last executing test programs: 6.220030183s ago: executing program 3 (id=6501): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x541b, &(0x7f00000013c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cabe9cb37abbe40a00864eab7749efbc33"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703025701f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1, &(0x7f0000000500)=""/166, 0xa6}, 0x10020) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, &(0x7f0000000000)=r4, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46000000000000000686", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 5.508902915s ago: executing program 2 (id=6508): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d04, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc00e6d782b7af4e76e00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0xa5}], 0x1}, 0xff0f000020000080) 5.438788932s ago: executing program 3 (id=6509): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 5.213987631s ago: executing program 2 (id=6510): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e70"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 5.09599866s ago: executing program 1 (id=6511): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) getpid() socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d8000000140081044e81f782db44b9040211080220000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8080) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x4, 0x4, 0x0, 0x80, 0x0, 0x5d31, 0x2008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x100e64, 0xc78, 0x0, 0xd, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff}, 0x0, 0x3, r1, 0x6e2d0a79d958467f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0, @ANYRESHEX=r5], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) perf_event_open$cgroup(0x0, r7, 0x4, r3, 0xd0bf16ed38f7b2fd) close(r7) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$TUNGETVNETLE(r7, 0x800454dd, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 4.972128998s ago: executing program 4 (id=6513): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, 0x0, 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300"/43], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x8080) socket$kcm(0x10, 0x2, 0x0) 4.528117797s ago: executing program 0 (id=6514): socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f00000000c0), 0x42) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8920, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x101239, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xffc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185f"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x10000002, 0x0, 0xb, 0xc}], 0x10, 0x800}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff0000"], 0x0}, 0x94) 4.259955369s ago: executing program 3 (id=6515): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="3504000040000511d25a80648c63940d0324fc60040035400c0402000200002037153e370c04018087ca10004500", 0x2e}, {&(0x7f0000000580)="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", 0x407}], 0x2}, 0x48) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000700000069117e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x0, 0x4a, 0xfd9, 0x40, 0xffffffffffffffff, 0x9, '\x00', r6, r2, 0x4, 0x1, 0x5}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.221956772s ago: executing program 1 (id=6516): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_0\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xab, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x46, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000003b000400760000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x100, 0x40, '\x00', r2, @fallback=0x2f, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10a200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x3, 0x4, 0x8, 0x0, 0x4, 0xa02ba79b55f5b37c, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x80, 0xf, 0x7, 0x0, 0x8000000000000000, 0x9, 0xff, 0x0, 0x101, 0x0, 0x4}, r1, 0x2, r3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1f, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b78500000083000000bf09920000000000005509010000000000950000000000000018590000100000000000000000000000185000000c00000000000000000000009500000000000000850000006700000e7141756b18cf24166214c08b0085100000ffffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000085000000d2000000bf91000000000000b7020000000000008500000084000000b7000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0xed, &(0x7f0000000280)=""/237, 0x41100, 0x5c, '\x00', r0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x5, 0x401}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x4, 0x5, 0x3, 0xb}, {0x4, 0x5, 0x4, 0x8}, {0x2, 0x5, 0xa, 0x8}], 0x10, 0x4}, 0x94) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061110c10000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xdb0a907) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000001200001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x10, 0x2, 0x0) 4.04204535s ago: executing program 2 (id=6519): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xab, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)=[0x0], &(0x7f0000000140), 0x0, 0x46, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000003b000400760000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x100, 0x40, '\x00', r1, @fallback=0x2f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10a200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x3, 0x4, 0x8, 0x0, 0x4, 0xa02ba79b55f5b37c, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x80, 0xf, 0x7, 0x0, 0x8000000000000000, 0x9, 0xff, 0x0, 0x101, 0x0, 0x4}, r0, 0x2, r2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8", 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061110c10000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xdb0a907) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x10, 0x2, 0x0) 3.943608582s ago: executing program 1 (id=6520): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110cd00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.776014532s ago: executing program 0 (id=6521): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xab, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)=[0x0], &(0x7f0000000140), 0x0, 0x46, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000003b000400760000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x100, 0x40, '\x00', r2, @fallback=0x2f, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10a200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x3, 0x4, 0x8, 0x0, 0x4, 0xa02ba79b55f5b37c, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x80, 0xf, 0x7, 0x0, 0x8000000000000000, 0x9, 0xff, 0x0, 0x101, 0x0, 0x4}, r1, 0x2, r3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1f, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b78500000083000000bf09920000000000005509010000000000950000000000000018590000100000000000000000000000185000000c00000000000000000000009500000000000000850000006700000e7141756b18cf24166214c08b0085100000ffffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000085000000d2000000bf91000000000000b7020000000000008500000084000000b7000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0xed, &(0x7f0000000280)=""/237, 0x41100, 0x5c, '\x00', r0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x5, 0x401}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x4, 0x5, 0x3, 0xb}, {0x4, 0x5, 0x4, 0x8}, {0x2, 0x5, 0xa, 0x8}], 0x10, 0x4}, 0x94) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061110c10000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xdb0a907) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x10, 0x2, 0x0) 3.176962494s ago: executing program 1 (id=6522): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x4, 0xc272}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18640000004b64ffec850000007d000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000040)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af9ff00000000bfa100000000000007010000f8ffffff20c72ef7eecfb52b007200000095e8eb891ea4bce91ab9eabee5314bf1cb969fa78cd05c2570da422309efa8aeb0395dab17e481cddd41a7dad026f80f4d0472bb4ef4f18ab5b021f6430318ff7f420d8629ff9898f46c426bea80af78aa7f7eeda9703be381a14845e731021d0f6d322314794d2b8bbd6a4ed2004a3a22fdd0477104cbe6677a9fb9b48b924fb553b7eb8b429923"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000efff00000400000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000280), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x438783, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="0996cc807f0b5acf0d63e41f575335bdeb898b82dfddd44ef973a7721f21a0539ef153c82d306bc3173451bb1a971bf737f4cfbb23574c81311a121d389ce65ce6baaec04b5cc862119147e0f12a4c8222f7676e4c024cc17d88037b095245de", 0x60}, {&(0x7f00000002c0)}], 0x2, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x2d8}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x1000000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000078009106000000000000004a0775bf3144"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd", 0x1a}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504040019000000000035400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x30049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) 3.10461655s ago: executing program 4 (id=6523): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/235, 0xeb}, {0x0}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300"/43], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x8080) socket$kcm(0x10, 0x2, 0x0) 2.907074235s ago: executing program 2 (id=6524): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x541b, &(0x7f00000013c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cabe9cb37abbe40a00864eab7749efbc3330ec"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703025701f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1, &(0x7f0000000500)=""/166, 0xa6}, 0x10020) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, &(0x7f0000000000)=r4, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46000000000000000686", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 2.54716613s ago: executing program 0 (id=6525): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2.362223077s ago: executing program 3 (id=6526): socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f00000000c0), 0x42) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8920, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x101239, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xffc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185f000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x10000002, 0x0, 0xb, 0xc}], 0x10, 0x800}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff0000"], 0x0}, 0x94) 2.296440195s ago: executing program 4 (id=6527): socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f00000000c0), 0x42) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8920, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x101239, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xffc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185f000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x10000002, 0x0, 0xb, 0xc}], 0x10, 0x800}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff0000"], 0x0}, 0x94) 1.839930602s ago: executing program 1 (id=6528): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000340), 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300"/43], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x8080) socket$kcm(0x10, 0x2, 0x0) 1.732588853s ago: executing program 3 (id=6529): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/235, 0xeb}, {0x0}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300"/43], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x8080) socket$kcm(0x10, 0x2, 0x0) 1.702085207s ago: executing program 4 (id=6530): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c02000a040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e12050021", 0x2b}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16, @ANYRESHEX=r6], 0xfe33) 1.503329152s ago: executing program 2 (id=6531): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.209816548s ago: executing program 0 (id=6532): socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f00000000c0), 0x42) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8920, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x101239, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xffc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185f0000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x10000002, 0x0, 0xb, 0xc}], 0x10, 0x800}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff0000"], 0x0}, 0x94) 991.878539ms ago: executing program 2 (id=6533): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xab, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x46, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000003b000400760000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x100, 0x40, '\x00', r2, @fallback=0x2f, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10a200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x3, 0x4, 0x8, 0x0, 0x4, 0xa02ba79b55f5b37c, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x80, 0xf, 0x7, 0x0, 0x8000000000000000, 0x9, 0xff, 0x0, 0x101, 0x0, 0x4}, r1, 0x2, r3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1f, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b78500000083000000bf09920000000000005509010000000000950000000000000018590000100000000000000000000000185000000c00000000000000000000009500000000000000850000006700000e7141756b18cf24166214c08b0085100000ffffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000085000000d2000000bf91000000000000b7020000000000008500000084000000b7000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0xed, &(0x7f0000000280)=""/237, 0x41100, 0x5c, '\x00', r0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x5, 0x401}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x4, 0x5, 0x3, 0xb}, {0x4, 0x5, 0x4, 0x8}, {0x2, 0x5, 0xa, 0x8}], 0x10, 0x4}, 0x94) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061110c10000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xdb0a907) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000001200001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x10, 0x2, 0x0) 846.767803ms ago: executing program 4 (id=6534): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110cd00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 794.653694ms ago: executing program 0 (id=6535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18f0000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d40)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d63f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef441792b8deacf5a43cf699b0d2314908aa79a0d8e64e396865463db4dc070e2e7d7298ce48805761fd32b37419c35d5369e01633a27e0e84d78ca4143942bb15afd7c35adcc51a591e45480f0298721487f5939cd97db46a2f3cfaec5a40d1001b2f26b18f654b7e0cac23647", 0xd8}], 0x1}, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00599c6d0e000091d028ef80"], 0xfe33) 777.023721ms ago: executing program 1 (id=6536): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x541b, &(0x7f00000013c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cabe9cb37abbe40a00864eab7749efbc33"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703025701f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1, &(0x7f0000000500)=""/166, 0xa6}, 0x10020) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, &(0x7f0000000000)=r4, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46000000000000000686", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 0s ago: executing program 3 (id=6537): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/235, 0xeb}, {0x0}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300"/43], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x8080) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): B active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22852kB local_pcp:10560kB free_cma:0kB [ 1614.657589][T24425] lowmem_reserve[]: 0 0 0 0 0 [ 1614.662587][T24425] Node 0 DMA: 0*4kB 0*8kB [ 1614.671895][T24448] IPv6: Can't replace route, no match found [ 1614.687770][T24425] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1614.715631][T24454] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1614.756439][T24425] Node 0 DMA32: 506*4kB (U) 2357*8kB (UME) 2235*16kB (UM) 1401*32kB (UME) 922*64kB (UM) 607*128kB (UM) 420*256kB (UME) 181*512kB (UME) 107*1024kB (UME) 33*2048kB (UME) 167*4096kB (UM) = 1299552kB [ 1614.832514][T24425] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1614.858206][T24461] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5702'. [ 1614.881134][T24425] Node 1 Normal: 254*4kB (UE) 20*8kB (UME) 30*16kB (UE) 27*32kB (UME) 24*64kB (UME) 6*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895768kB [ 1614.939117][T24425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1614.956923][T24425] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1614.989537][T24425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1615.020095][T24425] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1615.074123][T24425] 63949 total pagecache pages [ 1615.090125][T24425] 0 pages in swap cache [ 1615.101385][T24425] Free swap = 124996kB [ 1615.111565][T24425] Total swap = 124996kB [ 1615.138647][T24425] 2097051 pages RAM [ 1615.145048][T24425] 0 pages HighMem/MovableOnly [ 1615.162333][T24425] 415206 pages reserved [ 1615.167255][T24425] 0 pages cma reserved [ 1615.480591][T24473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5708'. [ 1615.547979][T24473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5708'. [ 1615.596431][T24477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5708'. [ 1616.360866][T24483] IPv6: Can't replace route, no match found [ 1616.412031][T24489] netlink: 'syz.1.5712': attribute type 10 has an invalid length. [ 1616.767942][T24502] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5717'. [ 1616.896250][T24495] IPv6: Can't replace route, no match found [ 1616.936206][T24510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5720'. [ 1616.955017][T24495] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1616.987806][T24510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5720'. [ 1617.609780][T24530] netlink: 'syz.2.5726': attribute type 10 has an invalid length. [ 1617.876192][T24532] IPv6: Can't replace route, no match found [ 1618.697396][T24553] __nla_validate_parse: 4 callbacks suppressed [ 1618.697415][T24553] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5735'. [ 1618.896720][T24557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1618.916915][T24557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1618.943517][T24557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1619.171414][T24567] netlink: 'syz.0.5739': attribute type 10 has an invalid length. [ 1619.752172][T24581] IPv6: Can't replace route, no match found [ 1620.031542][T24593] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5746'. [ 1620.054904][T24593] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5746'. [ 1620.077668][T24593] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5746'. [ 1620.098587][T24588] IPv6: Can't replace route, no match found [ 1620.487426][T24605] netlink: 'syz.4.5752': attribute type 10 has an invalid length. [ 1620.732491][T24612] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5755'. [ 1621.177298][T24626] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5759'. [ 1621.212451][T24619] IPv6: Can't replace route, no match found [ 1621.240418][T24626] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5759'. [ 1621.979200][T24653] netlink: 'syz.3.5767': attribute type 10 has an invalid length. [ 1623.142429][T24673] IPv6: Can't replace route, no match found [ 1626.052232][T24681] __nla_validate_parse: 8 callbacks suppressed [ 1626.052252][T24681] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5776'. [ 1626.413767][T24693] netlink: 'syz.1.5780': attribute type 10 has an invalid length. [ 1626.731391][T24702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5784'. [ 1626.747859][T24702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5784'. [ 1626.761922][T24702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5784'. [ 1627.214431][T24708] IPv6: Can't replace route, no match found [ 1627.758984][T24717] IPv6: Can't replace route, no match found [ 1628.005392][T24726] netlink: 'syz.1.5792': attribute type 10 has an invalid length. [ 1628.489775][T24743] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5798'. [ 1628.920876][T24752] IPv6: Can't replace route, no match found [ 1628.946070][T24752] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1629.202387][T24762] netlink: 'syz.3.5805': attribute type 10 has an invalid length. [ 1629.360580][T24768] netlink: 'syz.1.5807': attribute type 21 has an invalid length. [ 1629.380815][T24768] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5807'. [ 1629.390654][T24768] netlink: 'syz.1.5807': attribute type 4 has an invalid length. [ 1629.465884][T24771] netlink: 6409 bytes leftover after parsing attributes in process `syz.1.5807'. [ 1630.355789][T24789] IPv6: Can't replace route, no match found [ 1630.397886][T24789] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1630.887278][T24804] netlink: 'syz.4.5819': attribute type 10 has an invalid length. [ 1631.194780][T24812] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5821'. [ 1631.537943][T24820] netlink: 'syz.2.5824': attribute type 21 has an invalid length. [ 1631.575205][T24820] netlink: 'syz.2.5824': attribute type 3 has an invalid length. [ 1631.615617][T24820] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5824'. [ 1632.433210][T24846] netlink: 'syz.4.5831': attribute type 10 has an invalid length. [ 1633.031633][T24858] netlink: 'syz.0.5835': attribute type 46 has an invalid length. [ 1633.070652][T24858] netlink: 'syz.0.5835': attribute type 46 has an invalid length. [ 1634.114064][T24876] netlink: 'syz.3.5842': attribute type 10 has an invalid length. [ 1634.823624][T24895] netlink: 'syz.2.5847': attribute type 1 has an invalid length. [ 1634.853377][T24895] netlink: 'syz.2.5847': attribute type 3 has an invalid length. [ 1634.885157][T24895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5847'. [ 1635.208854][T24908] IPv6: Can't replace route, no match found [ 1635.251878][T24908] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1635.404810][T24915] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5852'. [ 1635.550387][T24913] IPv6: Can't replace route, no match found [ 1635.571125][T24913] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1635.620112][T24921] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5854'. [ 1635.681328][T24921] netlink: zone id is out of range [ 1635.694100][T24923] netlink: 'syz.0.5855': attribute type 10 has an invalid length. [ 1635.709212][T24921] netlink: zone id is out of range [ 1635.735763][T24921] netlink: zone id is out of range [ 1635.742572][T24921] netlink: zone id is out of range [ 1635.752840][T24921] netlink: zone id is out of range [ 1635.758219][T24921] netlink: zone id is out of range [ 1635.801144][T24921] netlink: zone id is out of range [ 1635.812453][T24921] netlink: zone id is out of range [ 1635.820365][T24921] netlink: zone id is out of range [ 1635.835105][T24921] netlink: zone id is out of range [ 1636.888988][T24936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1636.900856][T24936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1636.910541][T24936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1636.924370][T24936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1636.931971][T24936] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1636.940470][T24936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1637.211346][T24942] netlink: 'syz.2.5860': attribute type 10 has an invalid length. [ 1637.379053][T24942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.450207][T24942] bond0: (slave team0): Enslaving as an active interface with an up link [ 1638.034346][T20927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.082253][T24968] netlink: 'syz.2.5867': attribute type 10 has an invalid length. [ 1638.109543][T24934] chnl_net:caif_netlink_parms(): no params data found [ 1638.198964][T20927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.497523][T20927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.697767][T20927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.880100][T24934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.929959][T24934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.950849][T24934] device bridge_slave_0 entered promiscuous mode [ 1639.012828][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 1639.044486][T24934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.055302][T24934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.108161][T24934] device bridge_slave_1 entered promiscuous mode [ 1639.171042][T24998] IPv6: Can't replace route, no match found [ 1639.214714][T25001] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1639.340291][T24934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.415563][T24934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.464834][T20927] device 0 left promiscuous mode [ 1639.611743][T24934] team0: Port device team_slave_0 added [ 1639.667175][T24934] team0: Port device team_slave_1 added [ 1639.746930][T24934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.768784][T24934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.843845][T24934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.871671][T24934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.881927][T24934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.910889][T24934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.959567][T25017] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5880'. [ 1640.182462][T25028] netlink: 'syz.3.5881': attribute type 10 has an invalid length. [ 1640.472154][T24934] device hsr_slave_0 entered promiscuous mode [ 1640.487265][T24934] device hsr_slave_1 entered promiscuous mode [ 1640.509640][T24934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1640.526255][T24934] Cannot create hsr debugfs directory [ 1641.092796][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 1641.415334][T25057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5888'. [ 1641.477647][T25057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5888'. [ 1641.636193][T25060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5888'. [ 1641.793018][T25057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5888'. [ 1642.260175][T25068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1642.338821][T25070] netlink: 'syz.1.5892': attribute type 10 has an invalid length. [ 1642.378718][T25068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1642.422255][T25071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1642.922131][T25079] IPv6: Can't replace route, no match found [ 1642.972815][T25092] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5897'. [ 1642.996342][T20927] device hsr_slave_0 left promiscuous mode [ 1643.074829][T20927] device hsr_slave_1 left promiscuous mode [ 1643.091992][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.120207][T20927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.138276][T20927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.169865][T20927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.177602][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 1643.202510][T20927] device bridge_slave_1 left promiscuous mode [ 1643.234097][T20927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.251205][T20927] device bridge_slave_0 left promiscuous mode [ 1643.295334][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.393957][T20927] device veth1_macvtap left promiscuous mode [ 1643.410249][T20927] device veth0_macvtap left promiscuous mode [ 1643.433854][T20927] device veth1_vlan left promiscuous mode [ 1643.444522][T20927] device veth0_vlan left promiscuous mode [ 1643.624738][T25102] delete_channel: no stack [ 1643.643415][T25102] delete_channel: no stack [ 1644.550963][T20927] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1645.272448][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 1645.590354][T20927] team0 (unregistering): Port device team_slave_1 removed [ 1645.664326][T20927] team0 (unregistering): Port device team_slave_0 removed [ 1645.761194][T20927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.835693][T20927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.149259][T20927] bond0 (unregistering): Released all slaves [ 1646.258625][T25088] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1646.286980][T25122] netlink: 'syz.1.5903': attribute type 10 has an invalid length. [ 1646.319870][T25122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.364107][T25122] bond0: (slave team0): Enslaving as an active interface with an up link [ 1646.437761][T25127] netlink: 'syz.2.5904': attribute type 10 has an invalid length. [ 1646.505634][T25130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5905'. [ 1646.557863][T25130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5905'. [ 1646.629115][T25132] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5905'. [ 1646.798233][T24934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1646.886794][T24934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1646.979351][T24934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1647.033139][T24934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1647.463251][T24934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.546709][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1647.575325][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1647.651735][T24934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.668879][T25158] FAULT_INJECTION: forcing a failure. [ 1647.668879][T25158] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.718211][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1647.726830][T25158] CPU: 1 PID: 25158 Comm: syz.3.5913 Not tainted syzkaller #0 [ 1647.726860][T25158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1647.726873][T25158] Call Trace: [ 1647.726881][T25158] [ 1647.726890][T25158] dump_stack_lvl+0x188/0x24e [ 1647.726930][T25158] ? show_regs_print_info+0x12/0x12 [ 1647.726963][T25158] ? load_image+0x400/0x400 [ 1647.726990][T25158] ? __might_sleep+0xd0/0xd0 [ 1647.727013][T25158] ? __lock_acquire+0x7d10/0x7d10 [ 1647.766271][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1647.769970][T25158] should_fail_ex+0x399/0x4d0 [ 1647.770006][T25158] should_failslab+0x5/0x20 [ 1647.792325][T25158] slab_pre_alloc_hook+0x59/0x310 [ 1647.797419][T25158] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1647.803121][T25158] __kmem_cache_alloc_node+0x4f/0x260 [ 1647.808646][T25158] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1647.814343][T25158] __kmalloc+0xa0/0x240 [ 1647.818567][T25158] bpf_prog_test_run_skb+0x234/0x12a0 [ 1647.824001][T25158] ? lockdep_hardirqs_on+0x94/0x140 [ 1647.825853][T20927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.829238][T25158] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1647.836697][T20927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.842463][T25158] ? cpu_online+0xa0/0xa0 [ 1647.854093][T25158] bpf_prog_test_run+0x31e/0x390 [ 1647.859105][T25158] __sys_bpf+0x62b/0x780 [ 1647.863413][T25158] ? bpf_link_show_fdinfo+0x380/0x380 [ 1647.868866][T25158] ? lock_chain_count+0x20/0x20 [ 1647.873756][T25158] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1647.879786][T25158] __x64_sys_bpf+0x78/0x90 [ 1647.884243][T25158] do_syscall_64+0x4c/0xa0 [ 1647.888694][T25158] ? clear_bhb_loop+0x60/0xb0 [ 1647.893402][T25158] ? clear_bhb_loop+0x60/0xb0 [ 1647.898119][T25158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1647.904042][T25158] RIP: 0033:0x7f08d899c799 [ 1647.908486][T25158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1647.928148][T25158] RSP: 002b:00007f08d9800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1647.936598][T25158] RAX: ffffffffffffffda RBX: 00007f08d8c15fa0 RCX: 00007f08d899c799 [ 1647.944694][T25158] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1647.952688][T25158] RBP: 00007f08d9800090 R08: 0000000000000000 R09: 0000000000000000 [ 1647.960688][T25158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1647.968682][T25158] R13: 00007f08d8c16038 R14: 00007f08d8c15fa0 R15: 00007fff23e9ffd8 [ 1647.976694][T25158] [ 1648.008965][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1648.035438][T25163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1648.068880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1648.083765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1648.109288][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.116572][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.211610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1648.254541][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1648.294247][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1648.320807][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1648.342252][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1648.375989][T25172] netlink: 'syz.2.5916': attribute type 10 has an invalid length. [ 1648.426423][T25174] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1648.461734][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1648.485979][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1648.533791][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1648.603442][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1648.617516][T24934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1648.656852][T24934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1648.669562][T25170] IPv6: Can't replace route, no match found [ 1648.686342][T25177] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1648.731840][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1648.747269][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1648.768775][T25185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5919'. [ 1648.810628][T25185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5919'. [ 1648.843004][T25189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5919'. [ 1649.506241][T25195] IPv6: Can't replace route, no match found [ 1649.519097][T25195] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1650.005198][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1650.020098][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1650.064163][T24934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.148850][T25223] netlink: 'syz.1.5926': attribute type 10 has an invalid length. [ 1650.213497][T25213] IPv6: Can't replace route, no match found [ 1650.294396][T25221] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1650.489857][T25231] netlink: 'syz.3.5927': attribute type 10 has an invalid length. [ 1650.854426][T25244] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1650.923771][T25245] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5931'. [ 1651.078407][T25242] IPv6: Can't replace route, no match found [ 1651.098200][T25242] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1651.803702][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1651.823836][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1651.863858][T25266] IPv6: Can't replace route, no match found [ 1651.887875][T25266] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1651.919779][T24934] device veth0_vlan entered promiscuous mode [ 1651.959294][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1651.990988][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1652.027615][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1652.051378][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1652.138012][T24934] device veth1_vlan entered promiscuous mode [ 1652.188884][T25280] netlink: 'syz.1.5938': attribute type 10 has an invalid length. [ 1652.266749][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1652.313725][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1652.351935][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1652.391185][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1652.429379][T24934] device veth0_macvtap entered promiscuous mode [ 1652.465722][T24934] device veth1_macvtap entered promiscuous mode [ 1652.490584][T25285] netlink: 'syz.3.5939': attribute type 10 has an invalid length. [ 1652.637665][T24934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.649362][T24934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.660626][T24934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.671601][T24934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.681967][T24934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.699236][T24934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.719604][T24934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.777898][T24934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.833793][T24934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.841952][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1652.872384][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1652.903558][T25293] __nla_validate_parse: 2 callbacks suppressed [ 1652.903596][T25293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5943'. [ 1652.929623][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1652.957272][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1653.004870][T24934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.033627][T24934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.053062][T24934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.064451][T24934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.076322][T24934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.090499][T24934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.114066][T24934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.130965][T24934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.149315][T24934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.170923][T25293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5943'. [ 1653.199733][T25287] IPv6: Can't replace route, no match found [ 1653.232951][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1653.247745][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1653.269267][T25294] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1653.300818][T24934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.330546][T24934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.350781][T24934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.375871][T24934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.405553][T25302] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5943'. [ 1653.490083][T25308] IPv6: Can't replace route, no match found [ 1653.538307][T25313] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1653.633974][ T4521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.680179][ T4521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.690741][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1653.746190][T20929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.768093][T20929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.806750][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1654.408372][T25336] netlink: 'syz.3.5950': attribute type 10 has an invalid length. [ 1654.495217][T25336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.548993][T25336] bond0: (slave team0): Enslaving as an active interface with an up link [ 1654.583178][T25332] IPv6: Can't replace route, no match found [ 1654.596946][T25335] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1654.660579][T25342] netlink: 'syz.4.5953': attribute type 10 has an invalid length. [ 1654.730374][T25342] device geneve0 entered promiscuous mode [ 1654.898644][T25342] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1654.933504][T25344] netlink: 'syz.1.5952': attribute type 27 has an invalid length. [ 1654.941522][T25344] C: renamed from team_slave_0 [ 1655.281369][T24936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1655.302510][T24936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1655.311951][T24936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1655.335013][T24936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1655.343666][T24936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1655.351072][T24936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1655.381035][T25353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5956'. [ 1655.459150][T25353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5956'. [ 1655.494487][T25357] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5956'. [ 1655.629945][ T4521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.704031][T25354] IPv6: Can't replace route, no match found [ 1655.727285][T25362] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1655.832230][T25359] IPv6: Can't replace route, no match found [ 1655.846601][T25367] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1655.918448][ T4521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.113278][ T4521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.187729][T25376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5963'. [ 1656.258551][T25376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5963'. [ 1656.301888][ T4521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.325432][T25379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5963'. [ 1656.361313][T25380] netlink: 'syz.1.5964': attribute type 10 has an invalid length. [ 1656.380859][T25382] netlink: 'syz.4.5965': attribute type 10 has an invalid length. [ 1656.597169][T25355] chnl_net:caif_netlink_parms(): no params data found [ 1656.847367][T25395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1656.910175][T25355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.917919][T25355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.926934][T25355] device bridge_slave_0 entered promiscuous mode [ 1656.936138][T25355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.943717][T25355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.952150][T25355] device bridge_slave_1 entered promiscuous mode [ 1657.038059][T25387] IPv6: Can't replace route, no match found [ 1657.183488][T25355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.227418][T25397] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1657.364988][T25355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.413444][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 1657.572156][T25355] team0: Port device team_slave_0 added [ 1657.776615][T25355] team0: Port device team_slave_1 added [ 1657.996571][T25355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.027959][T25355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.113736][T25355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.203384][T25415] IPv6: Can't replace route, no match found [ 1658.263380][T25423] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1658.328198][T25418] IPv6: Can't replace route, no match found [ 1658.345724][T25431] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1658.370116][T25355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.392949][T25355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.429825][T25355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.514284][T25421] IPv6: Can't replace route, no match found [ 1658.543119][T25429] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1658.811005][T25444] netlink: 'syz.4.5977': attribute type 10 has an invalid length. [ 1658.853875][T25444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.878144][T25444] bond0: (slave team0): Enslaving as an active interface with an up link [ 1658.888025][T25452] __nla_validate_parse: 2 callbacks suppressed [ 1658.888063][T25452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5980'. [ 1658.926644][T25448] netlink: 'syz.0.5979': attribute type 10 has an invalid length. [ 1659.009587][T25452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5980'. [ 1659.040765][T25453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5980'. [ 1659.066432][T25355] device hsr_slave_0 entered promiscuous mode [ 1659.103444][T25355] device hsr_slave_1 entered promiscuous mode [ 1659.110881][T25355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1659.135334][T25355] Cannot create hsr debugfs directory [ 1659.388987][T25461] netlink: 'syz.4.5981': attribute type 27 has an invalid length. [ 1659.410189][T25461] net_ratelimit: 11 callbacks suppressed [ 1659.410213][T25461] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1659.503189][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 1659.725958][T25471] netlink: 'syz.0.5983': attribute type 10 has an invalid length. [ 1659.843003][ T4521] device hsr_slave_0 left promiscuous mode [ 1659.874043][ T4521] device hsr_slave_1 left promiscuous mode [ 1659.912320][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.930332][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.005155][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.057194][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.142053][T25481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5986'. [ 1660.204118][ T4521] device bridge_slave_1 left promiscuous mode [ 1660.210524][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.264822][ T4521] device bridge_slave_0 left promiscuous mode [ 1660.283142][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.410120][ T4521] device veth1_macvtap left promiscuous mode [ 1660.427801][ T4521] device veth0_macvtap left promiscuous mode [ 1660.461400][ T4521] device veth1_vlan left promiscuous mode [ 1660.485412][ T4521] device veth0_vlan left promiscuous mode [ 1660.852922][T20929] wlan1: Trigger new scan to find an IBSS to join [ 1660.885621][ T4521] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1661.586969][T24936] Bluetooth: hci1: command 0x040f tx timeout [ 1661.608376][ T4521] team0 (unregistering): Port device team_slave_1 removed [ 1661.657195][ T4521] team0 (unregistering): Port device team_slave_0 removed [ 1661.707701][ T4521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.764230][ T4521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.071264][ T4521] bond0 (unregistering): (slave team0): Releasing backup interface [ 1662.111156][ T4521] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1662.120164][ T4521] bond0 (unregistering): Released all slaves [ 1662.220505][T25481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5986'. [ 1662.238049][T25484] IPv6: Can't replace route, no match found [ 1662.246222][T25493] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1662.257265][T25496] IPv6: Can't replace route, no match found [ 1662.273016][T25500] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1662.293780][T25511] netlink: 'syz.1.5991': attribute type 10 has an invalid length. [ 1662.602420][T25520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1662.698843][T25520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1662.735577][T25526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1663.319930][T25533] netlink: 'syz.1.6005': attribute type 10 has an invalid length. [ 1663.457987][T25539] netlink: 'syz.0.5996': attribute type 27 has an invalid length. [ 1663.512946][T25539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1663.541794][T25539] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1663.652788][T24936] Bluetooth: hci1: command 0x0419 tx timeout [ 1663.893249][T25355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1663.915828][T25355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1663.950437][T25355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1664.023099][T25355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1664.287020][T25355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.394301][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1664.454657][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1664.488235][T25355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.502985][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1664.515475][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1664.528331][T20915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.535606][T20915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.622556][T25565] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6003'. [ 1664.691806][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1664.710953][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1664.773774][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1664.820296][T20915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.827691][T20915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.895975][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1664.947431][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1664.995586][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1665.034578][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1665.078654][T25567] IPv6: Can't replace route, no match found [ 1665.091618][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1665.117998][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1665.129769][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1665.153920][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1665.183584][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1665.221036][T25355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1665.252209][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1665.270943][T25567] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1665.302687][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1665.311434][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1665.389107][T25580] netlink: 'syz.1.6016': attribute type 10 has an invalid length. [ 1665.837997][T25588] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1665.879772][T25588] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1665.934180][T25591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1665.974817][T25582] IPv6: Can't replace route, no match found [ 1666.003651][T25593] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1666.083394][T25584] IPv6: Can't replace route, no match found [ 1666.107394][T25584] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1666.714829][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1666.734005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1666.806549][T25355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.933917][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1666.953291][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1667.099471][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1667.174308][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1667.267625][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1667.365137][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1667.385504][T25355] device veth0_vlan entered promiscuous mode [ 1667.414038][T25355] device veth1_vlan entered promiscuous mode [ 1667.537195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1667.556449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1667.620868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1667.672304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1667.741571][T25355] device veth0_macvtap entered promiscuous mode [ 1667.757199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1667.790623][T25623] IPv6: Can't replace route, no match found [ 1667.805852][T25355] device veth1_macvtap entered promiscuous mode [ 1667.830748][T25631] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1667.894715][T25355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1667.948288][T25355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.991184][T25355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1668.031029][T25355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.090678][T25355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1668.145614][T25355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.192302][T25355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1668.204269][T25355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.234810][T25355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1668.264942][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1668.284609][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1668.303249][T25636] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6019'. [ 1668.353102][T25355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.365339][T25355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.434973][T25355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.453761][T25355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.502721][T25355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.521444][T25355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.546214][T25355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1668.557428][T25355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1668.571471][T25355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1668.586764][T25640] netlink: 'syz.1.6020': attribute type 10 has an invalid length. [ 1668.599897][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1668.619520][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1668.640814][T25355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.662211][T25355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.703557][T25355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.724812][T25355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.778690][T25643] netlink: 'syz.3.6021': attribute type 10 has an invalid length. [ 1668.856922][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.863404][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.917226][T25646] netlink: 'syz.0.6032': attribute type 10 has an invalid length. [ 1669.149536][T20933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.172843][T20933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.222931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1669.297153][T20933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.318909][T20933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.355779][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1669.373594][T25653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6023'. [ 1669.410290][T25653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6023'. [ 1669.466578][T25657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6023'. [ 1670.017510][T25661] IPv6: Can't replace route, no match found [ 1670.055033][T25661] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1670.219963][T25676] netlink: 'syz.1.6029': attribute type 10 has an invalid length. [ 1671.065921][T25686] IPv6: Can't replace route, no match found [ 1671.145798][T25689] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1671.228712][T25688] netlink: 'syz.1.6043': attribute type 10 has an invalid length. [ 1671.261089][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1671.272577][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1671.281226][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1671.294669][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1671.304074][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1671.312976][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1671.390715][T20933] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.680363][T20933] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.013197][T20933] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.250635][T20933] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.402558][T25713] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6036'. [ 1672.452076][T25715] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6037'. [ 1672.765024][T25704] chnl_net:caif_netlink_parms(): no params data found [ 1673.051913][T25739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1673.158691][T25739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1673.197924][T25704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.224559][T25704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.264290][T25704] device bridge_slave_0 entered promiscuous mode [ 1673.333095][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 1673.500899][T25754] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6044'. [ 1673.528972][T25754] netlink: zone id is out of range [ 1673.539623][T25754] netlink: del zone limit has 4 unknown bytes [ 1673.547155][T25744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1673.651044][T25704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.661078][T25704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.718528][T25704] device bridge_slave_1 entered promiscuous mode [ 1673.850375][T25765] netlink: 'syz.0.6045': attribute type 10 has an invalid length. [ 1673.893134][T20921] wlan1: Trigger new scan to find an IBSS to join [ 1673.979339][T25704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.163823][T25704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.197468][T25766] IPv6: Can't replace route, no match found [ 1674.261214][T25766] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1674.429611][T25704] team0: Port device team_slave_0 added [ 1674.474346][T25704] team0: Port device team_slave_1 added [ 1674.695091][T25704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.702121][T25704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.821224][T25704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.943710][T25704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.950762][T25704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.052701][T25704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.147219][T25792] netlink: 'syz.0.6053': attribute type 10 has an invalid length. [ 1675.390395][T25799] netlink: 'syz.1.6055': attribute type 10 has an invalid length. [ 1675.413214][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 1675.758188][T20933] device hsr_slave_0 left promiscuous mode [ 1675.781873][T20933] device hsr_slave_1 left promiscuous mode [ 1675.784369][T25813] FAULT_INJECTION: forcing a failure. [ 1675.784369][T25813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.801949][T20933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1675.830238][T20933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.861533][T20933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1675.869964][T25813] CPU: 1 PID: 25813 Comm: syz.2.6057 Not tainted syzkaller #0 [ 1675.877494][T25813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.887610][T25813] Call Trace: [ 1675.890936][T25813] [ 1675.893907][T25813] dump_stack_lvl+0x188/0x24e [ 1675.898651][T25813] ? show_regs_print_info+0x12/0x12 [ 1675.901179][T20933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.903890][T25813] ? load_image+0x400/0x400 [ 1675.903923][T25813] ? __lock_acquire+0x7d10/0x7d10 [ 1675.903961][T25813] should_fail_ex+0x399/0x4d0 [ 1675.903987][T25813] _copy_from_user+0x2c/0x170 [ 1675.904017][T25813] ___sys_sendmsg+0x1c3/0x360 [ 1675.934985][T25813] ? __sys_sendmsg+0x290/0x290 [ 1675.939836][T25813] ? __lock_acquire+0x7d10/0x7d10 [ 1675.944949][T25813] __se_sys_sendmsg+0x1bb/0x2a0 [ 1675.949869][T25813] ? __x64_sys_sendmsg+0x80/0x80 [ 1675.954887][T25813] ? lockdep_hardirqs_on+0x94/0x140 [ 1675.960163][T25813] do_syscall_64+0x4c/0xa0 [ 1675.964647][T25813] ? clear_bhb_loop+0x60/0xb0 [ 1675.969374][T25813] ? clear_bhb_loop+0x60/0xb0 [ 1675.974104][T25813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1675.980055][T25813] RIP: 0033:0x7eff2399c799 [ 1675.984525][T25813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.004198][T25813] RSP: 002b:00007eff247d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1676.012670][T25813] RAX: ffffffffffffffda RBX: 00007eff23c15fa0 RCX: 00007eff2399c799 [ 1676.020705][T25813] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1676.028736][T25813] RBP: 00007eff247d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.036768][T25813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.044920][T25813] R13: 00007eff23c16038 R14: 00007eff23c15fa0 R15: 00007ffc04bd0b78 [ 1676.052967][T25813] [ 1676.061747][ T4521] wlan1: Trigger new scan to find an IBSS to join [ 1676.151564][T20933] device veth0_macvtap left promiscuous mode [ 1676.163087][T20933] device veth1_vlan left promiscuous mode [ 1676.184657][T20933] device veth0_vlan left promiscuous mode [ 1676.709369][T20933] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1677.508977][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 1677.651294][T20933] team0 (unregistering): Port device team_slave_1 removed [ 1677.799854][T20933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.865852][T20933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.151251][T20933] bond0 (unregistering): (slave team0): Releasing backup interface [ 1678.193724][T20933] bond0 (unregistering): Released all slaves [ 1678.235419][T25704] device hsr_slave_0 entered promiscuous mode [ 1678.242558][T25704] device hsr_slave_1 entered promiscuous mode [ 1678.249843][T25704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1678.257696][T25704] Cannot create hsr debugfs directory [ 1678.270071][T25806] IPv6: Can't replace route, no match found [ 1678.279230][T25809] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1678.299555][T25840] IPv6: Can't replace route, no match found [ 1678.323903][T25847] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1678.854697][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1678.998965][ T46] wlan1: Creating new IBSS network, BSSID c6:df:24:92:c2:3e [ 1679.468313][T25887] IPv6: Can't replace route, no match found [ 1679.486013][T25887] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1679.573095][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 1679.731781][T25704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1679.871920][T25704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1679.932692][T25704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1679.962534][T25704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1680.428348][T25704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.511637][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1680.531530][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1680.564410][T25903] IPv6: Can't replace route, no match found [ 1680.572136][T25913] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1680.652817][T25905] IPv6: Can't replace route, no match found [ 1680.684481][T25704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.752033][T25915] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1680.789726][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1680.834520][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1680.856805][T20929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.864141][T20929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.890306][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1680.911396][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1680.941544][T20929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.948806][T20929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.010047][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1681.103453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1681.120910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1681.142086][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1681.156751][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1681.166710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1681.223861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1681.263621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1681.296284][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1681.334103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1681.381606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1681.428975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1681.459941][T25704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1681.650662][T25934] IPv6: Can't replace route, no match found [ 1681.721985][T25934] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1682.667015][T25963] IPv6: Can't replace route, no match found [ 1682.691663][T25963] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1682.775461][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1682.789009][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1682.835518][T25704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1682.959213][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1683.020037][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1683.112941][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1683.131518][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1683.177451][T25704] device veth0_vlan entered promiscuous mode [ 1683.205727][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1683.227582][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1683.275290][T25704] device veth1_vlan entered promiscuous mode [ 1683.444479][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1683.459927][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1683.494197][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1683.519972][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1683.578382][T25983] IPv6: Can't replace route, no match found [ 1683.640160][T25704] device veth0_macvtap entered promiscuous mode [ 1683.693582][T25989] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1683.753907][T25704] device veth1_macvtap entered promiscuous mode [ 1683.784999][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1683.813410][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1683.864532][T25704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.916929][T25704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.003858][T25704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.031951][T25704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.064054][T25704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.081645][T25704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.125364][T25704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.137197][T25704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.194424][T25704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1684.265159][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1684.289190][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1684.356062][T25704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.405635][T25704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.439216][T25704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.502659][T25704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.520591][T25704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.582761][T25704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.612818][T25704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.659522][T25704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.710316][T25704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1684.731966][T26001] IPv6: Can't replace route, no match found [ 1684.748314][T26007] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1684.783174][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1684.795029][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1684.840057][T25704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.873425][T25704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.908986][T25704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.920394][T25704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.133171][T20933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.141073][T20933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.161862][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1685.327758][T20927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.350658][T20927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.388724][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1685.455224][T26021] IPv6: Can't replace route, no match found [ 1685.620199][T26021] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1686.803495][T26052] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6104'. [ 1686.925207][T26046] IPv6: Can't replace route, no match found [ 1686.992161][T26050] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1687.040082][T26056] IPv6: Can't replace route, no match found [ 1687.047413][T26056] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1687.171038][T26063] FAULT_INJECTION: forcing a failure. [ 1687.171038][T26063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.195511][T26063] CPU: 1 PID: 26063 Comm: syz.2.6108 Not tainted syzkaller #0 [ 1687.203060][T26063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1687.213169][T26063] Call Trace: [ 1687.216498][T26063] [ 1687.219476][T26063] dump_stack_lvl+0x188/0x24e [ 1687.224223][T26063] ? show_regs_print_info+0x12/0x12 [ 1687.229477][T26063] ? load_image+0x400/0x400 [ 1687.234077][T26063] ? __might_fault+0xa6/0x120 [ 1687.238820][T26063] ? format_decode+0xb0b/0x1300 [ 1687.243740][T26063] should_fail_ex+0x399/0x4d0 [ 1687.248472][T26063] copyin+0x1b/0x120 [ 1687.252686][T26063] _copy_from_iter+0x447/0x1130 [ 1687.257605][T26063] ? copyout_mc+0x110/0x110 [ 1687.262171][T26063] ? txopt_get+0x76/0x3f0 [ 1687.266555][T26063] ? txopt_get+0x76/0x3f0 [ 1687.270943][T26063] ? txopt_get+0x340/0x3f0 [ 1687.275413][T26063] ? tomoyo_check_acl+0x378/0x3f0 [ 1687.280587][T26063] ? fl6_sock_lookup+0xc0/0xc0 [ 1687.285431][T26063] rawv6_probe_proto_opt+0x166/0x300 [ 1687.290785][T26063] rawv6_sendmsg+0xa71/0x1700 [ 1687.295538][T26063] ? compat_rawv6_ioctl+0x60/0x60 [ 1687.300630][T26063] ? aa_sk_perm+0x81f/0x950 [ 1687.305211][T26063] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1687.311695][T26063] ? inet_sendmsg+0x78/0x2f0 [ 1687.316444][T26063] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1687.321780][T26063] ? security_socket_sendmsg+0x7c/0xa0 [ 1687.327303][T26063] ? inet_send_prepare+0x260/0x260 [ 1687.332485][T26063] ____sys_sendmsg+0x5be/0x970 [ 1687.337323][T26063] ? __sys_sendmsg_sock+0x30/0x30 [ 1687.342423][T26063] ? __import_iovec+0x315/0x500 [ 1687.347329][T26063] ? import_iovec+0x6f/0xa0 [ 1687.351891][T26063] ___sys_sendmsg+0x2a2/0x360 [ 1687.356643][T26063] ? __sys_sendmsg+0x290/0x290 [ 1687.361514][T26063] ? __lock_acquire+0x7d10/0x7d10 [ 1687.366629][T26063] __se_sys_sendmsg+0x1bb/0x2a0 [ 1687.371549][T26063] ? ct_nmi_exit+0x145/0x1c0 [ 1687.376192][T26063] ? __x64_sys_sendmsg+0x80/0x80 [ 1687.381198][T26063] ? lockdep_hardirqs_on+0x94/0x140 [ 1687.386537][T26063] do_syscall_64+0x4c/0xa0 [ 1687.391016][T26063] ? clear_bhb_loop+0x60/0xb0 [ 1687.395749][T26063] ? clear_bhb_loop+0x60/0xb0 [ 1687.400485][T26063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1687.406445][T26063] RIP: 0033:0x7eff2399c799 [ 1687.410913][T26063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.430573][T26063] RSP: 002b:00007eff247d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1687.439053][T26063] RAX: ffffffffffffffda RBX: 00007eff23c15fa0 RCX: 00007eff2399c799 [ 1687.447096][T26063] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 1687.455134][T26063] RBP: 00007eff247d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.463170][T26063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.471198][T26063] R13: 00007eff23c16038 R14: 00007eff23c15fa0 R15: 00007ffc04bd0b78 [ 1687.479245][T26063] [ 1687.892856][T20933] wlan1: Trigger new scan to find an IBSS to join [ 1687.928805][T26071] IPv6: Can't replace route, no match found [ 1687.948241][T26071] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1688.949321][T26096] netlink: 'syz.2.6119': attribute type 10 has an invalid length. [ 1689.208863][T26096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.253468][T26096] bond0: (slave team0): Enslaving as an active interface with an up link [ 1689.638925][T26102] IPv6: Can't replace route, no match found [ 1689.666895][T26102] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1690.606188][T26124] IPv6: Can't replace route, no match found [ 1690.787357][T26120] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1691.038212][T24936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1691.050055][T24936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1691.061271][T24936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1691.069851][T24936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1691.080245][T24936] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1691.088702][T24936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1691.902306][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1692.022427][T20917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.156801][T20917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.317146][T20917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.495753][T20917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.807435][T26169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6143'. [ 1692.999669][T26169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6143'. [ 1693.044197][T26176] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6143'. [ 1693.108821][T26136] chnl_net:caif_netlink_parms(): no params data found [ 1693.175648][T24936] Bluetooth: hci0: command 0x0409 tx timeout [ 1693.265930][T26136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.273459][T26136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.281976][T26136] device bridge_slave_0 entered promiscuous mode [ 1693.294029][T26136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.301393][T26136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.310137][T26136] device bridge_slave_1 entered promiscuous mode [ 1693.341256][T26136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1693.356117][T26136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.592159][T26187] netlink: 'syz.4.6146': attribute type 10 has an invalid length. [ 1693.659493][T26136] team0: Port device team_slave_0 added [ 1693.731433][T26182] IPv6: Can't replace route, no match found [ 1693.775808][T26136] team0: Port device team_slave_1 added [ 1693.836635][T26195] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1693.895909][T20929] wlan1: Creating new IBSS network, BSSID 92:73:91:4a:40:0d [ 1693.991581][T26136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.033996][T26136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.092764][T26136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.352138][T26136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.374119][T26136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.503898][T26136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.923716][T26136] device hsr_slave_0 entered promiscuous mode [ 1694.938165][T26136] device hsr_slave_1 entered promiscuous mode [ 1694.953713][T26136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1694.969222][T26136] Cannot create hsr debugfs directory [ 1695.253152][T24936] Bluetooth: hci0: command 0x041b tx timeout [ 1696.051318][T26245] IPv6: Can't replace route, no match found [ 1696.063387][T26249] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1696.658643][T20917] device hsr_slave_0 left promiscuous mode [ 1696.681583][T20917] device hsr_slave_1 left promiscuous mode [ 1696.713299][T20917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.747554][T20917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.776089][T20917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.839462][T20917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.866067][T20917] device bridge_slave_1 left promiscuous mode [ 1696.895980][T20917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.934432][T20917] device bridge_slave_0 left promiscuous mode [ 1696.940770][T20917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.103102][T20917] device veth1_macvtap left promiscuous mode [ 1697.109233][T20917] device veth0_macvtap left promiscuous mode [ 1697.162886][T20917] device veth1_vlan left promiscuous mode [ 1697.168936][T20917] device veth0_vlan left promiscuous mode [ 1697.332946][T24936] Bluetooth: hci0: command 0x040f tx timeout [ 1697.526054][T26299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1697.585829][T20917] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1698.238355][T20917] team0 (unregistering): Port device team_slave_1 removed [ 1698.340851][T20917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.406689][T20917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.728528][T20917] bond0 (unregistering): (slave team0): Releasing backup interface [ 1698.764452][T20917] bond0 (unregistering): Released all slaves [ 1698.872276][T26278] IPv6: Can't replace route, no match found [ 1698.878917][T26279] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1698.906768][T26299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1699.267121][T26315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1699.298823][T26315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1699.400264][T26315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1699.417225][T24936] Bluetooth: hci0: command 0x0419 tx timeout [ 1699.659549][T26136] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1699.725031][T26136] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1699.791692][T26136] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1699.856522][T26136] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1700.259010][T26136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.345132][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1700.364861][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1700.390540][T26342] netlink: 'syz.3.6178': attribute type 10 has an invalid length. [ 1700.590970][T26342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.694329][T26342] bond0: (slave team0): Enslaving as an active interface with an up link [ 1700.717543][T26136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.775070][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1700.791703][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1700.823070][T20921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.830411][T20921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.944148][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1700.961096][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1700.997437][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1701.029005][T20921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.036300][T20921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1701.077679][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1701.125753][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1701.176416][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1701.230784][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1701.273853][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1701.325466][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1701.361566][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1701.388806][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1701.399909][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1701.410420][T26360] IPv6: Can't replace route, no match found [ 1701.432147][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1701.454158][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1701.464928][T26136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1701.490069][T26360] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1701.889300][T26378] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6186'. [ 1701.958432][T26378] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6186'. [ 1701.970665][T26383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6186'. [ 1701.998746][T26382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1702.048129][T26382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1702.066530][T26387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1702.412963][T26393] netlink: 'syz.4.6189': attribute type 10 has an invalid length. [ 1702.904597][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1702.912212][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1702.950982][T26136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.030571][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1703.080505][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1703.178079][T26415] netlink: 'syz.0.6193': attribute type 10 has an invalid length. [ 1703.223808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1703.238984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1703.283949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1703.292180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1703.356794][T26136] device veth0_vlan entered promiscuous mode [ 1703.415322][T26136] device veth1_vlan entered promiscuous mode [ 1703.613080][T26136] device veth0_macvtap entered promiscuous mode [ 1703.622438][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1703.641437][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1703.651437][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1703.683648][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1703.715910][T26136] device veth1_macvtap entered promiscuous mode [ 1703.736144][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1703.764975][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1703.831946][T26136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.859639][T26136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.878407][T26136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.891349][T26136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.912212][T26136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.968014][T26136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.989107][T26136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.006797][T26136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.021249][T26136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.037476][T26425] IPv6: Can't replace route, no match found [ 1704.078857][T26430] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1704.091217][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1704.127764][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1704.250893][T26136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.319359][T26136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.368480][T26136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.399529][T26136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.444703][T26136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.502817][T26136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.523081][T26136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.552270][T26136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.581967][T26445] __nla_validate_parse: 3 callbacks suppressed [ 1704.582001][T26445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6201'. [ 1704.592993][T26136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.712032][T26136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.721285][T26136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.738334][T26136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.755263][T26136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.875623][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1704.889617][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1704.912865][T26445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6201'. [ 1705.019925][T26455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6201'. [ 1705.213566][T20929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.231463][T20929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.265417][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1705.339690][T20929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.371126][T20929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.420013][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1706.179198][T26486] netlink: 'syz.4.6209': attribute type 10 has an invalid length. [ 1706.410056][T26500] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6211'. [ 1706.716226][T26498] IPv6: Can't replace route, no match found [ 1706.748125][T26498] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1706.770762][T26509] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6214'. [ 1706.841631][T26509] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6214'. [ 1706.853591][T20927] wlan1: Trigger new scan to find an IBSS to join [ 1706.871143][T26510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6214'. [ 1707.408088][T26519] device syzkaller0 entered promiscuous mode [ 1707.475483][T26525] netlink: 'syz.0.6218': attribute type 3 has an invalid length. [ 1707.497877][T26522] netlink: 'syz.1.6221': attribute type 10 has an invalid length. [ 1707.530810][T26525] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6218'. [ 1707.719500][T26522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.775803][T26522] bond0: (slave team0): Enslaving as an active interface with an up link [ 1707.827061][T26517] IPv6: Can't replace route, no match found [ 1710.483774][T26527] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1710.498933][T26538] IPv6: Can't replace route, no match found [ 1710.527787][T26544] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1710.846185][T26550] netlink: 'syz.3.6225': attribute type 10 has an invalid length. [ 1710.884853][T26559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1710.946505][T26559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1711.023864][T26564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1711.926012][T26571] IPv6: Can't replace route, no match found [ 1711.945959][T26571] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1712.480264][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1712.499333][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1712.513539][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1712.524076][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1712.531933][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1712.543410][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1712.745819][T26587] IPv6: Can't replace route, no match found [ 1712.788177][T26587] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1712.854898][T20915] wlan1: Trigger new scan to find an IBSS to join [ 1712.931099][T20929] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.958290][T26602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1712.972398][T26592] IPv6: Can't replace route, no match found [ 1712.999877][T26602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1713.061957][T26592] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1713.121249][T20929] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.146248][T26604] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1713.303007][T20929] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.571380][T20929] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.807865][T26589] chnl_net:caif_netlink_parms(): no params data found [ 1714.068882][T26627] IPv6: Can't replace route, no match found [ 1714.164211][T26627] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1714.177924][T26589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.190408][T26589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.219363][T26589] device bridge_slave_0 entered promiscuous mode [ 1714.231905][T26589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.260294][T26589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.291840][T26589] device bridge_slave_1 entered promiscuous mode [ 1714.448694][T26589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.548946][T26589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.623099][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 1714.920019][T26648] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1715.090398][T26589] team0: Port device team_slave_0 added [ 1715.186191][T26589] team0: Port device team_slave_1 added [ 1715.352041][T26589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.367496][T26589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.390120][T26667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6253'. [ 1715.496581][T26589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.572298][T26667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6253'. [ 1715.595299][T26668] IPv6: Can't replace route, no match found [ 1715.602893][T26589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.613229][T26589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.689891][T26589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.719147][T26672] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1715.748948][T26671] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6253'. [ 1715.894958][T20917] wlan1: Trigger new scan to find an IBSS to join [ 1716.016438][T26589] device hsr_slave_0 entered promiscuous mode [ 1716.064587][T26589] device hsr_slave_1 entered promiscuous mode [ 1716.692807][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 1717.528859][T26717] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6264'. [ 1717.560934][T26715] netlink: 'syz.4.6263': attribute type 10 has an invalid length. [ 1717.762494][T20929] device hsr_slave_0 left promiscuous mode [ 1717.800754][T20929] device hsr_slave_1 left promiscuous mode [ 1717.810883][T20929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.862924][T20929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.893073][T20917] wlan1: Trigger new scan to find an IBSS to join [ 1717.911646][T20929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.931055][T20929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.952161][T26727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1717.992248][T20929] bridge0: port 3(dummy0) entered disabled state [ 1718.013304][T20929] device bridge_slave_1 left promiscuous mode [ 1718.041649][T20929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.067866][T20929] device bridge_slave_0 left promiscuous mode [ 1718.089749][T20929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.148758][T20929] device veth1_macvtap left promiscuous mode [ 1718.158747][T20929] device veth0_macvtap left promiscuous mode [ 1718.173135][T20929] device veth1_vlan left promiscuous mode [ 1718.183229][T20929] device veth0_vlan left promiscuous mode [ 1718.774087][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 1719.520208][T20929] team0 (unregistering): Port device team_slave_1 removed [ 1719.596515][T20929] team0 (unregistering): Port device team_slave_0 removed [ 1719.898119][T20915] wlan1: Trigger new scan to find an IBSS to join [ 1720.159498][T26727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1720.169333][T26725] IPv6: Can't replace route, no match found [ 1720.179711][T26731] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1720.209324][T26741] IPv6: Can't replace route, no match found [ 1720.223324][T26736] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1720.283386][T26755] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6271'. [ 1720.853183][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 1721.074887][T26589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1721.114850][T26589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1721.147141][T26589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1721.215409][T26589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1721.572425][T26589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.637615][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1721.652206][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1721.682028][T26589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1721.721240][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1721.751682][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1721.788342][T20919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.795631][T20919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1721.868366][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1721.887145][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1721.894325][T20917] wlan1: Creating new IBSS network, BSSID 42:8f:f8:c9:6f:9b [ 1721.916625][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1721.941061][T20919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.948373][T20919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.978284][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1722.024458][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1722.045554][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1722.072381][T26803] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6281'. [ 1722.085518][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1722.111289][T26803] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6281'. [ 1722.125621][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1722.137533][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1722.147641][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1722.157477][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1722.166995][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1722.208430][T26589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1722.230181][T26589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1722.255343][T26805] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6281'. [ 1722.275884][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1722.296994][T20919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1722.568531][T26816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1722.630371][T26816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1722.670817][T26820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1722.765150][T26812] IPv6: Can't replace route, no match found [ 1722.818834][T26812] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1722.866896][T20919] wlan1: Trigger new scan to find an IBSS to join [ 1723.566278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1723.608078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1723.664233][T26589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1723.827516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1723.857342][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1723.903401][T26855] netlink: 'syz.4.6291': attribute type 10 has an invalid length. [ 1723.970529][T26855] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.6291'. [ 1724.028242][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1724.050251][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1724.098021][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1724.130700][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1724.183708][T26589] device veth0_vlan entered promiscuous mode [ 1724.274856][T26589] device veth1_vlan entered promiscuous mode [ 1724.408566][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1724.421121][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1724.482344][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1724.512106][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1724.551010][T26589] device veth0_macvtap entered promiscuous mode [ 1724.591314][T26589] device veth1_macvtap entered promiscuous mode [ 1724.693602][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1724.720421][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.743940][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1724.793754][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.807535][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1724.820538][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.834134][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1724.853365][T20917] wlan1: Trigger new scan to find an IBSS to join [ 1724.882803][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.953157][T26589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1724.961395][T26870] IPv6: Can't replace route, no match found [ 1725.001758][T26877] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1725.041894][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1725.057071][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1725.094220][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1725.125186][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1725.136760][T26881] netlink: 'syz.4.6296': attribute type 10 has an invalid length. [ 1725.148439][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.160188][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.174951][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.211151][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.231503][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.253214][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.292756][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.331615][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.360333][T26589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1725.409307][T26888] IPv6: Can't replace route, no match found [ 1725.426683][T26891] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1725.455956][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1725.476148][T20927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1725.557791][T26589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.589803][T26589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.622230][T26589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.647340][T26589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.719229][T26897] netlink: 'syz.3.6298': attribute type 10 has an invalid length. [ 1726.044472][T20927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.119178][T20927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.167207][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1726.225354][T20927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.274354][T20927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.978277][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1727.500220][T26943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6232'. [ 1727.804857][T26941] IPv6: Can't replace route, no match found [ 1727.814101][T26948] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1727.900227][T20917] wlan1: Trigger new scan to find an IBSS to join [ 1727.939851][T26954] IPv6: Can't replace route, no match found [ 1727.955865][T26947] netlink: 'syz.4.6310': attribute type 10 has an invalid length. [ 1728.004473][T26945] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1728.586893][T26969] FAULT_INJECTION: forcing a failure. [ 1728.586893][T26969] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.702925][T26969] CPU: 1 PID: 26969 Comm: syz.1.6312 Not tainted syzkaller #0 [ 1728.710483][T26969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1728.720598][T26969] Call Trace: [ 1728.723923][T26969] [ 1728.726901][T26969] dump_stack_lvl+0x188/0x24e [ 1728.731642][T26969] ? show_regs_print_info+0x12/0x12 [ 1728.736911][T26969] ? load_image+0x400/0x400 [ 1728.741480][T26969] ? __might_sleep+0xd0/0xd0 [ 1728.746129][T26969] ? __lock_acquire+0x7d10/0x7d10 [ 1728.751290][T26969] ? ct_irq_exit_irqson+0x113/0x170 [ 1728.756563][T26969] should_fail_ex+0x399/0x4d0 [ 1728.761304][T26969] should_failslab+0x5/0x20 [ 1728.765882][T26969] slab_pre_alloc_hook+0x59/0x310 [ 1728.771004][T26969] ? exc_page_fault+0x88/0x100 [ 1728.775809][T26969] ? sk_prot_alloc+0xe7/0x210 [ 1728.780550][T26969] __kmem_cache_alloc_node+0x4f/0x260 [ 1728.785988][T26969] ? exc_page_fault+0x88/0x100 [ 1728.790802][T26969] ? sk_prot_alloc+0xe7/0x210 [ 1728.795519][T26969] __kmalloc+0xa0/0x240 [ 1728.799722][T26969] sk_prot_alloc+0xe7/0x210 [ 1728.804260][T26969] ? sk_alloc+0x20/0x340 [ 1728.808536][T26969] sk_alloc+0x36/0x340 [ 1728.812636][T26969] ? bpf_ctx_init+0x163/0x1a0 [ 1728.817362][T26969] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1728.823026][T26969] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1728.828466][T26969] ? lockdep_hardirqs_on+0x94/0x140 [ 1728.833781][T26969] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1728.839983][T26969] ? cpu_online+0xa0/0xa0 [ 1728.844389][T26969] bpf_prog_test_run+0x31e/0x390 [ 1728.849367][T26969] __sys_bpf+0x62b/0x780 [ 1728.853654][T26969] ? bpf_link_show_fdinfo+0x380/0x380 [ 1728.859106][T26969] ? lock_chain_count+0x20/0x20 [ 1728.864018][T26969] __x64_sys_bpf+0x78/0x90 [ 1728.868489][T26969] do_syscall_64+0x4c/0xa0 [ 1728.872967][T26969] ? clear_bhb_loop+0x60/0xb0 [ 1728.877683][T26969] ? clear_bhb_loop+0x60/0xb0 [ 1728.882390][T26969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1728.888314][T26969] RIP: 0033:0x7f754879c799 [ 1728.892834][T26969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.912475][T26969] RSP: 002b:00007f7549571028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1728.920921][T26969] RAX: ffffffffffffffda RBX: 00007f7548a15fa0 RCX: 00007f754879c799 [ 1728.928931][T26969] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1728.936931][T26969] RBP: 00007f7549571090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.944925][T26969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.952960][T26969] R13: 00007f7548a16038 R14: 00007f7548a15fa0 R15: 00007ffc0a9a4948 [ 1728.960973][T26969] [ 1729.226435][T26975] netlink: 'syz.0.6315': attribute type 10 has an invalid length. [ 1729.437072][T26975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.480435][T26975] bond0: (slave team0): Enslaving as an active interface with an up link [ 1729.924159][T20917] wlan1: Trigger new scan to find an IBSS to join [ 1730.307785][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.314652][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.705447][T27008] netlink: 'syz.1.6323': attribute type 10 has an invalid length. [ 1730.827892][T27005] IPv6: Can't replace route, no match found [ 1730.843658][T27012] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1730.905288][T27010] IPv6: Can't replace route, no match found [ 1730.920105][T27010] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1731.323815][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6326'. [ 1732.537078][T27062] netlink: 'syz.4.6334': attribute type 10 has an invalid length. [ 1732.604273][T27067] FAULT_INJECTION: forcing a failure. [ 1732.604273][T27067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.672874][T27067] CPU: 0 PID: 27067 Comm: syz.2.6335 Not tainted syzkaller #0 [ 1732.680533][T27067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1732.690735][T27067] Call Trace: [ 1732.694062][T27067] [ 1732.697028][T27067] dump_stack_lvl+0x188/0x24e [ 1732.701758][T27067] ? show_regs_print_info+0x12/0x12 [ 1732.706998][T27067] ? load_image+0x400/0x400 [ 1732.711544][T27067] ? __lock_acquire+0x7d10/0x7d10 [ 1732.716628][T27067] should_fail_ex+0x399/0x4d0 [ 1732.721394][T27067] _copy_from_user+0x2c/0x170 [ 1732.726196][T27067] __copy_msghdr+0x3b7/0x580 [ 1732.730859][T27067] ___sys_sendmsg+0x210/0x360 [ 1732.735604][T27067] ? __sys_sendmsg+0x290/0x290 [ 1732.740450][T27067] ? __lock_acquire+0x7d10/0x7d10 [ 1732.745560][T27067] __se_sys_sendmsg+0x1bb/0x2a0 [ 1732.750462][T27067] ? __x64_sys_sendmsg+0x80/0x80 [ 1732.755473][T27067] ? lockdep_hardirqs_on+0x94/0x140 [ 1732.760717][T27067] do_syscall_64+0x4c/0xa0 [ 1732.765177][T27067] ? clear_bhb_loop+0x60/0xb0 [ 1732.769989][T27067] ? clear_bhb_loop+0x60/0xb0 [ 1732.774726][T27067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1732.780660][T27067] RIP: 0033:0x7eff2399c799 [ 1732.785118][T27067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.804778][T27067] RSP: 002b:00007eff247b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1732.813266][T27067] RAX: ffffffffffffffda RBX: 00007eff23c16090 RCX: 00007eff2399c799 [ 1732.821310][T27067] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000007 [ 1732.829330][T27067] RBP: 00007eff247b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.837376][T27067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.845398][T27067] R13: 00007eff23c16128 R14: 00007eff23c16090 R15: 00007ffc04bd0b78 [ 1732.853448][T27067] [ 1732.932860][T20919] wlan1: Trigger new scan to find an IBSS to join [ 1733.395704][T27082] netlink: 'syz.3.6340': attribute type 10 has an invalid length. [ 1733.443588][T27077] IPv6: Can't replace route, no match found [ 1733.558581][T27077] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1733.893016][T20929] wlan1: Trigger new scan to find an IBSS to join [ 1734.158386][T27090] IPv6: Can't replace route, no match found [ 1734.181485][T27090] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1734.566854][T27106] netlink: 'syz.4.6348': attribute type 27 has an invalid length. [ 1734.609758][T27106] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6348'. [ 1734.759633][T27112] netlink: 'syz.3.6351': attribute type 3 has an invalid length. [ 1734.810459][T27112] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1734.995109][T27123] device macvlan1 entered promiscuous mode [ 1735.030913][T27123] FAULT_INJECTION: forcing a failure. [ 1735.030913][T27123] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.111166][T27123] CPU: 1 PID: 27123 Comm: syz.4.6353 Not tainted syzkaller #0 [ 1735.118735][T27123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1735.128863][T27123] Call Trace: [ 1735.132213][T27123] [ 1735.135196][T27123] dump_stack_lvl+0x188/0x24e [ 1735.139942][T27123] ? br_get_link_af_size_filtered+0x8e/0xc20 [ 1735.145991][T27123] ? show_regs_print_info+0x12/0x12 [ 1735.151255][T27123] ? load_image+0x400/0x400 [ 1735.156037][T27123] should_fail_ex+0x399/0x4d0 [ 1735.160780][T27123] should_failslab+0x5/0x20 [ 1735.165359][T27123] slab_pre_alloc_hook+0x59/0x310 [ 1735.170462][T27123] ? br_netlink_fini+0x30/0x30 [ 1735.175278][T27123] kmem_cache_alloc_node+0x5a/0x320 [ 1735.180519][T27123] ? if_nlmsg_size+0x5b0/0x880 [ 1735.185324][T27123] ? __alloc_skb+0xfc/0x7e0 [ 1735.189876][T27123] __alloc_skb+0xfc/0x7e0 [ 1735.194250][T27123] rtmsg_ifinfo_build_skb+0x80/0x180 [ 1735.199578][T27123] rtmsg_ifinfo+0x71/0x120 [ 1735.204035][T27123] __dev_notify_flags+0xdc/0x300 [ 1735.209203][T27123] ? __dev_change_flags+0x496/0x6a0 [ 1735.214630][T27123] ? __dev_change_flags+0x6a0/0x6a0 [ 1735.219879][T27123] ? __dev_change_flags+0x4d0/0x6a0 [ 1735.225128][T27123] ? dev_get_flags+0x1c0/0x1c0 [ 1735.230025][T27123] ? rcu_is_watching+0x11/0xa0 [ 1735.234826][T27123] ? trace_contention_end+0x5f/0x170 [ 1735.240152][T27123] dev_change_flags+0xe3/0x1a0 [ 1735.244956][T27123] dev_ifsioc+0x130/0xd40 [ 1735.249320][T27123] ? dev_ioctl+0xe80/0xe80 [ 1735.253769][T27123] ? apparmor_capable+0x12c/0x190 [ 1735.258835][T27123] ? full_name_hash+0xac/0xe0 [ 1735.263542][T27123] ? dev_load+0x1d/0x1e0 [ 1735.267816][T27123] ? dev_load+0x1d/0x1e0 [ 1735.272090][T27123] dev_ioctl+0x55e/0xe80 [ 1735.276387][T27123] sock_do_ioctl+0x245/0x320 [ 1735.281020][T27123] ? sock_show_fdinfo+0xb0/0xb0 [ 1735.285914][T27123] sock_ioctl+0x4d2/0x710 [ 1735.290292][T27123] ? sock_poll+0x410/0x410 [ 1735.294745][T27123] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1735.299724][T27123] ? security_file_ioctl+0x7c/0xa0 [ 1735.304882][T27123] ? sock_poll+0x410/0x410 [ 1735.309413][T27123] __se_sys_ioctl+0xfa/0x170 [ 1735.314047][T27123] do_syscall_64+0x4c/0xa0 [ 1735.318501][T27123] ? clear_bhb_loop+0x60/0xb0 [ 1735.323235][T27123] ? clear_bhb_loop+0x60/0xb0 [ 1735.327957][T27123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1735.333950][T27123] RIP: 0033:0x7f862db9c799 [ 1735.338440][T27123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.358114][T27123] RSP: 002b:00007f862eaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.366574][T27123] RAX: ffffffffffffffda RBX: 00007f862de15fa0 RCX: 00007f862db9c799 [ 1735.374587][T27123] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000003 [ 1735.382590][T27123] RBP: 00007f862eaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.390598][T27123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.398708][T27123] R13: 00007f862de16038 R14: 00007f862de15fa0 R15: 00007ffd71a6abf8 [ 1735.406743][T27123] [ 1735.577396][T27126] IPv6: Can't replace route, no match found [ 1735.615570][T27126] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1735.892968][T20919] wlan1: Creating new IBSS network, BSSID 46:4a:a2:61:1f:66 [ 1736.853239][T20933] wlan1: Trigger new scan to find an IBSS to join [ 1736.939511][T20927] wlan1: Trigger new scan to find an IBSS to join [ 1737.076838][T27150] IPv6: Can't replace route, no match found [ 1737.095320][T27167] FAULT_INJECTION: forcing a failure. [ 1737.095320][T27167] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1737.119616][T27167] CPU: 0 PID: 27167 Comm: syz.4.6364 Not tainted syzkaller #0 [ 1737.127190][T27167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1737.137305][T27167] Call Trace: [ 1737.140644][T27167] [ 1737.143621][T27167] dump_stack_lvl+0x188/0x24e [ 1737.148373][T27167] ? show_regs_print_info+0x12/0x12 [ 1737.153645][T27167] ? load_image+0x400/0x400 [ 1737.158217][T27167] ? __lock_acquire+0x7d10/0x7d10 [ 1737.163312][T27167] should_fail_ex+0x399/0x4d0 [ 1737.168121][T27167] prepare_alloc_pages+0x1e2/0x5f0 [ 1737.173313][T27167] __alloc_pages+0x130/0x4f0 [ 1737.177983][T27167] ? zone_statistics+0x170/0x170 [ 1737.183145][T27167] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1737.188688][T27167] bpf_prog_test_run_xdp+0xaf7/0xf10 [ 1737.194056][T27167] ? dev_put+0x80/0x80 [ 1737.198192][T27167] ? dev_put+0x80/0x80 [ 1737.202338][T27167] bpf_prog_test_run+0x31e/0x390 [ 1737.207357][T27167] __sys_bpf+0x62b/0x780 [ 1737.211656][T27167] ? bpf_link_show_fdinfo+0x380/0x380 [ 1737.217099][T27167] ? lock_chain_count+0x20/0x20 [ 1737.222047][T27167] __x64_sys_bpf+0x78/0x90 [ 1737.226528][T27167] do_syscall_64+0x4c/0xa0 [ 1737.230997][T27167] ? clear_bhb_loop+0x60/0xb0 [ 1737.235756][T27167] ? clear_bhb_loop+0x60/0xb0 [ 1737.240487][T27167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.246419][T27167] RIP: 0033:0x7f862db9c799 [ 1737.250875][T27167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.270540][T27167] RSP: 002b:00007f862eaeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1737.279007][T27167] RAX: ffffffffffffffda RBX: 00007f862de15fa0 RCX: 00007f862db9c799 [ 1737.287114][T27167] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1737.295123][T27167] RBP: 00007f862eaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.303127][T27167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.311217][T27167] R13: 00007f862de16038 R14: 00007f862de15fa0 R15: 00007ffd71a6abf8 [ 1737.319257][T27167] [ 1737.371365][T27150] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1738.315587][T27179] IPv6: Can't replace route, no match found [ 1738.356672][T27188] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1738.853215][T20929] wlan1: Creating new IBSS network, BSSID 32:0b:7a:f1:69:2b [ 1739.317494][T27214] FAULT_INJECTION: forcing a failure. [ 1739.317494][T27214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1739.422758][T27214] CPU: 1 PID: 27214 Comm: syz.4.6379 Not tainted syzkaller #0 [ 1739.430416][T27214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1739.440552][T27214] Call Trace: [ 1739.443880][T27214] [ 1739.446867][T27214] dump_stack_lvl+0x188/0x24e [ 1739.451639][T27214] ? show_regs_print_info+0x12/0x12 [ 1739.456918][T27214] ? load_image+0x400/0x400 [ 1739.461487][T27214] ? __lock_acquire+0x7d10/0x7d10 [ 1739.466594][T27214] ? snprintf+0xe5/0x140 [ 1739.470900][T27214] should_fail_ex+0x399/0x4d0 [ 1739.475659][T27214] _copy_to_user+0x2c/0x130 [ 1739.480486][T27214] simple_read_from_buffer+0xe3/0x150 [ 1739.485970][T27214] proc_fail_nth_read+0x1a6/0x220 [ 1739.491201][T27214] ? proc_fault_inject_write+0x310/0x310 [ 1739.496905][T27214] ? fsnotify_perm+0x248/0x550 [ 1739.501831][T27214] ? proc_fault_inject_write+0x310/0x310 [ 1739.507574][T27214] vfs_read+0x2de/0xa00 [ 1739.511857][T27214] ? kernel_read+0x1e0/0x1e0 [ 1739.516712][T27214] ? __fget_files+0x28/0x4b0 [ 1739.521371][T27214] ? __fget_files+0x28/0x4b0 [ 1739.526042][T27214] ? __fget_files+0x43d/0x4b0 [ 1739.530874][T27214] ? __fdget_pos+0x2ae/0x360 [ 1739.535533][T27214] ? ksys_read+0x71/0x250 [ 1739.539926][T27214] ksys_read+0x14c/0x250 [ 1739.544213][T27214] ? vfs_write+0xa30/0xa30 [ 1739.548762][T27214] ? lockdep_hardirqs_on+0x94/0x140 [ 1739.554019][T27214] do_syscall_64+0x4c/0xa0 [ 1739.558474][T27214] ? clear_bhb_loop+0x60/0xb0 [ 1739.563194][T27214] ? clear_bhb_loop+0x60/0xb0 [ 1739.567910][T27214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.573859][T27214] RIP: 0033:0x7f862db5cfce [ 1739.578387][T27214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1739.598023][T27214] RSP: 002b:00007f862eaeafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1739.606464][T27214] RAX: ffffffffffffffda RBX: 00007f862eaeb6c0 RCX: 00007f862db5cfce [ 1739.614580][T27214] RDX: 000000000000000f RSI: 00007f862eaeb0a0 RDI: 0000000000000003 [ 1739.622641][T27214] RBP: 00007f862eaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.630651][T27214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.638660][T27214] R13: 00007f862de16038 R14: 00007f862de15fa0 R15: 00007ffd71a6abf8 [ 1739.646739][T27214] [ 1740.101707][T27226] IPv6: Can't replace route, no match found [ 1740.527906][T27226] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1740.558813][T27235] IPv6: Can't replace route, no match found [ 1740.629747][T27228] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1740.682238][T27239] IPv6: Can't replace route, no match found [ 1740.751235][T27246] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1740.934243][T20929] wlan1: Trigger new scan to find an IBSS to join [ 1740.940894][T20929] wlan1: Trigger new scan to find an IBSS to join [ 1741.908673][T27272] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6394'. [ 1742.807500][T27289] IPv6: Can't replace route, no match found [ 1742.829662][T27289] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1742.853031][T20927] wlan1: Trigger new scan to find an IBSS to join [ 1743.144343][T27298] IPv6: Can't replace route, no match found [ 1743.180408][T27298] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1743.214248][T27300] IPv6: Can't replace route, no match found [ 1743.230669][T27300] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1743.892977][ T4521] wlan1: Trigger new scan to find an IBSS to join [ 1744.003132][T20933] wlan1: Creating new IBSS network, BSSID 5e:54:dc:cb:35:dc [ 1744.853099][T20915] wlan1: Trigger new scan to find an IBSS to join [ 1745.334842][T27343] IPv6: Can't replace route, no match found [ 1745.488557][T27343] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1745.731264][T27355] FAULT_INJECTION: forcing a failure. [ 1745.731264][T27355] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.778465][T27359] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.6421'. [ 1745.803207][T27355] CPU: 0 PID: 27355 Comm: syz.2.6423 Not tainted syzkaller #0 [ 1745.810765][T27355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1745.820867][T27355] Call Trace: [ 1745.824190][T27355] [ 1745.827155][T27355] dump_stack_lvl+0x188/0x24e [ 1745.831895][T27355] ? show_regs_print_info+0x12/0x12 [ 1745.837154][T27355] ? load_image+0x400/0x400 [ 1745.841712][T27355] ? __might_sleep+0xd0/0xd0 [ 1745.846377][T27355] ? __lock_acquire+0x7d10/0x7d10 [ 1745.851636][T27355] should_fail_ex+0x399/0x4d0 [ 1745.856367][T27355] should_failslab+0x5/0x20 [ 1745.860922][T27355] slab_pre_alloc_hook+0x59/0x310 [ 1745.866000][T27355] kmem_cache_alloc+0x56/0x2f0 [ 1745.870891][T27355] ? sk_prot_alloc+0x57/0x210 [ 1745.875622][T27355] sk_prot_alloc+0x57/0x210 [ 1745.880179][T27355] ? sk_alloc+0x20/0x340 [ 1745.884470][T27355] sk_alloc+0x36/0x340 [ 1745.888585][T27355] ? rcu_read_unlock+0x8c/0xa0 [ 1745.893403][T27355] unix_create1+0xb3/0x710 [ 1745.897856][T27355] unix_create+0x143/0x1f0 [ 1745.902306][T27355] __sock_create+0x4a2/0x940 [ 1745.906941][T27355] __sys_socketpair+0x1bd/0x540 [ 1745.911831][T27355] __x64_sys_socketpair+0x97/0xb0 [ 1745.916935][T27355] do_syscall_64+0x4c/0xa0 [ 1745.921390][T27355] ? clear_bhb_loop+0x60/0xb0 [ 1745.926100][T27355] ? clear_bhb_loop+0x60/0xb0 [ 1745.930841][T27355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.936768][T27355] RIP: 0033:0x7eff2399c799 [ 1745.941214][T27355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.960851][T27355] RSP: 002b:00007eff247d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1745.969309][T27355] RAX: ffffffffffffffda RBX: 00007eff23c15fa0 RCX: 00007eff2399c799 [ 1745.977322][T27355] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1745.985328][T27355] RBP: 00007eff247d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.993328][T27355] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.001326][T27355] R13: 00007eff23c16038 R14: 00007eff23c15fa0 R15: 00007ffc04bd0b78 [ 1746.009444][T27355] [ 1746.200478][T27356] IPv6: Can't replace route, no match found [ 1746.274257][T27363] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1746.863039][T20915] wlan1: Creating new IBSS network, BSSID f6:5d:68:03:25:19 [ 1747.893197][T20927] wlan1: Trigger new scan to find an IBSS to join [ 1748.117762][T27399] IPv6: Can't replace route, no match found [ 1748.148839][T27399] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1748.791058][T27410] IPv6: Can't replace route, no match found [ 1748.864829][T27413] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1749.950687][T27440] netlink: 'syz.1.6447': attribute type 2 has an invalid length. [ 1750.054147][T27440] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6447'. [ 1750.134373][T27440] pimreg: tun_chr_ioctl cmd 1074812118 [ 1750.821145][T27457] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6451'. [ 1750.852767][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1751.804001][T27466] IPv6: Can't replace route, no match found [ 1751.898816][T27466] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1753.873350][T27503] IPv6: Can't replace route, no match found [ 1754.244116][T27510] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1754.351240][T27515] IPv6: Can't replace route, no match found [ 1754.375570][T27515] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1754.989021][T27531] netlink: 'syz.3.6476': attribute type 10 has an invalid length. [ 1755.374021][T27542] netlink: 'syz.4.6478': attribute type 2 has an invalid length. [ 1755.410443][T27542] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6478'. [ 1755.505556][T27542] pimreg: tun_chr_ioctl cmd 1074812118 [ 1756.007881][T27554] FAULT_INJECTION: forcing a failure. [ 1756.007881][T27554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.069926][T27554] CPU: 1 PID: 27554 Comm: syz.1.6481 Not tainted syzkaller #0 [ 1756.077484][T27554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1756.087683][T27554] Call Trace: [ 1756.091051][T27554] [ 1756.094025][T27554] dump_stack_lvl+0x188/0x24e [ 1756.098789][T27554] ? show_regs_print_info+0x12/0x12 [ 1756.104065][T27554] ? load_image+0x400/0x400 [ 1756.108633][T27554] ? __lock_acquire+0x7d10/0x7d10 [ 1756.113727][T27554] should_fail_ex+0x399/0x4d0 [ 1756.118498][T27554] _copy_from_user+0x2c/0x170 [ 1756.123229][T27554] iovec_from_user+0x143/0x360 [ 1756.128047][T27554] __import_iovec+0x6d/0x500 [ 1756.132704][T27554] import_iovec+0x6f/0xa0 [ 1756.137097][T27554] ___sys_sendmsg+0x252/0x360 [ 1756.141919][T27554] ? __sys_sendmsg+0x290/0x290 [ 1756.146853][T27554] ? __lock_acquire+0x7d10/0x7d10 [ 1756.151957][T27554] __se_sys_sendmsg+0x1bb/0x2a0 [ 1756.156873][T27554] ? __x64_sys_sendmsg+0x80/0x80 [ 1756.161892][T27554] ? lockdep_hardirqs_on+0x94/0x140 [ 1756.167140][T27554] do_syscall_64+0x4c/0xa0 [ 1756.171612][T27554] ? clear_bhb_loop+0x60/0xb0 [ 1756.176351][T27554] ? clear_bhb_loop+0x60/0xb0 [ 1756.181068][T27554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1756.186989][T27554] RIP: 0033:0x7f754879c799 [ 1756.191447][T27554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.211108][T27554] RSP: 002b:00007f7549571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1756.219559][T27554] RAX: ffffffffffffffda RBX: 00007f7548a15fa0 RCX: 00007f754879c799 [ 1756.227567][T27554] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1756.235694][T27554] RBP: 00007f7549571090 R08: 0000000000000000 R09: 0000000000000000 [ 1756.243706][T27554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.251711][T27554] R13: 00007f7548a16038 R14: 00007f7548a15fa0 R15: 00007ffc0a9a4948 [ 1756.259730][T27554] [ 1756.774516][T27565] IPv6: Can't replace route, no match found [ 1756.789412][T27565] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1756.863108][ T4521] wlan1: Trigger new scan to find an IBSS to join [ 1757.544094][T27578] IPv6: Can't replace route, no match found [ 1757.564094][T27582] IPv6: Can't replace route, no match found [ 1757.596847][T27578] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1757.695750][T27582] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1758.334548][T27608] netlink: 'syz.3.6497': attribute type 2 has an invalid length. [ 1758.375468][T27608] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6497'. [ 1758.509137][T27608] netlink: 'syz.3.6497': attribute type 3 has an invalid length. [ 1758.526363][T27608] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6497'. [ 1758.933327][T20919] wlan1: Trigger new scan to find an IBSS to join [ 1759.171029][T27619] IPv6: Can't replace route, no match found [ 1759.219341][T27619] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1759.721350][T27634] IPv6: Can't replace route, no match found [ 1759.785236][T27634] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1759.903110][T20929] wlan1: Trigger new scan to find an IBSS to join [ 1760.169079][T27653] netlink: 'syz.1.6511': attribute type 2 has an invalid length. [ 1760.271116][T27653] netlink: 'syz.1.6511': attribute type 9 has an invalid length. [ 1760.343912][T27653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6511'. [ 1760.953836][T27668] netlink: 'syz.3.6515': attribute type 2 has an invalid length. [ 1760.961839][T27668] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6515'. [ 1761.078531][T27668] pimreg: tun_chr_ioctl cmd 1074812118 [ 1761.903064][T20927] wlan1: Trigger new scan to find an IBSS to join [ 1762.755296][T27697] IPv6: Can't replace route, no match found [ 1762.809372][T27697] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1763.110049][T24936] Bluetooth: hci4: command 0x0406 tx timeout [ 1763.663327][T27747] netlink: 'syz.4.6530': attribute type 2 has an invalid length. [ 1763.684656][T27747] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1763.958200][T27747] netlink: 'syz.4.6530': attribute type 3 has an invalid length. [ 1763.996317][T27747] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1764.864453][T20929] wlan1: Trigger new scan to find an IBSS to join [ 1765.159397][T27767] IPv6: Can't replace route, no match found [ 1765.164178][T20917] wlan1: Creating new IBSS network, BSSID aa:37:1c:4a:00:70 [ 1765.185752][T27767] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1765.195568][T20929] ------------[ cut here ]------------ [ 1765.195683][T20929] WARNING: CPU: 0 PID: 20929 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 1765.195758][T20929] Modules linked in: [ 1765.195780][T20929] CPU: 0 PID: 20929 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 1765.195807][T20929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1765.195826][T20929] Workqueue: cfg80211 cfg80211_event_work [ 1765.195867][T20929] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1765.195908][T20929] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 51 ee f7 0f 0b eb bb e8 d8 51 ee f7 <0f> 0b eb b2 e8 cf 51 ee f7 0f 0b e9 77 fd ff ff e8 c3 51 ee f7 0f [ 1765.195938][T20929] RSP: 0018:ffffc9000d617aa0 EFLAGS: 00010293 [ 1765.195966][T20929] RAX: ffffffff899420d8 RBX: dffffc0000000000 RCX: ffff88802ced5940 [ 1765.195988][T20929] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 1765.196009][T20929] RBP: ffffc9000d617b70 R08: ffffffff90af62a7 R09: 1ffffffff215ec54 [ 1765.196030][T20929] R10: dffffc0000000000 R11: fffffbfff215ec55 R12: ffff888082c63618 [ 1765.196052][T20929] R13: 1ffff92001ac2f5c R14: 000000000000001f R15: ffff8880685ccc90 [ 1765.196074][T20929] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1765.196098][T20929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1765.196118][T20929] CR2: 0000001b32e21ff8 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 1765.196143][T20929] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1765.196161][T20929] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1765.196180][T20929] Call Trace: [ 1765.196192][T20929] [ 1765.196207][T20929] ? mutex_lock_nested+0x10/0x10 [ 1765.196250][T20929] ? trace_rdev_return_void+0x240/0x240 [ 1765.196302][T20929] cfg80211_process_wdev_events+0x3ad/0x550 [ 1765.196355][T20929] cfg80211_process_rdev_events+0x9d/0x110 [ 1765.196397][T20929] ? process_one_work+0x7b0/0x1160 [ 1765.196428][T20929] cfg80211_event_work+0x2b/0x40 [ 1765.196465][T20929] process_one_work+0x8a2/0x1160 [ 1765.396090][T20929] ? worker_detach_from_pool+0x240/0x240 [ 1765.401785][T20929] ? _raw_spin_lock_irq+0x86/0xf0 [ 1765.406946][T20929] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1765.412032][T20929] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1765.417704][T20929] ? kthread_data+0x4b/0xc0 [ 1765.422290][T20929] worker_thread+0xaa2/0x1270 [ 1765.427213][T20929] kthread+0x29d/0x330 [ 1765.431333][T20929] ? worker_clr_flags+0x1a0/0x1a0 [ 1765.436478][T20929] ? kthread_blkcg+0xd0/0xd0 [ 1765.441140][T20929] ret_from_fork+0x1f/0x30 [ 1765.445708][T20929] [ 1765.448777][T20929] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1765.456099][T20929] CPU: 0 PID: 20929 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 1765.463862][T20929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1765.473978][T20929] Workqueue: cfg80211 cfg80211_event_work [ 1765.479767][T20929] Call Trace: [ 1765.483082][T20929] [ 1765.486049][T20929] dump_stack_lvl+0x188/0x24e [ 1765.490786][T20929] ? memcpy+0x3c/0x60 [ 1765.494821][T20929] ? show_regs_print_info+0x12/0x12 [ 1765.500152][T20929] ? load_image+0x400/0x400 [ 1765.504711][T20929] panic+0x2e5/0x730 [ 1765.508641][T20929] ? bpf_jit_dump+0xd0/0xd0 [ 1765.513183][T20929] ? ret_from_fork+0x1f/0x30 [ 1765.517810][T20929] __warn+0x2f8/0x4f0 [ 1765.521813][T20929] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1765.527427][T20929] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1765.533013][T20929] report_bug+0x2ba/0x4f0 [ 1765.537380][T20929] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1765.542972][T20929] handle_bug+0x3a/0x70 [ 1765.547161][T20929] exc_invalid_op+0x16/0x40 [ 1765.551701][T20929] asm_exc_invalid_op+0x16/0x20 [ 1765.556578][T20929] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1765.562767][T20929] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 51 ee f7 0f 0b eb bb e8 d8 51 ee f7 <0f> 0b eb b2 e8 cf 51 ee f7 0f 0b e9 77 fd ff ff e8 c3 51 ee f7 0f [ 1765.582410][T20929] RSP: 0018:ffffc9000d617aa0 EFLAGS: 00010293 [ 1765.588510][T20929] RAX: ffffffff899420d8 RBX: dffffc0000000000 RCX: ffff88802ced5940 [ 1765.596510][T20929] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 1765.604508][T20929] RBP: ffffc9000d617b70 R08: ffffffff90af62a7 R09: 1ffffffff215ec54 [ 1765.612537][T20929] R10: dffffc0000000000 R11: fffffbfff215ec55 R12: ffff888082c63618 [ 1765.620538][T20929] R13: 1ffff92001ac2f5c R14: 000000000000001f R15: ffff8880685ccc90 [ 1765.628554][T20929] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1765.634182][T20929] ? mutex_lock_nested+0x10/0x10 [ 1765.639166][T20929] ? trace_rdev_return_void+0x240/0x240 [ 1765.644759][T20929] cfg80211_process_wdev_events+0x3ad/0x550 [ 1765.650696][T20929] cfg80211_process_rdev_events+0x9d/0x110 [ 1765.656543][T20929] ? process_one_work+0x7b0/0x1160 [ 1765.661685][T20929] cfg80211_event_work+0x2b/0x40 [ 1765.666865][T20929] process_one_work+0x8a2/0x1160 [ 1765.671846][T20929] ? worker_detach_from_pool+0x240/0x240 [ 1765.677511][T20929] ? _raw_spin_lock_irq+0x86/0xf0 [ 1765.682567][T20929] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1765.687622][T20929] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1765.693193][T20929] ? kthread_data+0x4b/0xc0 [ 1765.697733][T20929] worker_thread+0xaa2/0x1270 [ 1765.702466][T20929] kthread+0x29d/0x330 [ 1765.706557][T20929] ? worker_clr_flags+0x1a0/0x1a0 [ 1765.711655][T20929] ? kthread_blkcg+0xd0/0xd0 [ 1765.716292][T20929] ret_from_fork+0x1f/0x30 [ 1765.720757][T20929] [ 1765.724377][T20929] Kernel Offset: disabled [ 1765.728785][T20929] Rebooting in 86400 seconds..