ago: executing program 2 (id=1389): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.725601459s ago: executing program 2 (id=1390): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000009c413a45000000000000000000000b010000"]) 1.717395487s ago: executing program 1 (id=1391): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000041000021", 0x4c}, {&(0x7f0000001a40)="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", 0xf84}], 0x2}, 0x0) 1.714670877s ago: executing program 4 (id=1392): socket$kcm(0x21, 0x2, 0xa) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x7}, 0x20a, 0x6, 0x7, 0x2, 0xfcbd, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) (async) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x109, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x5c) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.557797517s ago: executing program 3 (id=1393): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511", 0x1f}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000010000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1d}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() r6 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r6, 0x0, 0xffffffffffffffff, 0x2) getpid() syz_clone(0x10024000, &(0x7f00000008c0)="6704c9d7dfdc8322b8f92d62168b4368791aa61adf5452094f6b22a6f19a01467f9fe4a8e674b4b02fe59e9020bc6d88d2efc9bb4481742e0bac25afc503f4bdb9fc99acd8daa9dcb37a31780cb2dc2b3b3c2bf9f6", 0x55, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="6506b114a04f15c670c2eff39e87ab2e52b4dfba59a341ccc46e164dbb1aec5879ee54695530f1c462efd8205c043d13bc6768dfaead4a04c6b9e37ba860d0add45970661075a6c5fb1601299c9a7310faee0c671798c6d32bae24e57b0b3f2aa1fc7373c9b7ae6f61208d38b56428b3b465467032d3b80f0607cf954b70efcc4444895cd13efcf76a4c341f1b157f93ddc8611b750ee73afc637cbe82bbb57dc13486bea9a80c56b1849b2420d6f54cc2acd78beea7b738ac21263d0dea307532bb2786ca0b10ba2caf97bbd1a0f47c60441cae2ba2653b8fa9e293baae32e9e99a329370f2b281c2a912954bac55796d054ed71d69") socketpair(0x15, 0x1, 0x4, &(0x7f0000000ac0)) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x2160) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x4) 1.412181409s ago: executing program 0 (id=1394): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x9}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) 1.337174735s ago: executing program 1 (id=1395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.336820935s ago: executing program 4 (id=1396): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001400600", 0x3a}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="95"], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x5b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b000000", 0x27}], 0x1}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.012052163s ago: executing program 3 (id=1397): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0xfea5) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 913.300614ms ago: executing program 4 (id=1398): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10c0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x10000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="312d380aad"], 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 841.40853ms ago: executing program 1 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, 0x0, 0x48084) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1a, 0x0, 0x1, 0x386c, 0x44001, r3, 0x100, '\x00', r5, r3, 0x3, 0x4, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x6, 0x2, r0, 0x7, '\x00', r5, r3, 0x2, 0x1, 0x0, 0x3}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r6, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) recvmsg$kcm(r4, 0x0, 0x0) 397.870916ms ago: executing program 2 (id=1400): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 214.150371ms ago: executing program 0 (id=1401): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0xe}, 0x10022, 0xac5d, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 0s ago: executing program 4 (id=1402): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000040600000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): ): hsr_slave_1: link becomes ready [ 132.630479][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.687599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.708664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.728934][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.737948][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.755019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.775592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.791100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.804823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.877404][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.891079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.905138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.916717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.930512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.950850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.975970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.991510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.003428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.050191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.072953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.091187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.108861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.133855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.156825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.173690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.197977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.230976][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.262327][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.295511][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.311706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.328934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.358423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.371625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.414960][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.460302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.471735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.485628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.501664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.516435][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.526150][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.552302][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.578825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.596530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.625479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.643983][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.653548][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.672992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.690581][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 133.700206][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 133.700228][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 133.709819][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 133.709908][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 133.756046][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.798510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.813817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.856410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.909741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.999017][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.019925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.031015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.051520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.070975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.092899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.113568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.168075][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.181429][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.213491][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.243502][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.269187][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.332179][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.349641][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.372912][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.386790][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.425282][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.446009][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.460964][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.470889][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.488496][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.530934][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.546739][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.555990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.574046][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.586043][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.599402][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.613066][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.630533][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.647997][ T4275] device veth0_vlan entered promiscuous mode [ 134.697000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.713616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.728130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.772142][ T4275] device veth1_vlan entered promiscuous mode [ 134.819935][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.834080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.846981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.859199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.870962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.894729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.906848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.921229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.949012][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.977973][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.044471][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.066815][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.080226][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.094091][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.171883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.204693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.228612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.243693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.269541][ T4275] device veth0_macvtap entered promiscuous mode [ 135.315153][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.344435][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.358014][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.381462][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.400324][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.445614][ T4275] device veth1_macvtap entered promiscuous mode [ 135.499980][ T4268] device veth0_vlan entered promiscuous mode [ 135.547476][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.578285][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.591729][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.617264][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.643962][ T4271] device veth0_vlan entered promiscuous mode [ 135.658912][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.680587][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.704322][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.726789][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.761574][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.763722][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 135.775421][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 135.784241][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 135.797259][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 135.800950][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 135.855663][ T4268] device veth1_vlan entered promiscuous mode [ 135.877730][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.896306][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.911053][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.931056][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.950223][ T4271] device veth1_vlan entered promiscuous mode [ 135.966680][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.979704][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.993176][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.007220][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.026482][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.090343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.107790][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.135040][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.145500][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.195151][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.247647][ T4271] device veth0_macvtap entered promiscuous mode [ 136.272826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.303688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.352010][ T4270] device veth0_vlan entered promiscuous mode [ 136.379863][ T4271] device veth1_macvtap entered promiscuous mode [ 136.392232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.407684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.427718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.448760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.469242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.481352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.527656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.538267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.568414][ T4270] device veth1_vlan entered promiscuous mode [ 136.600309][ T4268] device veth0_macvtap entered promiscuous mode [ 136.667587][ T4268] device veth1_macvtap entered promiscuous mode [ 136.690895][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.714925][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.746066][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.760196][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.793784][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.814055][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.837500][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.868756][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.893332][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.919432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.933367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.945299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.964816][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.003007][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.027047][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.047978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.068829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.115677][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.126131][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.149879][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.162608][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.180128][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.205655][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.241960][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.272622][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.290009][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.308545][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.326542][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.338034][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.350267][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.363442][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.419985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.438562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.458173][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.483565][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.496292][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.509562][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.546326][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.583945][ T4270] device veth0_macvtap entered promiscuous mode [ 137.626283][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.646236][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.668628][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.681647][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.701793][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.722707][ T4361] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 137.735082][ T4361] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 137.746336][ T4361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'. [ 137.774523][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.793781][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.807811][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.823995][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.848500][ T4270] device veth1_macvtap entered promiscuous mode [ 137.873600][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.876450][ C1] hrtimer: interrupt took 87328 ns [ 137.921917][ T4361] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1'. [ 138.014682][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.049035][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.066543][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.080205][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.099408][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.132492][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.152818][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.190823][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.212956][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.234633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.259813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.283144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.294883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.308000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.327900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.339183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.356913][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.371674][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.392963][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.412679][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.429092][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.445204][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.463679][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.483938][ T4269] device veth0_vlan entered promiscuous mode [ 138.553175][ T4365] netlink: 'syz.0.6': attribute type 27 has an invalid length. [ 138.901999][ T4365] bond0: (slave bond_slave_0): Releasing backup interface [ 139.194249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.207332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.230370][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.259770][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.271877][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.289654][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.375657][ T4269] device veth1_vlan entered promiscuous mode [ 139.382781][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.395415][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.430898][ T4364] syz.0.6 (4364) used greatest stack depth: 16112 bytes left [ 139.470619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.524755][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.572215][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.615579][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.736545][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.762210][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.797195][ T4269] device veth0_macvtap entered promiscuous mode [ 139.819355][ T4373] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 139.835134][ T4373] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 139.868470][ T4373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 139.905665][ T4269] device veth1_macvtap entered promiscuous mode [ 139.936859][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.959597][ T4373] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4'. [ 139.963410][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.997372][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.017613][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.033700][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.048901][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.062100][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.075066][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.090452][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.106978][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.144227][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.153844][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.171611][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.197631][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.229343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.242249][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.262651][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.275381][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.301145][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.311262][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.330878][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.343841][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.357199][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.372255][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.397046][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.422091][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.446402][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.487932][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.525347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.550273][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.621889][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.692020][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.722288][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.776137][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.877951][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.982888][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.203610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.267810][ T4384] device sit0 entered promiscuous mode [ 141.993647][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.056853][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.119320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.238526][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.295284][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.360172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.428989][ T4392] delete_channel: no stack [ 142.650215][ T4402] netlink: 'syz.1.12': attribute type 27 has an invalid length. [ 143.567036][ T4402] bond0: (slave bond_slave_0): Releasing backup interface [ 143.683541][ T4407] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 143.710044][ T4407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'. [ 143.739082][ T4407] device ipvlan1 entered promiscuous mode [ 143.760321][ T4407] bridge0: port 3(ipvlan1) entered blocking state [ 143.771572][ T4407] bridge0: port 3(ipvlan1) entered disabled state [ 143.797088][ T4407] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 144.597841][ T4421] netlink: 'syz.1.19': attribute type 17 has an invalid length. [ 144.628530][ T4421] netlink: 148 bytes leftover after parsing attributes in process `syz.1.19'. [ 145.548098][ T4430] netlink: 'syz.0.21': attribute type 25 has an invalid length. [ 145.652969][ T4430] netlink: 'syz.0.21': attribute type 28 has an invalid length. [ 145.754010][ T4434] netlink: 'syz.2.23': attribute type 27 has an invalid length. [ 148.257691][ T4434] bond0: (slave bond_slave_0): Releasing backup interface [ 148.453554][ T4449] netlink: 164 bytes leftover after parsing attributes in process `syz.0.25'. [ 148.645228][ T4459] netlink: 152 bytes leftover after parsing attributes in process `syz.4.27'. [ 148.778489][ T4459] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.27'. [ 148.885110][ T4459] openvswitch: netlink: Message has 48126 unknown bytes. [ 149.303703][ T4459] netlink: 'syz.4.27': attribute type 3 has an invalid length. [ 149.473819][ T4459] netlink: 'syz.4.27': attribute type 1 has an invalid length. [ 149.675074][ T4467] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 149.755895][ T4467] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 150.187766][ T4472] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 150.204343][ T4472] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 150.844814][ T4468] Ÿë: port 1(gretap0) entered blocking state [ 150.874344][ T4468] Ÿë: port 1(gretap0) entered disabled state [ 151.055284][ T4468] device gretap0 entered promiscuous mode [ 152.175835][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.186004][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.324229][ T4490] netlink: 'syz.3.35': attribute type 13 has an invalid length. [ 152.340181][ T4490] netlink: 164 bytes leftover after parsing attributes in process `syz.3.35'. [ 152.458912][ T4490] erspan0: refused to change device tx_queue_len [ 153.664317][ T4509] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 154.170193][ T4511] Ÿë: port 1(gretap0) entered blocking state [ 154.203573][ T4511] Ÿë: port 1(gretap0) entered disabled state [ 154.251301][ T4511] device gretap0 entered promiscuous mode [ 154.913536][ T4520] netlink: 'syz.0.43': attribute type 21 has an invalid length. [ 154.943023][ T4520] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 155.015923][ T4522] raw_sendmsg: syz.3.44 forgot to set AF_INET. Fix it! [ 155.029305][ T4520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.43'. [ 155.078393][ T4522] Zero length message leads to an empty skb [ 155.137271][ T4520] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.43'. [ 155.169153][ T4522] device syzkaller0 entered promiscuous mode [ 155.220094][ T4522] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 156.258063][ T4541] netlink: 'syz.1.50': attribute type 13 has an invalid length. [ 156.368248][ T4541] netlink: 164 bytes leftover after parsing attributes in process `syz.1.50'. [ 156.468603][ T4541] erspan0: refused to change device tx_queue_len [ 157.418201][ T4553] netlink: 'syz.0.53': attribute type 17 has an invalid length. [ 157.463758][ T4553] netlink: 148 bytes leftover after parsing attributes in process `syz.0.53'. [ 158.000875][ T4566] Ÿë: port 1(veth0_to_team) entered blocking state [ 158.135280][ T4566] Ÿë: port 1(veth0_to_team) entered disabled state [ 158.217768][ T4566] device veth0_to_team entered promiscuous mode [ 160.162336][ T4590] device syzkaller0 entered promiscuous mode [ 160.372651][ T4596] netlink: 'syz.2.65': attribute type 13 has an invalid length. [ 160.422597][ T4596] netlink: 164 bytes leftover after parsing attributes in process `syz.2.65'. [ 160.870685][ T4596] erspan0: refused to change device tx_queue_len [ 161.150921][ T4606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.67'. [ 161.177459][ T4606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.67'. [ 161.271588][ T4607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.67'. [ 161.623565][ T4607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.947162][ T4612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.80'. [ 161.987068][ T4609] device syzkaller0 entered promiscuous mode [ 164.016335][ T4641] Ÿë: port 1(veth0_to_team) entered blocking state [ 164.119650][ T4641] Ÿë: port 1(veth0_to_team) entered disabled state [ 164.183088][ T4641] device veth0_to_team entered promiscuous mode [ 165.137604][ T4663] netlink: 'syz.0.78': attribute type 29 has an invalid length. [ 165.300071][ T4663] netlink: 'syz.0.78': attribute type 29 has an invalid length. [ 165.772174][ T4675] netlink: 'syz.3.85': attribute type 6 has an invalid length. [ 165.822605][ T4675] netlink: 168 bytes leftover after parsing attributes in process `syz.3.85'. [ 165.837640][ T4678] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 165.888578][ T4673] FAULT_INJECTION: forcing a failure. [ 165.888578][ T4673] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.987944][ T4673] CPU: 0 PID: 4673 Comm: syz.2.84 Not tainted syzkaller #0 [ 165.999433][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.013498][ T4673] Call Trace: [ 166.017221][ T4673] [ 166.020838][ T4673] dump_stack_lvl+0x188/0x24e [ 166.027291][ T4673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 166.034894][ T4673] ? show_regs_print_info+0x12/0x12 [ 166.041897][ T4673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 166.051035][ T4673] should_fail_ex+0x399/0x4d0 [ 166.058441][ T4673] _copy_from_user+0x2c/0x170 [ 166.065435][ T4673] ___sys_sendmsg+0x1c3/0x360 [ 166.072434][ T4673] ? __sys_sendmsg+0x290/0x290 [ 166.079252][ T4673] ? __se_sys_sendmsg+0xd5/0x2a0 [ 166.085791][ T4673] ? kasan_add_zero_shadow+0x50/0x50 [ 166.093263][ T4673] __se_sys_sendmsg+0x1bb/0x2a0 [ 166.098580][ T4673] ? __x64_sys_sendmsg+0x80/0x80 [ 166.106618][ T4673] ? syscall_enter_from_user_mode+0x2a/0x80 [ 166.115529][ T4673] do_syscall_64+0x4c/0xa0 [ 166.121203][ T4673] ? clear_bhb_loop+0x60/0xb0 [ 166.127367][ T4673] ? clear_bhb_loop+0x60/0xb0 [ 166.133048][ T4673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.143254][ T4673] RIP: 0033:0x7ff52699c799 [ 166.149117][ T4673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.180016][ T4673] RSP: 002b:00007ff527776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.191381][ T4673] RAX: ffffffffffffffda RBX: 00007ff526c16090 RCX: 00007ff52699c799 [ 166.204363][ T4673] RDX: 0000000000004044 RSI: 00002000000001c0 RDI: 000000000000000a [ 166.214146][ T4673] RBP: 00007ff527776090 R08: 0000000000000000 R09: 0000000000000000 [ 166.224868][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.237153][ T4673] R13: 00007ff526c16128 R14: 00007ff526c16090 R15: 00007ffe94a9f008 [ 166.247814][ T4673] [ 167.635932][ T4701] netlink: 'syz.4.89': attribute type 27 has an invalid length. [ 168.853200][ T4701] bond0: (slave bond_slave_0): Releasing backup interface [ 168.956522][ T4706] netlink: 'syz.2.90': attribute type 21 has an invalid length. [ 168.972934][ T4705] netlink: 'syz.0.92': attribute type 10 has an invalid length. [ 168.996180][ T4705] netlink: 55 bytes leftover after parsing attributes in process `syz.0.92'. [ 169.510029][ T4712] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.94'. [ 169.531544][ T4712] bridge_slave_1: default FDB implementation only supports local addresses [ 169.985686][ T4726] netlink: 14 bytes leftover after parsing attributes in process `syz.3.101'. [ 170.342117][ T4723] netlink: 'syz.4.100': attribute type 27 has an invalid length. [ 170.892327][ T4743] sctp: [Deprecated]: syz.4.105 (pid 4743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.892327][ T4743] Use struct sctp_sack_info instead [ 171.844627][ T4756] FAULT_INJECTION: forcing a failure. [ 171.844627][ T4756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.938344][ T4756] CPU: 0 PID: 4756 Comm: syz.3.111 Not tainted syzkaller #0 [ 171.947017][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.960827][ T4756] Call Trace: [ 171.965756][ T4756] [ 171.970966][ T4756] dump_stack_lvl+0x188/0x24e [ 171.977401][ T4756] ? show_regs_print_info+0x12/0x12 [ 171.984591][ T4756] ? load_image+0x400/0x400 [ 171.991811][ T4756] ? __lock_acquire+0x7d10/0x7d10 [ 172.001020][ T4756] should_fail_ex+0x399/0x4d0 [ 172.006900][ T4756] _copy_from_user+0x2c/0x170 [ 172.014331][ T4756] ___sys_sendmsg+0x1c3/0x360 [ 172.021499][ T4756] ? __sys_sendmsg+0x290/0x290 [ 172.028026][ T4756] ? __lock_acquire+0x7d10/0x7d10 [ 172.035677][ T4756] __se_sys_sendmsg+0x1bb/0x2a0 [ 172.042562][ T4756] ? __x64_sys_sendmsg+0x80/0x80 [ 172.049720][ T4756] ? lockdep_hardirqs_on+0x94/0x140 [ 172.057935][ T4756] do_syscall_64+0x4c/0xa0 [ 172.064882][ T4756] ? clear_bhb_loop+0x60/0xb0 [ 172.072200][ T4756] ? clear_bhb_loop+0x60/0xb0 [ 172.079778][ T4756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.088177][ T4756] RIP: 0033:0x7f53d1d9c799 [ 172.094334][ T4756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.119856][ T4756] RSP: 002b:00007f53d2ca2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.130346][ T4756] RAX: ffffffffffffffda RBX: 00007f53d2015fa0 RCX: 00007f53d1d9c799 [ 172.139901][ T4756] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 172.150468][ T4756] RBP: 00007f53d2ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 172.161273][ T4756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.172141][ T4756] R13: 00007f53d2016038 R14: 00007f53d2015fa0 R15: 00007ffd1a3f1888 [ 172.181857][ T4756] [ 172.511941][ T4774] netlink: 'syz.4.117': attribute type 3 has an invalid length. [ 172.586258][ T4774] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.117'. [ 175.361408][ T4776] netlink: 'syz.3.116': attribute type 27 has an invalid length. [ 175.429859][ T4776] bond0: (slave bond_slave_0): Releasing backup interface [ 175.652736][ T4787] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 175.659616][ T4787] syzkaller0: linktype set to 769 [ 175.705331][ T4787] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 178.405848][ T4840] netlink: 152 bytes leftover after parsing attributes in process `syz.3.139'. [ 178.649496][ T4847] netlink: 'syz.3.139': attribute type 13 has an invalid length. [ 178.781289][ T4840] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.139'. [ 178.838312][ T4840] openvswitch: netlink: Message has 48126 unknown bytes. [ 179.376637][ T4855] netlink: 60 bytes leftover after parsing attributes in process `syz.2.146'. [ 179.462092][ T4855] netlink: 60 bytes leftover after parsing attributes in process `syz.2.146'. [ 179.624247][ T4859] netlink: 60 bytes leftover after parsing attributes in process `syz.2.146'. [ 181.122969][ T4888] netlink: 152 bytes leftover after parsing attributes in process `syz.4.156'. [ 181.230614][ T4888] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.156'. [ 181.298248][ T4888] openvswitch: netlink: Message has 48126 unknown bytes. [ 181.331654][ T4890] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 182.055030][ T4906] netlink: 60 bytes leftover after parsing attributes in process `syz.3.162'. [ 182.870452][ T4925] netlink: 152 bytes leftover after parsing attributes in process `syz.1.170'. [ 182.969333][ T4925] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.170'. [ 183.087934][ T4925] openvswitch: netlink: Message has 48126 unknown bytes. [ 183.756411][ T4929] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 184.531888][ T4948] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 184.702851][ T4948] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.176'. [ 185.022257][ T4955] netlink: 'syz.0.178': attribute type 21 has an invalid length. [ 185.116384][ T4952] netlink: 'syz.0.178': attribute type 15 has an invalid length. [ 185.232957][ T4952] netlink: 'syz.0.178': attribute type 7 has an invalid length. [ 186.629645][ T4972] netlink: 152 bytes leftover after parsing attributes in process `syz.3.185'. [ 186.773279][ T4973] netlink: 152 bytes leftover after parsing attributes in process `syz.4.184'. [ 186.822763][ T4972] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.185'. [ 186.851994][ T4973] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.184'. [ 186.875108][ T4972] openvswitch: netlink: Message has 48126 unknown bytes. [ 186.997948][ T4973] openvswitch: netlink: Message has 48126 unknown bytes. [ 187.043502][ T4974] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 187.055597][ T4975] netlink: 'syz.4.184': attribute type 13 has an invalid length. [ 188.296350][ T5000] netlink: 'syz.2.192': attribute type 10 has an invalid length. [ 188.446935][ T5004] netlink: 152 bytes leftover after parsing attributes in process `syz.3.193'. [ 188.509768][ T5000] team0: Port device wlan1 added [ 188.529160][ T5004] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.193'. [ 188.558024][ T5004] openvswitch: netlink: Message has 48126 unknown bytes. [ 189.186177][ T5015] netlink: 152 bytes leftover after parsing attributes in process `syz.0.208'. [ 189.197826][ T5017] FAULT_INJECTION: forcing a failure. [ 189.197826][ T5017] name failslab, interval 1, probability 0, space 0, times 0 [ 189.215273][ T5017] CPU: 1 PID: 5017 Comm: syz.3.198 Not tainted syzkaller #0 [ 189.228142][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.243137][ T5017] Call Trace: [ 189.247032][ T5017] [ 189.251856][ T5017] dump_stack_lvl+0x188/0x24e [ 189.259121][ T5017] ? verify_lock_unused+0x140/0x140 [ 189.265998][ T5017] ? show_regs_print_info+0x12/0x12 [ 189.272371][ T5017] ? load_image+0x400/0x400 [ 189.277737][ T5017] ? verify_lock_unused+0x140/0x140 [ 189.283426][ T5017] should_fail_ex+0x399/0x4d0 [ 189.288757][ T5017] should_failslab+0x5/0x20 [ 189.295540][ T5017] slab_pre_alloc_hook+0x59/0x310 [ 189.303619][ T5017] ? __hw_addr_add_ex+0x202/0x710 [ 189.311198][ T5017] __kmem_cache_alloc_node+0x4f/0x260 [ 189.318224][ T5017] ? __hw_addr_add_ex+0x202/0x710 [ 189.325953][ T5017] kmalloc_trace+0x26/0xe0 [ 189.331938][ T5017] __hw_addr_add_ex+0x202/0x710 [ 189.337572][ T5017] dev_uc_add+0x9d/0x110 [ 189.342428][ T5017] macsec_set_mac_address+0x20f/0x6d0 [ 189.349729][ T5017] ? macsec_dev_set_rx_mode+0x50/0x50 [ 189.356315][ T5017] ? ib_device_get_by_netdev+0x47d/0x4e0 [ 189.365072][ T5017] ? net_generic+0x1f4/0x240 [ 189.371187][ T5017] ? ib_device_get_by_netdev+0x7e/0x4e0 [ 189.378210][ T5017] ? vxlan_netdevice_event+0x2a6/0x310 [ 189.384553][ T5017] ? ib_device_get_netdev+0x390/0x390 [ 189.391508][ T5017] ? vxlan_fdb_offloaded_set+0x7d0/0x7d0 [ 189.400568][ T5017] ? udp_tunnel_nic_netdevice_event+0x1a1/0x1290 [ 189.411511][ T5017] ? ip6_route_dev_notify+0x96/0x5b0 [ 189.418265][ T5017] ? raw_notifier_call_chain+0x143/0x160 [ 189.424602][ T5017] dev_set_mac_address+0x27a/0x400 [ 189.431571][ T5017] ? dev_pre_changeaddr_notify+0x120/0x120 [ 189.439097][ T5017] ? rwsem_write_trylock+0x135/0x1c0 [ 189.445423][ T5017] ? clear_nonspinnable+0x60/0x60 [ 189.453454][ T5017] ? trace_contention_end+0x5f/0x170 [ 189.463539][ T5017] ? full_name_hash+0x8e/0xe0 [ 189.469177][ T5017] dev_set_mac_address_user+0x2d/0x50 [ 189.475849][ T5017] dev_ifsioc+0x74e/0xd40 [ 189.481488][ T5017] ? dev_ioctl+0xe80/0xe80 [ 189.486319][ T5017] ? apparmor_capable+0x12c/0x190 [ 189.492172][ T5017] ? full_name_hash+0x8e/0xe0 [ 189.500018][ T5017] ? dev_load+0x1d/0x1e0 [ 189.505622][ T5017] ? dev_load+0x1d/0x1e0 [ 189.510550][ T5017] dev_ioctl+0x55e/0xe80 [ 189.515912][ T5017] sock_do_ioctl+0x245/0x320 [ 189.523370][ T5017] ? sock_show_fdinfo+0xb0/0xb0 [ 189.528745][ T5017] sock_ioctl+0x4d2/0x710 [ 189.534615][ T5017] ? sock_poll+0x410/0x410 [ 189.540813][ T5017] ? bpf_lsm_file_ioctl+0x5/0x10 [ 189.546389][ T5017] ? security_file_ioctl+0x7c/0xa0 [ 189.555742][ T5017] ? sock_poll+0x410/0x410 [ 189.561279][ T5017] __se_sys_ioctl+0xfa/0x170 [ 189.566906][ T5017] do_syscall_64+0x4c/0xa0 [ 189.571842][ T5017] ? clear_bhb_loop+0x60/0xb0 [ 189.577423][ T5017] ? clear_bhb_loop+0x60/0xb0 [ 189.584108][ T5017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.592669][ T5017] RIP: 0033:0x7f53d1d9c799 [ 189.598803][ T5017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.625223][ T5017] RSP: 002b:00007f53d2ca2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.634827][ T5017] RAX: ffffffffffffffda RBX: 00007f53d2015fa0 RCX: 00007f53d1d9c799 [ 189.645668][ T5017] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000004 [ 189.656946][ T5017] RBP: 00007f53d2ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 189.666382][ T5017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.676249][ T5017] R13: 00007f53d2016038 R14: 00007f53d2015fa0 R15: 00007ffd1a3f1888 [ 189.686749][ T5017] [ 189.838222][ T5015] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.208'. [ 189.953172][ T5015] openvswitch: netlink: Message has 48126 unknown bytes. [ 190.734817][ T5030] netlink: 152 bytes leftover after parsing attributes in process `syz.0.200'. [ 190.967401][ T5030] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.200'. [ 191.089032][ T5030] openvswitch: netlink: Message has 48126 unknown bytes. [ 191.268927][ T5031] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 192.365872][ T5044] netlink: 14 bytes leftover after parsing attributes in process `syz.4.207'. [ 192.676891][ T5051] netlink: 152 bytes leftover after parsing attributes in process `syz.1.211'. [ 192.716903][ T5051] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.211'. [ 192.736836][ T5051] openvswitch: netlink: Message has 48126 unknown bytes. [ 193.866270][ T4285] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 195.851962][ T5084] FAULT_INJECTION: forcing a failure. [ 195.851962][ T5084] name failslab, interval 1, probability 0, space 0, times 0 [ 195.947717][ T5084] CPU: 1 PID: 5084 Comm: syz.0.222 Not tainted syzkaller #0 [ 195.958749][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.974286][ T5084] Call Trace: [ 195.978716][ T5084] [ 195.982461][ T5084] dump_stack_lvl+0x188/0x24e [ 195.989722][ T5084] ? show_regs_print_info+0x12/0x12 [ 195.998066][ T5084] ? load_image+0x400/0x400 [ 196.003185][ T5084] ? __might_sleep+0xd0/0xd0 [ 196.008488][ T5084] ? __lock_acquire+0x7d10/0x7d10 [ 196.016243][ T5084] should_fail_ex+0x399/0x4d0 [ 196.024028][ T5084] should_failslab+0x5/0x20 [ 196.029078][ T5084] slab_pre_alloc_hook+0x59/0x310 [ 196.035436][ T5084] ? apparmor_sk_alloc_security+0x74/0x100 [ 196.044349][ T5084] __kmem_cache_alloc_node+0x4f/0x260 [ 196.053460][ T5084] ? apparmor_sk_alloc_security+0x74/0x100 [ 196.061011][ T5084] kmalloc_trace+0x26/0xe0 [ 196.068482][ T5084] apparmor_sk_alloc_security+0x74/0x100 [ 196.078069][ T5084] security_sk_alloc+0x6a/0xa0 [ 196.083418][ T5084] sk_prot_alloc+0x101/0x210 [ 196.089697][ T5084] ? sk_alloc+0x20/0x340 [ 196.094716][ T5084] sk_alloc+0x36/0x340 [ 196.100841][ T5084] ? bpf_ctx_init+0x163/0x1a0 [ 196.109192][ T5084] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 196.115538][ T5084] bpf_prog_test_run_skb+0x35e/0x12a0 [ 196.123780][ T5084] ? __fget_files+0x28/0x4b0 [ 196.129774][ T5084] ? __fget_files+0x43d/0x4b0 [ 196.135614][ T5084] ? cpu_online+0xa0/0xa0 [ 196.140853][ T5084] bpf_prog_test_run+0x31e/0x390 [ 196.146727][ T5084] __sys_bpf+0x62b/0x780 [ 196.152277][ T5084] ? bpf_link_show_fdinfo+0x380/0x380 [ 196.159759][ T5084] ? lock_chain_count+0x20/0x20 [ 196.167509][ T5084] __x64_sys_bpf+0x78/0x90 [ 196.173526][ T5084] do_syscall_64+0x4c/0xa0 [ 196.181854][ T5084] ? clear_bhb_loop+0x60/0xb0 [ 196.193044][ T5084] ? clear_bhb_loop+0x60/0xb0 [ 196.199034][ T5084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.205700][ T5084] RIP: 0033:0x7f2e11d9c799 [ 196.212829][ T5084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.241927][ T5084] RSP: 002b:00007f2e12ce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.253279][ T5084] RAX: ffffffffffffffda RBX: 00007f2e12015fa0 RCX: 00007f2e11d9c799 [ 196.263874][ T5084] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 196.274464][ T5084] RBP: 00007f2e12ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 196.286929][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.296182][ T5084] R13: 00007f2e12016038 R14: 00007f2e12015fa0 R15: 00007ffe6546b5c8 [ 196.306035][ T5084] [ 196.571693][ T5092] netlink: 'syz.3.226': attribute type 29 has an invalid length. [ 196.606810][ T5092] netlink: 'syz.3.226': attribute type 29 has an invalid length. [ 196.649602][ T5092] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 196.673326][ T5092] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 196.710884][ T5093] netlink: 'syz.3.226': attribute type 29 has an invalid length. [ 196.763187][ T5092] netlink: 'syz.3.226': attribute type 29 has an invalid length. [ 196.797917][ T5099] netlink: 168 bytes leftover after parsing attributes in process `syz.4.229'. [ 196.989543][ T5102] device syzkaller0 entered promiscuous mode [ 197.417781][ T5112] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.233'. [ 199.652101][ T5135] sctp: [Deprecated]: syz.2.240 (pid 5135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.652101][ T5135] Use struct sctp_sack_info instead [ 202.450979][ T5148] netlink: 'syz.2.244': attribute type 21 has an invalid length. [ 203.416027][ T5117] IPv6: Can't replace route, no match found [ 204.851180][ T5171] netlink: 'syz.0.254': attribute type 29 has an invalid length. [ 204.903904][ T5171] netlink: 'syz.0.254': attribute type 29 has an invalid length. [ 204.983334][ T5174] netlink: 'syz.0.254': attribute type 29 has an invalid length. [ 205.911977][ T5186] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 206.128740][ T5186] team0: Port device wlan1 added [ 207.826952][ T5193] IPv6: Can't replace route, no match found [ 208.190325][ T5193] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.283444][ T5219] netlink: 152 bytes leftover after parsing attributes in process `syz.4.268'. [ 208.440995][ T5219] netlink: 'syz.4.268': attribute type 3 has an invalid length. [ 208.480552][ T5219] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 210.832517][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 211.034206][ T5259] FAULT_INJECTION: forcing a failure. [ 211.034206][ T5259] name failslab, interval 1, probability 0, space 0, times 0 [ 211.223184][ T5259] CPU: 0 PID: 5259 Comm: syz.0.280 Not tainted syzkaller #0 [ 211.231809][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.244237][ T5259] Call Trace: [ 211.248206][ T5259] [ 211.252324][ T5259] dump_stack_lvl+0x188/0x24e [ 211.258035][ T5259] ? show_regs_print_info+0x12/0x12 [ 211.266235][ T5259] ? load_image+0x400/0x400 [ 211.272406][ T5259] ? __might_sleep+0xd0/0xd0 [ 211.281204][ T5259] ? __lock_acquire+0x7d10/0x7d10 [ 211.287342][ T5259] should_fail_ex+0x399/0x4d0 [ 211.293326][ T5259] should_failslab+0x5/0x20 [ 211.299260][ T5259] slab_pre_alloc_hook+0x59/0x310 [ 211.305083][ T5259] ? apparmor_sk_alloc_security+0x74/0x100 [ 211.311529][ T5259] __kmem_cache_alloc_node+0x4f/0x260 [ 211.320194][ T5259] ? apparmor_sk_alloc_security+0x74/0x100 [ 211.326449][ T5259] kmalloc_trace+0x26/0xe0 [ 211.331511][ T5259] apparmor_sk_alloc_security+0x74/0x100 [ 211.338899][ T5259] security_sk_alloc+0x6a/0xa0 [ 211.345745][ T5259] sk_prot_alloc+0x101/0x210 [ 211.353123][ T5259] ? sk_alloc+0x20/0x340 [ 211.359615][ T5259] sk_alloc+0x36/0x340 [ 211.363847][ T5259] ? bpf_ctx_init+0x163/0x1a0 [ 211.370083][ T5259] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 211.378195][ T5259] bpf_prog_test_run_skb+0x35e/0x12a0 [ 211.385155][ T5259] ? __fget_files+0x28/0x4b0 [ 211.391683][ T5259] ? __fget_files+0x43d/0x4b0 [ 211.398677][ T5259] ? cpu_online+0xa0/0xa0 [ 211.404595][ T5259] bpf_prog_test_run+0x31e/0x390 [ 211.412435][ T5259] __sys_bpf+0x62b/0x780 [ 211.417559][ T5259] ? bpf_link_show_fdinfo+0x380/0x380 [ 211.423882][ T5259] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 211.432316][ T5259] __x64_sys_bpf+0x78/0x90 [ 211.437862][ T5259] do_syscall_64+0x4c/0xa0 [ 211.443994][ T5259] ? clear_bhb_loop+0x60/0xb0 [ 211.454017][ T5259] ? clear_bhb_loop+0x60/0xb0 [ 211.461383][ T5259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.472286][ T5259] RIP: 0033:0x7f2e11d9c799 [ 211.477487][ T5259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.502368][ T5259] RSP: 002b:00007f2e12ce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.513379][ T5259] RAX: ffffffffffffffda RBX: 00007f2e12015fa0 RCX: 00007f2e11d9c799 [ 211.524114][ T5259] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 211.534595][ T5259] RBP: 00007f2e12ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 211.545431][ T5259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.556951][ T5259] R13: 00007f2e12016038 R14: 00007f2e12015fa0 R15: 00007ffe6546b5c8 [ 211.569368][ T5259] [ 211.611673][ T5265] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.283'. [ 211.690910][ T5256] IPv6: Can't replace route, no match found [ 211.772786][ T5264] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 211.852113][ T5267] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 211.980548][ T5275] FAULT_INJECTION: forcing a failure. [ 211.980548][ T5275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.025006][ T5275] CPU: 0 PID: 5275 Comm: syz.4.286 Not tainted syzkaller #0 [ 212.033796][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.046997][ T5275] Call Trace: [ 212.052979][ T5275] [ 212.056325][ T5275] dump_stack_lvl+0x188/0x24e [ 212.061701][ T5275] ? show_regs_print_info+0x12/0x12 [ 212.070924][ T5275] ? load_image+0x400/0x400 [ 212.078171][ T5275] ? __lock_acquire+0x7d10/0x7d10 [ 212.085979][ T5275] should_fail_ex+0x399/0x4d0 [ 212.092048][ T5275] _copy_from_user+0x2c/0x170 [ 212.102291][ T5275] __copy_msghdr+0x3b7/0x580 [ 212.108117][ T5275] ___sys_sendmsg+0x210/0x360 [ 212.115519][ T5275] ? __sys_sendmsg+0x290/0x290 [ 212.124991][ T5275] ? __lock_acquire+0x7d10/0x7d10 [ 212.131263][ T5275] __se_sys_sendmsg+0x1bb/0x2a0 [ 212.138222][ T5275] ? __x64_sys_sendmsg+0x80/0x80 [ 212.144038][ T5275] ? lockdep_hardirqs_on+0x94/0x140 [ 212.154283][ T5275] do_syscall_64+0x4c/0xa0 [ 212.159414][ T5275] ? clear_bhb_loop+0x60/0xb0 [ 212.170351][ T5275] ? clear_bhb_loop+0x60/0xb0 [ 212.176073][ T5275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.183356][ T5275] RIP: 0033:0x7f49f7d9c799 [ 212.190278][ T5275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.219200][ T5275] RSP: 002b:00007f49f8c32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.230345][ T5275] RAX: ffffffffffffffda RBX: 00007f49f8015fa0 RCX: 00007f49f7d9c799 [ 212.242118][ T5275] RDX: 00000000000408d0 RSI: 0000200000000440 RDI: 0000000000000003 [ 212.253387][ T5275] RBP: 00007f49f8c32090 R08: 0000000000000000 R09: 0000000000000000 [ 212.265444][ T5275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.277585][ T5275] R13: 00007f49f8016038 R14: 00007f49f8015fa0 R15: 00007ffd7e0ee7d8 [ 212.288604][ T5275] [ 212.494253][ T5267] team0: Port device wlan1 added [ 213.652350][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.660246][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.854459][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 214.231297][ T5304] netlink: 'syz.2.297': attribute type 3 has an invalid length. [ 214.262588][ T5304] netlink: 'syz.2.297': attribute type 1 has an invalid length. [ 214.547803][ T5310] netlink: 'syz.0.299': attribute type 3 has an invalid length. [ 214.607416][ T5310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.299'. [ 214.808412][ T46] wlan1: Trigger new scan to find an IBSS to join [ 215.458779][ T5326] netlink: 'syz.2.306': attribute type 3 has an invalid length. [ 215.552870][ T5326] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 216.014121][ T5322] IPv6: Can't replace route, no match found [ 216.287676][ T5187] wlan1: Creating new IBSS network, BSSID fa:85:54:aa:71:1f [ 216.324918][ T5322] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 216.422039][ T5330] : port 1(ip6gretap0) entered blocking state [ 216.474346][ T5330] : port 1(ip6gretap0) entered disabled state [ 216.531733][ T5330] device ip6gretap0 entered promiscuous mode [ 216.638325][ T5334] device ip6gretap0 left promiscuous mode [ 216.723824][ T5334] : port 1(ip6gretap0) entered disabled state [ 217.274317][ T5352] netlink: 'syz.0.313': attribute type 3 has an invalid length. [ 217.360144][ T5352] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 217.723432][ T5355] netlink: 'syz.4.316': attribute type 39 has an invalid length. [ 218.235604][ T5365] netlink: 'syz.0.317': attribute type 3 has an invalid length. [ 218.266930][ T5365] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 218.822306][ T56] wlan1: Trigger new scan to find an IBSS to join [ 218.822310][ T11] wlan1: Trigger new scan to find an IBSS to join [ 219.122291][ T5375] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.324'. [ 221.247443][ T31] wlan1: Creating new IBSS network, BSSID 8a:1c:c5:dd:96:85 [ 221.268631][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.185798][ T5404] netlink: 14 bytes leftover after parsing attributes in process `syz.1.335'. [ 222.293248][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.315117][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.568272][ T4285] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 223.848196][ T11] wlan1: Trigger new scan to find an IBSS to join [ 224.442582][ T5428] memory.events: port 1(team0) entered blocking state [ 224.451453][ T5428] memory.events: port 1(team0) entered disabled state [ 224.485369][ T5428] device team0 entered promiscuous mode [ 224.501287][ T5428] device team_slave_0 entered promiscuous mode [ 224.521163][ T5428] device team_slave_1 entered promiscuous mode [ 224.604271][ T5430] validate_nla: 1 callbacks suppressed [ 224.604290][ T5430] netlink: 'syz.0.344': attribute type 3 has an invalid length. [ 224.657960][ T5430] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 225.529529][ T4342] wlan1: Creating new IBSS network, BSSID 2a:ca:fe:83:1f:9c [ 226.252360][ T5452] netlink: 'syz.1.353': attribute type 10 has an invalid length. [ 227.447446][ T5452] team0: Port device geneve1 added [ 227.566555][ T5469] netlink: 192 bytes leftover after parsing attributes in process `syz.2.357'. [ 227.963465][ T5473] netlink: 14 bytes leftover after parsing attributes in process `syz.0.358'. [ 228.012493][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.024235][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.192479][ T5480] netlink: 'syz.3.361': attribute type 13 has an invalid length. [ 228.258903][ T5482] netlink: 'syz.1.359': attribute type 3 has an invalid length. [ 228.333628][ T5482] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 229.711624][ T5505] FAULT_INJECTION: forcing a failure. [ 229.711624][ T5505] name failslab, interval 1, probability 0, space 0, times 0 [ 229.802696][ T5505] CPU: 1 PID: 5505 Comm: syz.2.370 Not tainted syzkaller #0 [ 229.812085][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.825418][ T5505] Call Trace: [ 229.831016][ T5505] [ 229.834973][ T5505] dump_stack_lvl+0x188/0x24e [ 229.844254][ T5505] ? show_regs_print_info+0x12/0x12 [ 229.852162][ T5505] ? load_image+0x400/0x400 [ 229.859129][ T5505] ? __might_sleep+0xd0/0xd0 [ 229.865973][ T5505] ? __lock_acquire+0x7d10/0x7d10 [ 229.875242][ T5505] should_fail_ex+0x399/0x4d0 [ 229.881401][ T5505] should_failslab+0x5/0x20 [ 229.888749][ T5505] slab_pre_alloc_hook+0x59/0x310 [ 229.895631][ T5505] kmem_cache_alloc+0x56/0x2f0 [ 229.901167][ T5505] ? skb_clone+0x1e7/0x370 [ 229.909219][ T5505] skb_clone+0x1e7/0x370 [ 229.916653][ T5505] pfkey_sendmsg+0x496/0x1090 [ 229.923339][ T5505] ? pfkey_release+0x310/0x310 [ 229.930354][ T5505] ? aa_sk_perm+0x81f/0x950 [ 229.937157][ T5505] ? __might_fault+0xa6/0x120 [ 229.942871][ T5505] ? aa_af_perm+0x340/0x340 [ 229.948802][ T5505] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 229.959821][ T5505] ? aa_sock_msg_perm+0x94/0x150 [ 229.967437][ T5505] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 229.974267][ T5505] ? security_socket_sendmsg+0x7c/0xa0 [ 229.982117][ T5505] ? pfkey_release+0x310/0x310 [ 229.988726][ T5505] ____sys_sendmsg+0x5be/0x970 [ 229.995766][ T5505] ? __sys_sendmsg_sock+0x30/0x30 [ 230.003469][ T5505] ? __import_iovec+0x315/0x500 [ 230.010393][ T5505] ? import_iovec+0x6f/0xa0 [ 230.016897][ T5505] ___sys_sendmsg+0x2a2/0x360 [ 230.022570][ T5505] ? __sys_sendmsg+0x290/0x290 [ 230.029284][ T5505] ? trace_call_bpf+0xbf/0x6b0 [ 230.037555][ T5505] __se_sys_sendmsg+0x1bb/0x2a0 [ 230.046139][ T5505] ? __x64_sys_sendmsg+0x80/0x80 [ 230.052046][ T5505] ? lockdep_hardirqs_on+0x94/0x140 [ 230.058778][ T5505] do_syscall_64+0x4c/0xa0 [ 230.064559][ T5505] ? clear_bhb_loop+0x60/0xb0 [ 230.070375][ T5505] ? clear_bhb_loop+0x60/0xb0 [ 230.077387][ T5505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.086142][ T5505] RIP: 0033:0x7ff52699c799 [ 230.094593][ T5505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.121173][ T5505] RSP: 002b:00007ff527797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.134163][ T5505] RAX: ffffffffffffffda RBX: 00007ff526c15fa0 RCX: 00007ff52699c799 [ 230.144647][ T5505] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 230.155572][ T5505] RBP: 00007ff527797090 R08: 0000000000000000 R09: 0000000000000000 [ 230.167692][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.180086][ T5505] R13: 00007ff526c16038 R14: 00007ff526c15fa0 R15: 00007ffe94a9f008 [ 230.192744][ T5505] [ 230.794791][ T5518] netlink: 'syz.4.375': attribute type 13 has an invalid length. [ 232.727700][ T5544] netlink: 60 bytes leftover after parsing attributes in process `syz.1.382'. [ 234.191583][ T5569] FAULT_INJECTION: forcing a failure. [ 234.191583][ T5569] name failslab, interval 1, probability 0, space 0, times 0 [ 234.213416][ T5569] CPU: 0 PID: 5569 Comm: syz.4.387 Not tainted syzkaller #0 [ 234.222535][ T5569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.236668][ T5569] Call Trace: [ 234.240486][ T5569] [ 234.243745][ T5569] dump_stack_lvl+0x188/0x24e [ 234.249749][ T5569] ? show_regs_print_info+0x12/0x12 [ 234.258403][ T5569] ? load_image+0x400/0x400 [ 234.266566][ T5569] ? __might_sleep+0xd0/0xd0 [ 234.272162][ T5569] ? __lock_acquire+0x7d10/0x7d10 [ 234.278414][ T5569] should_fail_ex+0x399/0x4d0 [ 234.284339][ T5569] should_failslab+0x5/0x20 [ 234.290146][ T5569] slab_pre_alloc_hook+0x59/0x310 [ 234.298001][ T5569] ? new_nbp+0x29/0x430 [ 234.303216][ T5569] __kmem_cache_alloc_node+0x4f/0x260 [ 234.309360][ T5569] ? new_nbp+0x29/0x430 [ 234.314476][ T5569] __kmalloc+0xa0/0x240 [ 234.319909][ T5569] new_nbp+0x29/0x430 [ 234.325136][ T5569] ? mutex_is_locked+0xe/0x40 [ 234.333292][ T5569] br_add_if+0x28b/0xec0 [ 234.338309][ T5569] ? apparmor_capable+0x12c/0x190 [ 234.345962][ T5569] ? bpf_lsm_capable+0x5/0x10 [ 234.351356][ T5569] ? security_capable+0x85/0xb0 [ 234.357693][ T5569] br_ioctl_stub+0x6c4/0xcf0 [ 234.365354][ T5569] ? rcu_is_watching+0x11/0xa0 [ 234.372132][ T5569] ? rcu_read_unlock+0xa0/0xa0 [ 234.378900][ T5569] ? __mutex_lock+0x1ab/0xaf0 [ 234.384754][ T5569] ? mutex_lock_nested+0x10/0x10 [ 234.391712][ T5569] ? rcu_read_unlock+0xa0/0xa0 [ 234.398379][ T5569] sock_ioctl+0x494/0x710 [ 234.405402][ T5569] ? sock_poll+0x410/0x410 [ 234.412272][ T5569] ? bpf_lsm_file_ioctl+0x5/0x10 [ 234.418337][ T5569] ? security_file_ioctl+0x7c/0xa0 [ 234.426844][ T5569] ? sock_poll+0x410/0x410 [ 234.432890][ T5569] __se_sys_ioctl+0xfa/0x170 [ 234.438206][ T5569] do_syscall_64+0x4c/0xa0 [ 234.443243][ T5569] ? clear_bhb_loop+0x60/0xb0 [ 234.448937][ T5569] ? clear_bhb_loop+0x60/0xb0 [ 234.455872][ T5569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.463496][ T5569] RIP: 0033:0x7f49f7d9c799 [ 234.470459][ T5569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.496965][ T5569] RSP: 002b:00007f49f8bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.506599][ T5569] RAX: ffffffffffffffda RBX: 00007f49f8016180 RCX: 00007f49f7d9c799 [ 234.518037][ T5569] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000c [ 234.529625][ T5569] RBP: 00007f49f8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 234.542382][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.553315][ T5569] R13: 00007f49f8016218 R14: 00007f49f8016180 R15: 00007ffd7e0ee7d8 [ 234.562195][ T5569] [ 234.594325][ T5568] netlink: 'syz.0.388': attribute type 13 has an invalid length. [ 234.608065][ T5571] IPv6: Can't replace route, no match found [ 235.060616][ T5581] netlink: 164 bytes leftover after parsing attributes in process `syz.3.403'. [ 235.463021][ T5585] memory.events: port 1(team0) entered blocking state [ 235.483049][ T5585] memory.events: port 1(team0) entered disabled state [ 235.587288][ T5585] device team0 entered promiscuous mode [ 235.639247][ T5585] device team_slave_0 entered promiscuous mode [ 235.717731][ T5585] device team_slave_1 entered promiscuous mode [ 235.885307][ T5585] device wlan1 entered promiscuous mode [ 241.033367][ T5702] FAULT_INJECTION: forcing a failure. [ 241.033367][ T5702] name failslab, interval 1, probability 0, space 0, times 0 [ 241.136232][ T5702] CPU: 1 PID: 5702 Comm: syz.2.409 Not tainted syzkaller #0 [ 241.145854][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.160314][ T5702] Call Trace: [ 241.166161][ T5702] [ 241.170030][ T5702] dump_stack_lvl+0x188/0x24e [ 241.176852][ T5702] ? show_regs_print_info+0x12/0x12 [ 241.182963][ T5702] ? load_image+0x400/0x400 [ 241.188493][ T5702] ? __lock_acquire+0x7d10/0x7d10 [ 241.193882][ T5702] should_fail_ex+0x399/0x4d0 [ 241.200681][ T5702] should_failslab+0x5/0x20 [ 241.207165][ T5702] slab_pre_alloc_hook+0x59/0x310 [ 241.213663][ T5702] ? apparmor_sk_alloc_security+0x74/0x100 [ 241.223635][ T5702] __kmem_cache_alloc_node+0x4f/0x260 [ 241.231466][ T5702] ? apparmor_sk_alloc_security+0x74/0x100 [ 241.237894][ T5702] kmalloc_trace+0x26/0xe0 [ 241.244898][ T5702] apparmor_sk_alloc_security+0x74/0x100 [ 241.252913][ T5702] security_sk_alloc+0x6a/0xa0 [ 241.260519][ T5702] sk_prot_alloc+0x101/0x210 [ 241.267468][ T5702] sk_alloc+0x36/0x340 [ 241.273242][ T5702] ? rcu_read_unlock+0x8c/0xa0 [ 241.279681][ T5702] unix_create1+0xb3/0x710 [ 241.285893][ T5702] unix_create+0x143/0x1f0 [ 241.291704][ T5702] __sock_create+0x4a2/0x940 [ 241.297836][ T5702] __sys_socketpair+0x1bd/0x540 [ 241.304172][ T5702] __x64_sys_socketpair+0x97/0xb0 [ 241.311395][ T5702] do_syscall_64+0x4c/0xa0 [ 241.317825][ T5702] ? clear_bhb_loop+0x60/0xb0 [ 241.325616][ T5702] ? clear_bhb_loop+0x60/0xb0 [ 241.330689][ T5702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.339461][ T5702] RIP: 0033:0x7ff52699c799 [ 241.345950][ T5702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.371715][ T5702] RSP: 002b:00007ff527797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 241.384809][ T5702] RAX: ffffffffffffffda RBX: 00007ff526c15fa0 RCX: 00007ff52699c799 [ 241.396690][ T5702] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 241.408685][ T5702] RBP: 00007ff527797090 R08: 0000000000000000 R09: 0000000000000000 [ 241.418936][ T5702] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 241.427683][ T5702] R13: 00007ff526c16038 R14: 00007ff526c15fa0 R15: 00007ffe94a9f008 [ 241.439706][ T5702] [ 241.927344][ T5720] netlink: 'syz.1.416': attribute type 21 has an invalid length. [ 241.967864][ T5720] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 241.992654][ T5720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.416'. [ 242.114470][ T5720] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.416'. [ 243.553765][ T5734] netlink: 'syz.4.421': attribute type 17 has an invalid length. [ 243.563774][ T5737] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 243.713053][ T5734] netlink: 152 bytes leftover after parsing attributes in process `syz.4.421'. [ 243.940673][ T5734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.312482][ T5647] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.312670][ T5647] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.522888][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 251.530691][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 251.602898][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 251.611895][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 251.621494][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 255.584806][ T5823] FAULT_INJECTION: forcing a failure. [ 255.584806][ T5823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.615366][ T5682] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.705986][ T5823] CPU: 1 PID: 5823 Comm: syz.2.449 Not tainted syzkaller #0 [ 255.716521][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.732282][ T5823] Call Trace: [ 255.736682][ T5823] [ 255.740554][ T5823] dump_stack_lvl+0x188/0x24e [ 255.746647][ T5823] ? show_regs_print_info+0x12/0x12 [ 255.754275][ T5823] ? load_image+0x400/0x400 [ 255.760613][ T5823] ? __lock_acquire+0x7d10/0x7d10 [ 255.768659][ T5823] should_fail_ex+0x399/0x4d0 [ 255.776981][ T5823] _copy_from_user+0x2c/0x170 [ 255.782470][ T5823] iovec_from_user+0x143/0x360 [ 255.789714][ T5823] __import_iovec+0x6d/0x500 [ 255.795106][ T5823] import_iovec+0x6f/0xa0 [ 255.800779][ T5823] ___sys_sendmsg+0x252/0x360 [ 255.805937][ T5823] ? __sys_sendmsg+0x290/0x290 [ 255.812672][ T5823] ? __lock_acquire+0x7d10/0x7d10 [ 255.819881][ T5823] __se_sys_sendmsg+0x1bb/0x2a0 [ 255.826138][ T5823] ? __x64_sys_sendmsg+0x80/0x80 [ 255.835417][ T5823] ? lockdep_hardirqs_on+0x94/0x140 [ 255.843976][ T5823] do_syscall_64+0x4c/0xa0 [ 255.850684][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 255.858537][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 255.864401][ T5823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.872289][ T5823] RIP: 0033:0x7ff52699c799 [ 255.877413][ T5823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.905261][ T5823] RSP: 002b:00007ff527797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.916565][ T5823] RAX: ffffffffffffffda RBX: 00007ff526c15fa0 RCX: 00007ff52699c799 [ 255.927328][ T5823] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 255.938192][ T5823] RBP: 00007ff527797090 R08: 0000000000000000 R09: 0000000000000000 [ 255.949234][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.958677][ T5823] R13: 00007ff526c16038 R14: 00007ff526c15fa0 R15: 00007ffe94a9f008 [ 255.969786][ T5823] [ 256.333807][ T5830] netlink: 'syz.1.450': attribute type 17 has an invalid length. [ 256.362928][ T5830] netlink: 152 bytes leftover after parsing attributes in process `syz.1.450'. [ 256.382647][ T5830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.190153][ T5849] FAULT_INJECTION: forcing a failure. [ 258.190153][ T5849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.329962][ T5849] CPU: 1 PID: 5849 Comm: syz.4.457 Not tainted syzkaller #0 [ 258.341137][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.355512][ T5849] Call Trace: [ 258.359434][ T5849] [ 258.363922][ T5849] dump_stack_lvl+0x188/0x24e [ 258.370978][ T5849] ? show_regs_print_info+0x12/0x12 [ 258.377570][ T5849] ? load_image+0x400/0x400 [ 258.383441][ T5849] ? __lock_acquire+0x7d10/0x7d10 [ 258.390160][ T5849] ? snprintf+0xe5/0x140 [ 258.396493][ T5849] should_fail_ex+0x399/0x4d0 [ 258.403102][ T5849] _copy_to_user+0x2c/0x130 [ 258.409577][ T5849] simple_read_from_buffer+0xe3/0x150 [ 258.416213][ T5849] proc_fail_nth_read+0x1a6/0x220 [ 258.422633][ T5849] ? proc_fault_inject_write+0x310/0x310 [ 258.430385][ T5849] ? fsnotify_perm+0x248/0x550 [ 258.438101][ T5849] ? proc_fault_inject_write+0x310/0x310 [ 258.446123][ T5849] vfs_read+0x2de/0xa00 [ 258.451004][ T5849] ? kernel_read+0x1e0/0x1e0 [ 258.457252][ T5849] ? __fget_files+0x28/0x4b0 [ 258.464417][ T5849] ? __fget_files+0x28/0x4b0 [ 258.471122][ T5849] ? __fget_files+0x43d/0x4b0 [ 258.477341][ T5849] ? __fdget_pos+0x2ae/0x360 [ 258.486551][ T5849] ? ksys_read+0x71/0x250 [ 258.492230][ T5849] ksys_read+0x14c/0x250 [ 258.497816][ T5849] ? vfs_write+0xa30/0xa30 [ 258.503923][ T5849] ? lockdep_hardirqs_on+0x94/0x140 [ 258.511241][ T5849] do_syscall_64+0x4c/0xa0 [ 258.516447][ T5849] ? clear_bhb_loop+0x60/0xb0 [ 258.523102][ T5849] ? clear_bhb_loop+0x60/0xb0 [ 258.529382][ T5849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.539759][ T5849] RIP: 0033:0x7f49f7d5cfce [ 258.545896][ T5849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.574895][ T5849] RSP: 002b:00007f49f8c10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.588218][ T5849] RAX: ffffffffffffffda RBX: 00007f49f8c116c0 RCX: 00007f49f7d5cfce [ 258.601463][ T5849] RDX: 000000000000000f RSI: 00007f49f8c110a0 RDI: 0000000000000005 [ 258.612180][ T5849] RBP: 00007f49f8c11090 R08: 0000000000000000 R09: 0000000000000000 [ 258.623363][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.635231][ T5849] R13: 00007f49f8016128 R14: 00007f49f8016090 R15: 00007ffd7e0ee7d8 [ 258.644118][ T5849] [ 259.028307][ T5856] netlink: 'syz.3.460': attribute type 21 has an invalid length. [ 260.470003][ T5860] netlink: 'syz.3.472': attribute type 5 has an invalid length. [ 260.605362][ T5860] netlink: 176 bytes leftover after parsing attributes in process `syz.3.472'. [ 262.448491][ T5871] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 262.617415][ T5871] device geneve0 entered promiscuous mode [ 262.833643][ T5871] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 263.660131][ T5878] netlink: 'syz.2.469': attribute type 9 has an invalid length. [ 263.740491][ T5878] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.469'. [ 263.809052][ T5880] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.470'. [ 263.932580][ T5883] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 265.503797][ T5898] netlink: 'syz.0.477': attribute type 3 has an invalid length. [ 265.541800][ T5898] netlink: 152 bytes leftover after parsing attributes in process `syz.0.477'. [ 269.132166][ T5919] netlink: 164 bytes leftover after parsing attributes in process `syz.2.487'. [ 270.150535][ T5932] netlink: 'syz.2.491': attribute type 3 has an invalid length. [ 270.230759][ T5932] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 270.791709][ T5939] FAULT_INJECTION: forcing a failure. [ 270.791709][ T5939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.922453][ T5939] CPU: 1 PID: 5939 Comm: syz.2.493 Not tainted syzkaller #0 [ 270.931888][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.944892][ T5939] Call Trace: [ 270.949536][ T5939] [ 270.955687][ T5939] dump_stack_lvl+0x188/0x24e [ 270.963317][ T5939] ? show_regs_print_info+0x12/0x12 [ 270.970196][ T5939] ? load_image+0x400/0x400 [ 270.976211][ T5939] ? __might_fault+0xa6/0x120 [ 270.982051][ T5939] should_fail_ex+0x399/0x4d0 [ 270.987775][ T5939] copyin+0x1b/0x120 [ 270.992398][ T5939] _copy_from_iter+0x447/0x1130 [ 270.997972][ T5939] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 271.004825][ T5939] ? copyout_mc+0x110/0x110 [ 271.010423][ T5939] ? __virt_addr_valid+0x188/0x540 [ 271.017166][ T5939] ? __virt_addr_valid+0x188/0x540 [ 271.022409][ T5939] ? __virt_addr_valid+0x465/0x540 [ 271.030530][ T5939] ? __check_object_size+0x500/0xa40 [ 271.037804][ T5939] skb_copy_datagram_from_iter+0xef/0x690 [ 271.044601][ T5939] ? skb_put+0x117/0x210 [ 271.050666][ T5939] packet_sendmsg+0x3727/0x4e60 [ 271.056783][ T5939] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 271.065407][ T5939] ? __might_sleep+0xd0/0xd0 [ 271.070917][ T5939] ? verify_lock_unused+0x140/0x140 [ 271.078792][ T5939] ? aa_sk_perm+0x81f/0x950 [ 271.085620][ T5939] ? packet_getsockopt+0x9a0/0x9a0 [ 271.091399][ T5939] ? aa_sock_msg_perm+0x94/0x150 [ 271.098547][ T5939] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 271.105253][ T5939] ? security_socket_sendmsg+0x7c/0xa0 [ 271.112051][ T5939] ? packet_getsockopt+0x9a0/0x9a0 [ 271.118302][ T5939] ____sys_sendmsg+0x5be/0x970 [ 271.124253][ T5939] ? __sys_sendmsg_sock+0x30/0x30 [ 271.130217][ T5939] ? __import_iovec+0x315/0x500 [ 271.136704][ T5939] ? import_iovec+0x6f/0xa0 [ 271.141603][ T5939] ___sys_sendmsg+0x2a2/0x360 [ 271.149159][ T5939] ? __sys_sendmsg+0x290/0x290 [ 271.155681][ T5939] ? __lock_acquire+0x7d10/0x7d10 [ 271.162325][ T5939] __se_sys_sendmsg+0x1bb/0x2a0 [ 271.172053][ T5939] ? __x64_sys_sendmsg+0x80/0x80 [ 271.179283][ T5939] ? lockdep_hardirqs_on+0x94/0x140 [ 271.185522][ T5939] do_syscall_64+0x4c/0xa0 [ 271.192035][ T5939] ? clear_bhb_loop+0x60/0xb0 [ 271.198184][ T5939] ? clear_bhb_loop+0x60/0xb0 [ 271.205946][ T5939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.212957][ T5939] RIP: 0033:0x7ff52699c799 [ 271.218194][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.242699][ T5939] RSP: 002b:00007ff527797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.254226][ T5939] RAX: ffffffffffffffda RBX: 00007ff526c15fa0 RCX: 00007ff52699c799 [ 271.263548][ T5939] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 271.273086][ T5939] RBP: 00007ff527797090 R08: 0000000000000000 R09: 0000000000000000 [ 271.286513][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.296133][ T5939] R13: 00007ff526c16038 R14: 00007ff526c15fa0 R15: 00007ffe94a9f008 [ 271.305957][ T5939] [ 271.614641][ T5941] netlink: 'syz.3.495': attribute type 21 has an invalid length. [ 271.652614][ T5941] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 272.108667][ T5945] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 272.474842][ T5945] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 272.624303][ T5948] netlink: 'syz.3.497': attribute type 9 has an invalid length. [ 272.653173][ T5948] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.497'. [ 275.117614][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.124740][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.732220][ T5662] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.112787][ T5985] netlink: 192 bytes leftover after parsing attributes in process `syz.0.511'. [ 280.969119][ T6023] netlink: 'syz.2.526': attribute type 3 has an invalid length. [ 281.010952][ T6023] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 281.611492][ T6029] netlink: 'syz.2.528': attribute type 25 has an invalid length. [ 281.726022][ T6029] netlink: 'syz.2.528': attribute type 28 has an invalid length. [ 282.068695][ T6039] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.531'. [ 282.111598][ T6039] bridge_slave_1: default FDB implementation only supports local addresses [ 282.523525][ T6045] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 282.658600][ T5647] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.915909][ T6045] team0: Port device geneve1 added [ 283.383713][ T6053] netlink: 'syz.1.534': attribute type 27 has an invalid length. [ 283.612148][ T6057] netlink: 'syz.0.538': attribute type 3 has an invalid length. [ 283.645104][ T6057] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 285.971737][ T6091] netlink: 'syz.4.551': attribute type 3 has an invalid length. [ 286.003208][ T6091] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 286.756184][ T5681] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.465803][ T6115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.560'. [ 288.520580][ T6116] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 290.905316][ T6116] team0: Device hsr_slave_0 failed to register rx_handler [ 291.018757][ T6128] netlink: 'syz.2.563': attribute type 3 has an invalid length. [ 291.050730][ T6128] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 291.733959][ T6139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.607647][ T6166] netlink: 'syz.1.577': attribute type 3 has an invalid length. [ 293.661674][ T6166] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 293.966748][ T6173] netlink: 'syz.3.580': attribute type 3 has an invalid length. [ 293.975937][ T6173] netlink: 152 bytes leftover after parsing attributes in process `syz.3.580'. [ 294.940708][ T6196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.587'. [ 296.097643][ T6208] netlink: 'syz.0.591': attribute type 3 has an invalid length. [ 296.120654][ T6208] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 296.379758][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.593'. [ 296.411121][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.593'. [ 296.437439][ T6215] netlink: 60 bytes leftover after parsing attributes in process `syz.0.593'. [ 296.454016][ T6214] netlink: 'syz.1.594': attribute type 3 has an invalid length. [ 296.487797][ T6214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.594'. [ 297.499839][ T6236] netlink: 'syz.0.604': attribute type 3 has an invalid length. [ 297.574125][ T6236] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 298.079831][ T6238] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.172486][ T6260] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 299.212708][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.614'. [ 299.265206][ T6260] device team0 entered promiscuous mode [ 299.292192][ T6260] device team_slave_0 entered promiscuous mode [ 299.344398][ T6260] device team_slave_1 entered promiscuous mode [ 299.403834][ T6260] device wlan1 entered promiscuous mode [ 299.443972][ T6260] device geneve1 entered promiscuous mode [ 299.501600][ T6260] bridge0: port 3(team0) entered blocking state [ 299.564010][ T6260] bridge0: port 3(team0) entered disabled state [ 299.875128][ T6276] netlink: 'syz.2.618': attribute type 3 has an invalid length. [ 299.962539][ T6276] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 300.713016][ T6290] netlink: 'syz.3.619': attribute type 21 has an invalid length. [ 300.819867][ T6293] netlink: 'syz.4.624': attribute type 3 has an invalid length. [ 300.857249][ T6293] netlink: 152 bytes leftover after parsing attributes in process `syz.4.624'. [ 302.496399][ T6320] netlink: 'syz.3.633': attribute type 3 has an invalid length. [ 302.637705][ T6320] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 303.325294][ T6334] netlink: 'syz.1.639': attribute type 3 has an invalid length. [ 303.492676][ T6334] netlink: 152 bytes leftover after parsing attributes in process `syz.1.639'. [ 304.247509][ T6341] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 304.265531][ T6341] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 304.304661][ T6341] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.643'. [ 304.388395][ T6341] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 304.411531][ T6341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 304.437304][ T6341] bridge0: port 4(veth0_vlan) entered blocking state [ 304.577345][ T6341] bridge0: port 4(veth0_vlan) entered disabled state [ 304.637579][ T6341] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 305.295525][ T6346] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.313753][ T6353] netlink: 'syz.3.647': attribute type 3 has an invalid length. [ 305.336002][ T6353] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 305.679494][ T6361] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 305.698710][ T6361] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.648'. [ 306.246889][ T6372] netlink: 'syz.0.653': attribute type 3 has an invalid length. [ 306.312490][ T6372] netlink: 152 bytes leftover after parsing attributes in process `syz.0.653'. [ 306.396806][ T6374] netlink: 2 bytes leftover after parsing attributes in process `syz.1.654'. [ 306.521612][ T6374] device batadv_slave_1 entered promiscuous mode [ 306.672246][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.913256][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.873229][ T5674] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 308.941493][ T6402] validate_nla: 1 callbacks suppressed [ 308.941514][ T6402] netlink: 'syz.2.667': attribute type 3 has an invalid length. [ 308.970961][ T6402] netlink: 152 bytes leftover after parsing attributes in process `syz.2.667'. [ 310.211992][ T6435] netlink: 'syz.0.678': attribute type 3 has an invalid length. [ 310.261568][ T6435] netlink: 152 bytes leftover after parsing attributes in process `syz.0.678'. [ 311.830658][ T6450] netlink: 'syz.3.685': attribute type 33 has an invalid length. [ 311.874295][ T6450] netlink: 152 bytes leftover after parsing attributes in process `syz.3.685'. [ 312.274297][ T6456] netlink: 'syz.3.688': attribute type 10 has an invalid length. [ 312.294937][ T6456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.688'. [ 312.316800][ T6456] device batadv_slave_1 entered promiscuous mode [ 312.354313][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.364836][ T6456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.743714][ T6464] netlink: 'syz.4.692': attribute type 3 has an invalid length. [ 312.784089][ T6464] netlink: 152 bytes leftover after parsing attributes in process `syz.4.692'. [ 313.788154][ T5652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.045502][ T6501] netlink: 'syz.0.704': attribute type 2 has an invalid length. [ 315.078719][ T6501] netlink: 'syz.0.704': attribute type 8 has an invalid length. [ 315.131468][ T6501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.704'. [ 318.090055][ T5652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.347281][ T6541] netlink: 'syz.3.719': attribute type 2 has an invalid length. [ 318.399344][ T6541] netlink: 'syz.3.719': attribute type 8 has an invalid length. [ 318.421772][ T6541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.719'. [ 323.179840][ T6598] netlink: 'syz.2.741': attribute type 3 has an invalid length. [ 323.769864][ T6602] netlink: 'syz.0.743': attribute type 3 has an invalid length. [ 323.787543][ T6602] netlink: 152 bytes leftover after parsing attributes in process `syz.0.743'. [ 327.362038][ T6630] netlink: 'syz.4.754': attribute type 3 has an invalid length. [ 327.467289][ T6630] netlink: 152 bytes leftover after parsing attributes in process `syz.4.754'. [ 329.718987][ T6655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.763'. [ 330.029283][ T6662] netlink: 'syz.1.765': attribute type 3 has an invalid length. [ 330.101071][ T6662] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 330.332496][ T6669] netlink: 'syz.2.767': attribute type 3 has an invalid length. [ 330.341618][ T6669] netlink: 152 bytes leftover after parsing attributes in process `syz.2.767'. [ 330.477154][ T6675] netlink: 164 bytes leftover after parsing attributes in process `syz.3.770'. [ 331.686919][ T6696] netlink: 164 bytes leftover after parsing attributes in process `syz.1.779'. [ 332.765635][ T6712] netlink: 'syz.3.783': attribute type 3 has an invalid length. [ 332.804281][ T6712] netlink: 152 bytes leftover after parsing attributes in process `syz.3.783'. [ 333.729609][ T6733] netlink: 164 bytes leftover after parsing attributes in process `syz.2.791'. [ 334.226517][ T6748] netlink: 'syz.1.797': attribute type 3 has an invalid length. [ 334.456981][ T6748] netlink: 152 bytes leftover after parsing attributes in process `syz.1.797'. [ 335.783925][ T6763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.799'. [ 336.485863][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.494323][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.538630][ T6775] netlink: 'syz.2.804': attribute type 4 has an invalid length. [ 336.563121][ T6775] netlink: 140 bytes leftover after parsing attributes in process `syz.2.804'. [ 336.654210][ T6782] netlink: 164 bytes leftover after parsing attributes in process `syz.1.807'. [ 337.023381][ T6789] netlink: 'syz.3.810': attribute type 3 has an invalid length. [ 337.085874][ T6789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.810'. [ 337.964969][ T6798] netlink: 'syz.1.813': attribute type 10 has an invalid length. [ 338.011990][ T6798] netlink: 2 bytes leftover after parsing attributes in process `syz.1.813'. [ 338.174321][ T6798] device bond0 entered promiscuous mode [ 338.235963][ T6798] device bond_slave_1 entered promiscuous mode [ 338.312922][ T6798] bridge0: port 4(bond0) entered blocking state [ 338.320094][ T6798] bridge0: port 4(bond0) entered disabled state [ 338.893309][ T6809] netlink: 164 bytes leftover after parsing attributes in process `syz.1.818'. [ 339.044148][ T6813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.053156][ T6813] IPv6: NLM_F_CREATE should be set when creating new route [ 339.064510][ T6813] IPv6: NLM_F_CREATE should be set when creating new route [ 339.074004][ T6813] IPv6: NLM_F_CREATE should be set when creating new route [ 339.888307][ T5650] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.116135][ T6827] netlink: 'syz.0.822': attribute type 3 has an invalid length. [ 340.233599][ T6827] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 342.046803][ T6848] netlink: 164 bytes leftover after parsing attributes in process `syz.1.829'. [ 343.759981][ T6857] device wlan0 entered promiscuous mode [ 344.064170][ T6870] netlink: 'syz.2.836': attribute type 3 has an invalid length. [ 345.530837][ T5681] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.878510][ T6888] netlink: 164 bytes leftover after parsing attributes in process `syz.4.842'. [ 348.857228][ T6924] netlink: 164 bytes leftover after parsing attributes in process `syz.3.856'. [ 349.516214][ T5674] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.592899][ T6949] device wlan0 entered promiscuous mode [ 352.559821][ T6976] netlink: 164 bytes leftover after parsing attributes in process `syz.0.871'. [ 354.983140][ T6996] device wlan0 entered promiscuous mode [ 355.424928][ T7013] netlink: 164 bytes leftover after parsing attributes in process `syz.0.884'. [ 357.536273][ T7041] netlink: 'syz.1.895': attribute type 39 has an invalid length. [ 358.220558][ T7053] netlink: 164 bytes leftover after parsing attributes in process `syz.2.898'. [ 359.183209][ T7077] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.914'. [ 359.356760][ T7079] netlink: 'syz.2.906': attribute type 9 has an invalid length. [ 359.378035][ T7079] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.906'. [ 359.554745][ T7080] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 359.634808][ T7079] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 359.643034][ T7080] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.906'. [ 359.680734][ T7079] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.906'. [ 360.001403][ T7091] netlink: 144 bytes leftover after parsing attributes in process `syz.1.921'. [ 360.280254][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 360.703939][ T7091] tipc: Started in network mode [ 360.709829][ T7091] tipc: Node identity 9215a268, cluster identity 4711 [ 360.742569][ T7091] tipc: Node number set to 2450891368 [ 360.959213][ T7099] netlink: 164 bytes leftover after parsing attributes in process `syz.4.911'. [ 362.803005][ T5639] wlan1: Trigger new scan to find an IBSS to join [ 366.821476][ T7227] netlink: 'syz.0.958': attribute type 13 has an invalid length. [ 366.914139][ T7227] netlink: 152 bytes leftover after parsing attributes in process `syz.0.958'. [ 366.960659][ T7227] syz_tun: refused to change device tx_queue_len [ 366.985875][ T7227] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 367.130335][ T7230] netlink: 'syz.0.958': attribute type 13 has an invalid length. [ 367.294070][ T7230] netlink: 152 bytes leftover after parsing attributes in process `syz.0.958'. [ 367.346706][ T7230] syz_tun: refused to change device tx_queue_len [ 367.373647][ T7230] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 367.498363][ T7236] netlink: 'syz.1.964': attribute type 21 has an invalid length. [ 367.531202][ T7236] netlink: 156 bytes leftover after parsing attributes in process `syz.1.964'. [ 367.849113][ T5681] wlan1: Trigger new scan to find an IBSS to join [ 368.382821][ T7255] IPv6: Can't replace route, no match found [ 368.867546][ T5657] wlan1: Creating new IBSS network, BSSID ea:4b:e5:e3:e3:60 [ 368.930906][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 369.018734][ T7268] netlink: 10 bytes leftover after parsing attributes in process `syz.1.974'. [ 369.744146][ T7279] FAULT_INJECTION: forcing a failure. [ 369.744146][ T7279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.932973][ T7279] CPU: 1 PID: 7279 Comm: syz.1.979 Not tainted syzkaller #0 [ 369.946302][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.959584][ T7279] Call Trace: [ 369.963213][ T7279] [ 369.966725][ T7279] dump_stack_lvl+0x188/0x24e [ 369.972882][ T7279] ? show_regs_print_info+0x12/0x12 [ 369.979466][ T7279] ? load_image+0x400/0x400 [ 369.984520][ T7279] ? __lock_acquire+0x7d10/0x7d10 [ 369.989951][ T7279] ? __virt_addr_valid+0x188/0x540 [ 369.996343][ T7279] should_fail_ex+0x399/0x4d0 [ 370.002189][ T7279] _copy_from_user+0x2c/0x170 [ 370.009846][ T7279] bpf_test_init+0xde/0x140 [ 370.014443][ T7279] bpf_prog_test_run_xdp+0x484/0xf10 [ 370.023991][ T7279] ? dev_put+0x80/0x80 [ 370.030000][ T7279] ? dev_put+0x80/0x80 [ 370.034504][ T7279] bpf_prog_test_run+0x31e/0x390 [ 370.040482][ T7279] __sys_bpf+0x62b/0x780 [ 370.045078][ T7279] ? bpf_link_show_fdinfo+0x380/0x380 [ 370.056394][ T7279] ? lock_chain_count+0x20/0x20 [ 370.065340][ T7279] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 370.078192][ T7279] __x64_sys_bpf+0x78/0x90 [ 370.083993][ T7279] do_syscall_64+0x4c/0xa0 [ 370.095358][ T7279] ? clear_bhb_loop+0x60/0xb0 [ 370.100465][ T7279] ? clear_bhb_loop+0x60/0xb0 [ 370.105429][ T7279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.112059][ T7279] RIP: 0033:0x7f74c6f9c799 [ 370.119616][ T7279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.145371][ T7279] RSP: 002b:00007f74c7da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.156823][ T7279] RAX: ffffffffffffffda RBX: 00007f74c7216090 RCX: 00007f74c6f9c799 [ 370.165509][ T7279] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 370.178380][ T7279] RBP: 00007f74c7da1090 R08: 0000000000000000 R09: 0000000000000000 [ 370.188231][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.196616][ T7279] R13: 00007f74c7216128 R14: 00007f74c7216090 R15: 00007ffc5c7184e8 [ 370.206071][ T7279] [ 370.420159][ T7288] netlink: 'syz.4.982': attribute type 11 has an invalid length. [ 370.459460][ T7288] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.982'. [ 370.715061][ T7291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.185855][ T7297] netlink: 144 bytes leftover after parsing attributes in process `syz.0.985'. [ 371.222957][ T5652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.475602][ T7297] tipc: Started in network mode [ 371.495304][ T7297] tipc: Node identity 9215a268, cluster identity 4711 [ 371.510328][ T7297] tipc: Node number set to 2450891368 [ 372.126303][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 372.881461][ T7329] netlink: 'syz.3.996': attribute type 21 has an invalid length. [ 372.891124][ T7329] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 372.933462][ T7329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.996'. [ 373.140132][ T7329] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.996'. [ 373.193406][ T7333] netlink: 10 bytes leftover after parsing attributes in process `syz.2.999'. [ 373.287711][ T7343] netlink: 'syz.1.1002': attribute type 21 has an invalid length. [ 373.312585][ T7343] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 373.378107][ T7343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1002'. [ 373.496851][ T7343] FAULT_INJECTION: forcing a failure. [ 373.496851][ T7343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.664004][ T7343] CPU: 1 PID: 7343 Comm: syz.1.1002 Not tainted syzkaller #0 [ 373.673704][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.686806][ T7343] Call Trace: [ 373.691205][ T7343] [ 373.694631][ T7343] dump_stack_lvl+0x188/0x24e [ 373.700017][ T7343] ? show_regs_print_info+0x12/0x12 [ 373.706228][ T7343] ? load_image+0x400/0x400 [ 373.711085][ T7343] ? __lock_acquire+0x7d10/0x7d10 [ 373.717477][ T7343] should_fail_ex+0x399/0x4d0 [ 373.722418][ T7343] _copy_from_user+0x2c/0x170 [ 373.728617][ T7343] iovec_from_user+0x143/0x360 [ 373.735310][ T7343] __import_iovec+0x6d/0x500 [ 373.742490][ T7343] import_iovec+0x6f/0xa0 [ 373.748256][ T7343] ___sys_sendmsg+0x252/0x360 [ 373.754044][ T7343] ? __sys_sendmsg+0x290/0x290 [ 373.759715][ T7343] ? trace_call_bpf+0xbf/0x6b0 [ 373.765620][ T7343] __se_sys_sendmsg+0x1bb/0x2a0 [ 373.770698][ T7343] ? __x64_sys_sendmsg+0x80/0x80 [ 373.776564][ T7343] ? lockdep_hardirqs_on+0x94/0x140 [ 373.782378][ T7343] do_syscall_64+0x4c/0xa0 [ 373.788097][ T7343] ? clear_bhb_loop+0x60/0xb0 [ 373.793152][ T7343] ? clear_bhb_loop+0x60/0xb0 [ 373.797992][ T7343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.804684][ T7343] RIP: 0033:0x7f74c6f9c799 [ 373.809558][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.830922][ T7343] RSP: 002b:00007f74c7dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.840751][ T7343] RAX: ffffffffffffffda RBX: 00007f74c7215fa0 RCX: 00007f74c6f9c799 [ 373.850355][ T7343] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 373.859797][ T7343] RBP: 00007f74c7dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 373.870297][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.881543][ T7343] R13: 00007f74c7216038 R14: 00007f74c7215fa0 R15: 00007ffc5c7184e8 [ 373.890822][ T7343] [ 373.933362][ T7354] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 374.277290][ T7360] netlink: 'syz.1.1006': attribute type 21 has an invalid length. [ 374.312703][ T7360] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 374.363857][ T7360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1006'. [ 374.804636][ T5681] wlan1: Trigger new scan to find an IBSS to join [ 374.946896][ T7372] device syzkaller0 entered promiscuous mode [ 376.020072][ T7394] Ÿë: port 2(veth0_to_team) entered blocking state [ 376.112936][ T7394] Ÿë: port 2(veth0_to_team) entered disabled state [ 376.127170][ T7394] device veth0_to_team entered promiscuous mode [ 376.287087][ T7401] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1017'. [ 376.617021][ T7413] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1021'. [ 376.761177][ T5681] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.844696][ T5652] wlan1: Trigger new scan to find an IBSS to join [ 377.848256][ T5674] wlan1: Trigger new scan to find an IBSS to join [ 378.301102][ T7453] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 378.337363][ T7456] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1035'. [ 378.993139][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 379.094601][ T7467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.203268][ T5187] wlan1: Creating new IBSS network, BSSID b2:86:a0:0f:47:2a [ 379.450649][ T7476] tipc: Started in network mode [ 379.484933][ T7476] tipc: Node identity 9215a268, cluster identity 4711 [ 379.561710][ T7476] tipc: Node number set to 2450891368 [ 380.254592][ T7495] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1048'. [ 380.351423][ T7498] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1049'. [ 380.534419][ T7501] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 381.427024][ T7522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1058'. [ 381.614390][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 381.681402][ T7526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.843720][ T5187] wlan1: Trigger new scan to find an IBSS to join [ 381.891976][ T7533] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1061'. [ 381.939322][ T5650] wlan1: Creating new IBSS network, BSSID 4a:83:26:c0:86:71 [ 384.449212][ T7577] netlink: 'syz.3.1077': attribute type 21 has an invalid length. [ 385.286128][ T7598] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1083'. [ 386.040868][ T7610] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 386.218254][ T7615] netlink: 'syz.1.1091': attribute type 21 has an invalid length. [ 386.262698][ T7615] netlink: 'syz.1.1091': attribute type 11 has an invalid length. [ 386.610875][ T7626] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1096'. [ 387.797305][ T7648] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 388.223997][ T7656] netlink: 'syz.3.1105': attribute type 33 has an invalid length. [ 388.282809][ T7656] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1105'. [ 388.482774][ T7656] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 388.626677][ T7656] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 388.641158][ T7667] netlink: 'syz.1.1107': attribute type 9 has an invalid length. [ 388.720792][ T7667] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1107'. [ 388.762037][ T7669] netlink: 'syz.2.1109': attribute type 13 has an invalid length. [ 388.789852][ T7669] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1109'. [ 388.910490][ T7669] syz_tun: refused to change device tx_queue_len [ 388.991279][ T7669] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 389.120242][ T7675] netlink: 'syz.2.1109': attribute type 13 has an invalid length. [ 389.238339][ T7675] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1109'. [ 389.429433][ T7675] syz_tun: refused to change device tx_queue_len [ 389.675672][ T7675] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 389.860354][ T7677] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 389.957472][ T7677] team0: Port device netdevsim0 added [ 390.894048][ T7707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1119'. [ 390.904759][ T5639] wlan1: Trigger new scan to find an IBSS to join [ 391.420803][ T7716] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1122'. [ 391.451274][ T7722] netlink: 'syz.0.1123': attribute type 29 has an invalid length. [ 391.556478][ T7722] netlink: 'syz.0.1123': attribute type 29 has an invalid length. [ 391.784512][ T7728] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 393.720282][ T7750] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1133'. [ 394.166598][ T7762] FAULT_INJECTION: forcing a failure. [ 394.166598][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 394.302406][ T7762] CPU: 0 PID: 7762 Comm: syz.0.1137 Not tainted syzkaller #0 [ 394.310133][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.320348][ T7762] Call Trace: [ 394.323671][ T7762] [ 394.326646][ T7762] dump_stack_lvl+0x188/0x24e [ 394.331402][ T7762] ? show_regs_print_info+0x12/0x12 [ 394.336837][ T7762] ? load_image+0x400/0x400 [ 394.341411][ T7762] ? __might_sleep+0xd0/0xd0 [ 394.346860][ T7762] ? __lock_acquire+0x7d10/0x7d10 [ 394.351927][ T7762] should_fail_ex+0x399/0x4d0 [ 394.356669][ T7762] should_failslab+0x5/0x20 [ 394.361497][ T7762] slab_pre_alloc_hook+0x59/0x310 [ 394.366702][ T7762] kmem_cache_alloc_node+0x5a/0x320 [ 394.372139][ T7762] ? __alloc_skb+0xfc/0x7e0 [ 394.376781][ T7762] __alloc_skb+0xfc/0x7e0 [ 394.381171][ T7762] ? netlink_autobind+0xda/0x300 [ 394.386162][ T7762] netlink_sendmsg+0x654/0xbd0 [ 394.391245][ T7762] ? netlink_getsockopt+0x550/0x550 [ 394.396951][ T7762] ? aa_sock_msg_perm+0x94/0x150 [ 394.402066][ T7762] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 394.407483][ T7762] ? security_socket_sendmsg+0x7c/0xa0 [ 394.413016][ T7762] ? netlink_getsockopt+0x550/0x550 [ 394.418259][ T7762] ____sys_sendmsg+0x5be/0x970 [ 394.423064][ T7762] ? __sys_sendmsg_sock+0x30/0x30 [ 394.428137][ T7762] ? __import_iovec+0x315/0x500 [ 394.433016][ T7762] ? import_iovec+0x6f/0xa0 [ 394.437549][ T7762] ___sys_sendmsg+0x2a2/0x360 [ 394.442266][ T7762] ? __sys_sendmsg+0x290/0x290 [ 394.447117][ T7762] __se_sys_sendmsg+0x1bb/0x2a0 [ 394.452011][ T7762] ? __x64_sys_sendmsg+0x80/0x80 [ 394.457000][ T7762] ? lockdep_hardirqs_on+0x94/0x140 [ 394.462320][ T7762] do_syscall_64+0x4c/0xa0 [ 394.466820][ T7762] ? clear_bhb_loop+0x60/0xb0 [ 394.471523][ T7762] ? clear_bhb_loop+0x60/0xb0 [ 394.476232][ T7762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.482254][ T7762] RIP: 0033:0x7f2e11d9c799 [ 394.486827][ T7762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.506984][ T7762] RSP: 002b:00007f2e12ca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.515655][ T7762] RAX: ffffffffffffffda RBX: 00007f2e12016180 RCX: 00007f2e11d9c799 [ 394.523753][ T7762] RDX: 0000000000004044 RSI: 00002000000001c0 RDI: 000000000000000a [ 394.531837][ T7762] RBP: 00007f2e12ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 394.539868][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.547880][ T7762] R13: 00007f2e12016218 R14: 00007f2e12016180 R15: 00007ffe6546b5c8 [ 394.556076][ T7762] [ 394.583088][ T7767] netlink: 'syz.4.1138': attribute type 2 has an invalid length. [ 394.590932][ T7767] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1138'. [ 394.602057][ T7769] netlink: 'syz.2.1139': attribute type 1 has an invalid length. [ 394.802689][ T5187] wlan1: Trigger new scan to find an IBSS to join [ 394.846765][ T7778] netlink: 'syz.2.1141': attribute type 25 has an invalid length. [ 394.856032][ T7778] netlink: 'syz.2.1141': attribute type 28 has an invalid length. [ 394.867677][ T7767] netlink: 'syz.4.1138': attribute type 3 has an invalid length. [ 394.918915][ T7767] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1138'. [ 395.339351][ T7788] netlink: 'syz.3.1144': attribute type 10 has an invalid length. [ 395.413494][ T7788] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1144'. [ 396.895655][ T5652] wlan1: Trigger new scan to find an IBSS to join [ 396.949416][ T5657] wlan1: Creating new IBSS network, BSSID 06:c7:79:50:d5:cc [ 397.020484][ T7798] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1147'. [ 397.756449][ T7819] sctp: [Deprecated]: syz.4.1153 (pid 7819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.756449][ T7819] Use struct sctp_sack_info instead [ 397.847591][ T7819] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 397.887710][ T7819] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1153'. [ 397.966265][ T7819] device bond0 entered promiscuous mode [ 397.976141][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.982693][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.010290][ T7819] device bond_slave_1 entered promiscuous mode [ 398.062181][ T7819] device geneve0 entered promiscuous mode [ 398.084023][ T7819] bridge0: port 3(bond0) entered blocking state [ 398.105643][ T7819] bridge0: port 3(bond0) entered disabled state [ 398.141848][ T7819] bridge0: port 3(bond0) entered blocking state [ 398.149382][ T7819] bridge0: port 3(bond0) entered forwarding state [ 398.321888][ T7829] netlink: 'syz.0.1157': attribute type 13 has an invalid length. [ 398.354605][ T7829] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1157'. [ 398.491031][ T7829] syz_tun: refused to change device tx_queue_len [ 398.536218][ T7829] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 398.599709][ T7833] netlink: 'syz.0.1157': attribute type 13 has an invalid length. [ 398.629537][ T7833] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1157'. [ 398.660948][ T7833] syz_tun: refused to change device tx_queue_len [ 398.672493][ T7833] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 398.836180][ T7834] netlink: 'syz.0.1157': attribute type 10 has an invalid length. [ 401.122654][ T5187] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.157225][ T7834] team0: Port device netdevsim0 added [ 403.048276][ C1] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.865495][ T4285] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 403.873555][ T4285] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 404.082818][ T7906] netlink: 'syz.4.1182': attribute type 29 has an invalid length. [ 404.169860][ T7906] netlink: 'syz.4.1182': attribute type 29 has an invalid length. [ 404.797267][ T7917] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 405.025370][ T7923] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 405.814364][ T7941] netlink: 'syz.1.1196': attribute type 13 has an invalid length. [ 406.989808][ T7962] netlink: 'syz.3.1205': attribute type 1 has an invalid length. [ 407.696937][ T7977] netlink: 'syz.2.1211': attribute type 13 has an invalid length. [ 407.983928][ T5652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.801840][ T8002] netlink: 'syz.4.1219': attribute type 13 has an invalid length. [ 409.059994][ T8012] netlink: 'syz.3.1223': attribute type 13 has an invalid length. [ 409.422035][ T8016] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1225'. [ 409.857082][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'. [ 409.877803][ T8022] tc_dump_action: action bad kind [ 409.889888][ T8028] netlink: 'syz.3.1231': attribute type 13 has an invalid length. [ 410.307513][ T8035] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1234'. [ 410.390317][ T8036] netlink: 'syz.2.1235': attribute type 13 has an invalid length. [ 411.828017][ T8058] netlink: 'syz.4.1243': attribute type 13 has an invalid length. [ 412.022202][ T5652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.894357][ T8073] netlink: 'syz.1.1248': attribute type 13 has an invalid length. [ 413.243750][ T8081] FAULT_INJECTION: forcing a failure. [ 413.243750][ T8081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.361396][ T8081] CPU: 1 PID: 8081 Comm: syz.4.1252 Not tainted syzkaller #0 [ 413.369420][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.380243][ T8081] Call Trace: [ 413.384212][ T8081] [ 413.387298][ T8081] dump_stack_lvl+0x188/0x24e [ 413.392074][ T8081] ? show_regs_print_info+0x12/0x12 [ 413.397653][ T8081] ? load_image+0x400/0x400 [ 413.402467][ T8081] ? __might_fault+0xa6/0x120 [ 413.407333][ T8081] should_fail_ex+0x399/0x4d0 [ 413.412271][ T8081] copyin+0x1b/0x120 [ 413.416348][ T8081] _copy_from_iter+0x559/0x1130 [ 413.421316][ T8081] ? copyout_mc+0x110/0x110 [ 413.426434][ T8081] ? __virt_addr_valid+0x188/0x540 [ 413.431908][ T8081] ? __virt_addr_valid+0x188/0x540 [ 413.437383][ T8081] ? __virt_addr_valid+0x465/0x540 [ 413.442578][ T8081] ? __check_object_size+0x500/0xa40 [ 413.448289][ T8081] skb_copy_datagram_from_iter+0xef/0x690 [ 413.454176][ T8081] ? skb_put+0x117/0x210 [ 413.458551][ T8081] packet_sendmsg+0x3727/0x4e60 [ 413.463932][ T8081] ? __might_sleep+0xd0/0xd0 [ 413.468785][ T8081] ? verify_lock_unused+0x140/0x140 [ 413.474362][ T8081] ? aa_sk_perm+0x81f/0x950 [ 413.479134][ T8081] ? packet_getsockopt+0x9a0/0x9a0 [ 413.484368][ T8081] ? aa_sock_msg_perm+0x94/0x150 [ 413.489490][ T8081] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 413.494953][ T8081] ? security_socket_sendmsg+0x7c/0xa0 [ 413.500495][ T8081] ? packet_getsockopt+0x9a0/0x9a0 [ 413.505895][ T8081] ____sys_sendmsg+0x5be/0x970 [ 413.512555][ T8081] ? __sys_sendmsg_sock+0x30/0x30 [ 413.519003][ T8081] ? __import_iovec+0x315/0x500 [ 413.525150][ T8081] ? import_iovec+0x6f/0xa0 [ 413.529810][ T8081] ___sys_sendmsg+0x2a2/0x360 [ 413.534743][ T8081] ? __sys_sendmsg+0x290/0x290 [ 413.539681][ T8081] ? __lock_acquire+0x7d10/0x7d10 [ 413.545138][ T8081] __se_sys_sendmsg+0x1bb/0x2a0 [ 413.550559][ T8081] ? __x64_sys_sendmsg+0x80/0x80 [ 413.556071][ T8081] ? lockdep_hardirqs_on+0x94/0x140 [ 413.564053][ T8081] do_syscall_64+0x4c/0xa0 [ 413.568934][ T8081] ? clear_bhb_loop+0x60/0xb0 [ 413.573911][ T8081] ? clear_bhb_loop+0x60/0xb0 [ 413.578758][ T8081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.587258][ T8081] RIP: 0033:0x7f49f7d9c799 [ 413.592135][ T8081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.614592][ T8081] RSP: 002b:00007f49f8c32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.625441][ T8081] RAX: ffffffffffffffda RBX: 00007f49f8015fa0 RCX: 00007f49f7d9c799 [ 413.633992][ T8081] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 413.645121][ T8081] RBP: 00007f49f8c32090 R08: 0000000000000000 R09: 0000000000000000 [ 413.653957][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.662348][ T8081] R13: 00007f49f8016038 R14: 00007f49f8015fa0 R15: 00007ffd7e0ee7d8 [ 413.671912][ T8081] [ 414.066952][ T8091] netlink: 'syz.2.1256': attribute type 13 has an invalid length. [ 414.955591][ T8111] netlink: 'syz.3.1264': attribute type 13 has an invalid length. [ 415.428120][ T8116] pimreg0: tun_chr_ioctl cmd 35111 [ 415.757868][ T8116] netlink: 'syz.4.1261': attribute type 2 has an invalid length. [ 415.875048][ T8116] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1261'. [ 416.019368][ T8131] netlink: 'syz.3.1270': attribute type 13 has an invalid length. [ 418.307080][ T8174] netlink: 'syz.3.1285': attribute type 13 has an invalid length. [ 419.053559][ T8181] FAULT_INJECTION: forcing a failure. [ 419.053559][ T8181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.172938][ T8181] CPU: 0 PID: 8181 Comm: syz.2.1287 Not tainted syzkaller #0 [ 419.180449][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.190697][ T8181] Call Trace: [ 419.194139][ T8181] [ 419.197147][ T8181] dump_stack_lvl+0x188/0x24e [ 419.202207][ T8181] ? show_regs_print_info+0x12/0x12 [ 419.207771][ T8181] ? load_image+0x400/0x400 [ 419.212678][ T8181] ? __lock_acquire+0x7d10/0x7d10 [ 419.217837][ T8181] ? __virt_addr_valid+0x188/0x540 [ 419.223078][ T8181] should_fail_ex+0x399/0x4d0 [ 419.228503][ T8181] _copy_from_user+0x2c/0x170 [ 419.233473][ T8181] sctp_setsockopt+0x19a/0xf90 [ 419.238360][ T8181] ? sock_common_recvmsg+0x190/0x190 [ 419.243783][ T8181] __sys_setsockopt+0x2bf/0x3d0 [ 419.249026][ T8181] __x64_sys_setsockopt+0xb1/0xc0 [ 419.254170][ T8181] do_syscall_64+0x4c/0xa0 [ 419.258689][ T8181] ? clear_bhb_loop+0x60/0xb0 [ 419.263468][ T8181] ? clear_bhb_loop+0x60/0xb0 [ 419.268451][ T8181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.274444][ T8181] RIP: 0033:0x7ff52699c799 [ 419.278994][ T8181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.298789][ T8181] RSP: 002b:00007ff527797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 419.307330][ T8181] RAX: ffffffffffffffda RBX: 00007ff526c15fa0 RCX: 00007ff52699c799 [ 419.315405][ T8181] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000005 [ 419.323651][ T8181] RBP: 00007ff527797090 R08: 0000000000000010 R09: 0000000000000000 [ 419.331791][ T8181] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.339990][ T8181] R13: 00007ff526c16038 R14: 00007ff526c15fa0 R15: 00007ffe94a9f008 [ 419.348216][ T8181] [ 420.940335][ T8208] netlink: 'syz.0.1294': attribute type 13 has an invalid length. [ 423.015197][ T8221] netlink: 'syz.3.1299': attribute type 29 has an invalid length. [ 423.065263][ T8221] netlink: 'syz.3.1299': attribute type 29 has an invalid length. [ 423.116963][ T8225] netlink: 'syz.1.1300': attribute type 13 has an invalid length. [ 424.936430][ T8242] netlink: 'syz.1.1305': attribute type 10 has an invalid length. [ 424.955027][ T8242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1305'. [ 426.042008][ T8249] netlink: 'syz.1.1308': attribute type 13 has an invalid length. [ 431.032268][ T8286] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 431.345044][ T8289] netlink: 'syz.1.1323': attribute type 13 has an invalid length. [ 435.377720][ T8314] IPv6: Can't replace route, no match found [ 435.929088][ T8318] netlink: 'syz.3.1335': attribute type 1 has an invalid length. [ 435.992946][ T8318] netlink: 'syz.3.1335': attribute type 3 has an invalid length. [ 436.000839][ T8318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1335'. [ 436.070320][ T8318] netlink: 'syz.3.1335': attribute type 21 has an invalid length. [ 436.103532][ T8318] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1335'. [ 436.326495][ T8324] netlink: 'syz.1.1337': attribute type 13 has an invalid length. [ 437.900868][ T8338] netlink: 'syz.3.1343': attribute type 27 has an invalid length. [ 437.951703][ T8338] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1343'. [ 438.415066][ T8345] netlink: 'syz.0.1344': attribute type 13 has an invalid length. [ 439.216319][ T5674] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.409919][ T8357] netlink: 'syz.0.1350': attribute type 13 has an invalid length. [ 445.842191][ T8396] netlink: 'syz.2.1362': attribute type 29 has an invalid length. [ 445.983855][ T8396] netlink: 'syz.2.1362': attribute type 29 has an invalid length. [ 446.038365][ T8400] netlink: 'syz.2.1362': attribute type 29 has an invalid length. [ 447.820938][ T8419] netlink: 'syz.3.1373': attribute type 13 has an invalid length. [ 448.498489][ T8430] FAULT_INJECTION: forcing a failure. [ 448.498489][ T8430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.572728][ T8430] CPU: 0 PID: 8430 Comm: syz.0.1378 Not tainted syzkaller #0 [ 448.580188][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.590303][ T8430] Call Trace: [ 448.593650][ T8430] [ 448.596639][ T8430] dump_stack_lvl+0x188/0x24e [ 448.601540][ T8430] ? show_regs_print_info+0x12/0x12 [ 448.606807][ T8430] ? load_image+0x400/0x400 [ 448.611462][ T8430] ? __lock_acquire+0x7d10/0x7d10 [ 448.616566][ T8430] should_fail_ex+0x399/0x4d0 [ 448.621400][ T8430] _copy_to_user+0x2c/0x130 [ 448.625983][ T8430] bpf_test_finish+0x202/0x600 [ 448.630898][ T8430] ? convert___skb_to_skb+0x580/0x580 [ 448.636337][ T8430] ? convert_skb_to___skb+0x420/0x420 [ 448.641817][ T8430] ? __build_skb+0x257/0x3c0 [ 448.646497][ T8430] bpf_prog_test_run_skb+0xc99/0x12a0 [ 448.651970][ T8430] ? cpu_online+0xa0/0xa0 [ 448.656537][ T8430] bpf_prog_test_run+0x31e/0x390 [ 448.661536][ T8430] __sys_bpf+0x62b/0x780 [ 448.665852][ T8430] ? bpf_link_show_fdinfo+0x380/0x380 [ 448.671474][ T8430] ? lock_chain_count+0x20/0x20 [ 448.676490][ T8430] __x64_sys_bpf+0x78/0x90 [ 448.680982][ T8430] do_syscall_64+0x4c/0xa0 [ 448.685457][ T8430] ? clear_bhb_loop+0x60/0xb0 [ 448.690195][ T8430] ? clear_bhb_loop+0x60/0xb0 [ 448.694934][ T8430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.700898][ T8430] RIP: 0033:0x7f2e11d9c799 [ 448.705459][ T8430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.725139][ T8430] RSP: 002b:00007f2e12ce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.733624][ T8430] RAX: ffffffffffffffda RBX: 00007f2e12015fa0 RCX: 00007f2e11d9c799 [ 448.741864][ T8430] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 448.749899][ T8430] RBP: 00007f2e12ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 448.758070][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.766277][ T8430] R13: 00007f2e12016038 R14: 00007f2e12015fa0 R15: 00007ffe6546b5c8 [ 448.774402][ T8430] [ 448.911582][ T8425] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 449.198498][ T8439] netlink: 'syz.3.1381': attribute type 6 has an invalid length. [ 449.217529][ T8439] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1381'. [ 449.337081][ T8425] team0 (unregistering): Port device team_slave_0 removed [ 449.450990][ T8425] team0 (unregistering): Port device team_slave_1 removed [ 449.521634][ T8425] team0 (unregistering): Port device wlan1 removed [ 449.636846][ T8425] team0 (unregistering): Port device geneve1 removed [ 449.719932][ T8425] team0 (unregistering): Port device netdevsim0 removed [ 449.774044][ T8437] netlink: 'syz.4.1379': attribute type 13 has an invalid length. [ 449.787935][ T8437] : renamed from team_slave_0 [ 450.179398][ T8460] netlink: 'syz.3.1388': attribute type 13 has an invalid length. [ 450.603758][ T8471] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.1393'. [ 450.690066][ T8475] netlink: 'syz.4.1396': attribute type 13 has an invalid length. [ 452.461486][ T8502] netlink: 'syz.3.1404': attribute type 13 has an invalid length. [ 452.964175][ T8505] device syzkaller0 entered promiscuous mode [ 459.443906][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.474308][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 478.562755][ T4315] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2675 jiffies s: 12053 root: 0x2/. [ 478.594758][ T4315] rcu: blocking rcu_node structures (internal RCU debug): [ 478.602078][ T4315] Sending NMI from CPU 0 to CPUs 1: [ 478.607401][ C1] NMI backtrace for cpu 1 [ 478.607411][ C1] CPU: 1 PID: 8487 Comm: syz.1.1399 Not tainted syzkaller #0 [ 478.607429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.607439][ C1] RIP: 0010:__lock_acquire+0x8/0x7d10 [ 478.607477][ C1] Code: ff ff ff 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 7c 93 48 8b 3c 24 e8 f8 1b 6f 00 eb 88 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 e4 e0 48 81 ec 20 02 00 00 45 89 cf 45 89 c5 [ 478.607492][ C1] RSP: 0018:ffffc900001e0460 EFLAGS: 00000046 [ 478.607508][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 478.607518][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cb2d6e0 [ 478.607530][ C1] RBP: ffffc900001e0470 R08: 0000000000000000 R09: 0000000000000001 [ 478.607541][ C1] R10: dffffc0000000000 R11: fffffbfff1c3faee R12: 0000000000000001 [ 478.607553][ C1] R13: 1ffff9200003c0a0 R14: 0000000000000046 R15: dffffc0000000000 [ 478.607565][ C1] FS: 00007f74c7dc26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 478.607581][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.607593][ C1] CR2: 00007ff527775ff8 CR3: 000000007b29d000 CR4: 00000000003506e0 [ 478.607608][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.607619][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 478.607630][ C1] Call Trace: [ 478.607637][ C1] [ 478.607645][ C1] lock_acquire+0x1bb/0x4a0 [ 478.607668][ C1] ? __virt_addr_valid+0x188/0x540 [ 478.607697][ C1] ? read_lock_is_recursive+0x10/0x10 [ 478.607721][ C1] ? verify_lock_unused+0x140/0x140 [ 478.607745][ C1] ? llist_add_batch+0x12b/0x180 [ 478.607764][ C1] ? find_next_clump8+0x1a0/0x1a0 [ 478.607782][ C1] ? __virt_addr_valid+0x188/0x540 [ 478.607805][ C1] __virt_addr_valid+0x1a5/0x540 [ 478.607828][ C1] ? __virt_addr_valid+0x188/0x540 [ 478.607852][ C1] kasan_addr_to_slab+0x9/0xc0 [ 478.607876][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 478.607892][ C1] irq_work_queue_on+0x10f/0x260 [ 478.607920][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 478.607941][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 478.607959][ C1] ? __cant_sleep+0x220/0x220 [ 478.607978][ C1] __rcu_read_unlock+0x78/0xd0 [ 478.607993][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 478.608017][ C1] trace_call_bpf+0x5bb/0x6b0 [ 478.608040][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 478.608066][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 478.608092][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 478.608107][ C1] ? sched_clock_cpu+0x6e/0x260 [ 478.608130][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 478.608159][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 478.608184][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 478.608205][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 478.608231][ C1] ? __irq_exit_rcu+0x147/0x230 [ 478.608258][ C1] ? irq_exit_rcu+0x20/0x20 [ 478.608275][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 478.608296][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 478.608321][ C1] trace_hardirqs_on+0x24/0x40 [ 478.608342][ C1] asm_sysvec_irq_work+0x16/0x20 [ 478.608363][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 478.608381][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 478.608395][ C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206 [ 478.608409][ C1] RAX: 1fee59bd33ea0600 RBX: 1ffff9200003c160 RCX: 1fee59bd33ea0600 [ 478.608422][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 478.608435][ C1] RBP: ffffc900001e0bb0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 478.608448][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 478.608523][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 478.608543][ C1] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 478.608564][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 478.608586][ C1] __rcu_read_unlock+0x78/0xd0 [ 478.608601][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 478.608627][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 478.608645][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 478.608672][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 478.608700][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 478.608724][ C1] ? hw_scan_work+0xf50/0xf50 [ 478.608752][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 478.608771][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 478.608797][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 478.608823][ C1] handle_softirqs+0x2a1/0x930 [ 478.608842][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 478.608860][ C1] ? do_softirq+0x210/0x210 [ 478.608878][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 478.608896][ C1] __irq_exit_rcu+0x13b/0x230 [ 478.608912][ C1] ? irq_exit_rcu+0x20/0x20 [ 478.608932][ C1] irq_exit_rcu+0x5/0x20 [ 478.608946][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 478.608965][ C1] [ 478.608970][ C1] [ 478.608975][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 478.608997][ C1] RIP: 0010:unwind_next_frame+0x6dd/0x20b0 [ 478.609018][ C1] Code: 00 00 44 89 f9 80 e1 07 38 c1 0f 8c 75 02 00 00 be 02 00 00 00 49 89 d6 4c 89 ff e8 bd 3e 9a 00 e9 3b 18 00 00 48 8b 44 24 50 <42> 80 3c 28 00 4c 8b 74 24 58 74 08 4c 89 f7 e8 df 3d 9a 00 49 8b [ 478.609032][ C1] RSP: 0018:ffffc9000c57f210 EFLAGS: 00000297 [ 478.609046][ C1] RAX: 1ffff920018afe64 RBX: ffffc9000c57f2e8 RCX: ffffffff8e362c0c [ 478.609059][ C1] RDX: ffffffff8ea92e88 RSI: ffffffff8e362c04 RDI: ffffffff8139198f [ 478.609072][ C1] RBP: ffffffff8ea92e8c R08: 000000000000000d R09: 0000000000000001 [ 478.609083][ C1] R10: dffffc0000000000 R11: fffff520018afe69 R12: ffffffff8ea92e88 [ 478.609096][ C1] R13: dffffc0000000000 R14: ffffffff8e362c08 R15: 0000000000000005 [ 478.609112][ C1] ? unwind_next_frame+0xaf/0x20b0 [ 478.609137][ C1] ? get_page_from_freelist+0x1a1e/0x1ab0 [ 478.609165][ C1] ? stack_trace_save+0xf0/0xf0 [ 478.609191][ C1] arch_stack_walk+0x10c/0x140 [ 478.609214][ C1] ? get_page_from_freelist+0x1a1e/0x1ab0 [ 478.609241][ C1] stack_trace_save+0xa6/0xf0 [ 478.609263][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 478.609289][ C1] save_stack+0x121/0x230 [ 478.609308][ C1] ? __reset_page_owner+0x1a0/0x1a0 [ 478.609325][ C1] ? seqcount_lockdep_reader_access+0x144/0x190 [ 478.609342][ C1] ? post_alloc_hook+0x173/0x1a0 [ 478.609365][ C1] ? get_page_from_freelist+0x1a1e/0x1ab0 [ 478.609395][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 478.609421][ C1] __set_page_owner+0x19/0x60 [ 478.609440][ C1] post_alloc_hook+0x173/0x1a0 [ 478.609469][ C1] get_page_from_freelist+0x1a1e/0x1ab0 [ 478.609503][ C1] ? __next_zones_zonelist+0x99/0x120 [ 478.609526][ C1] __alloc_pages+0x1ec/0x4f0 [ 478.609551][ C1] ? zone_statistics+0x170/0x170 [ 478.609582][ C1] __alloc_pages_bulk+0x49a/0x920 [ 478.609611][ C1] ? __vmalloc_node_range+0x584/0x13b0 [ 478.609631][ C1] ? __kmalloc_node+0xe1/0x240 [ 478.609659][ C1] __vmalloc_node_range+0x70f/0x13b0 [ 478.609689][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 478.609708][ C1] ? free_vm_area+0x50/0x50 [ 478.609727][ C1] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 478.609757][ C1] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 478.609782][ C1] __vmalloc+0x76/0x80 [ 478.609801][ C1] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 478.609827][ C1] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 478.609853][ C1] ? bpf_lsm_capable+0x5/0x10 [ 478.609873][ C1] ? security_capable+0x85/0xb0 [ 478.609893][ C1] bpf_prog_alloc+0x1c/0x1b0 [ 478.609919][ C1] bpf_prog_load+0x7c9/0x1560 [ 478.609948][ C1] ? map_freeze+0x390/0x390 [ 478.609971][ C1] ? __might_fault+0xa6/0x120 [ 478.609993][ C1] ? __might_fault+0xa6/0x120 [ 478.610010][ C1] ? __might_fault+0xc2/0x120 [ 478.610025][ C1] ? __might_fault+0xa6/0x120 [ 478.610042][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 478.610060][ C1] ? security_bpf+0x7a/0xa0 [ 478.610077][ C1] __sys_bpf+0x5b8/0x780 [ 478.610100][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 478.610127][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 478.610157][ C1] ? lock_chain_count+0x20/0x20 [ 478.610184][ C1] __x64_sys_bpf+0x78/0x90 [ 478.610207][ C1] do_syscall_64+0x4c/0xa0 [ 478.610230][ C1] ? clear_bhb_loop+0x60/0xb0 [ 478.610250][ C1] ? clear_bhb_loop+0x60/0xb0 [ 478.610272][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.610292][ C1] RIP: 0033:0x7f74c6f9c799 [ 478.610306][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.610320][ C1] RSP: 002b:00007f74c7dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.610337][ C1] RAX: ffffffffffffffda RBX: 00007f74c7215fa0 RCX: 00007f74c6f9c799 [ 478.610349][ C1] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 478.610360][ C1] RBP: 00007f74c7032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 478.610370][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.610380][ C1] R13: 00007f74c7216038 R14: 00007f74c7215fa0 R15: 00007ffc5c7184e8 [ 478.610399][ C1]