last executing test programs: 23m45.520389991s ago: executing program 3 (id=213): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000e4a2df45af0f8be93221e1ae64307c72e09ef32cb682649c859ea0412988a185eb2e2044f8c7d34b141c75522665544fb1a8633acd7d951a5f205b4476d1ef66c6ecb24417ef73f7a1314cb8d6dd03f727e5d5000625aa35e21fa7b719b28f00dada6d0d322071252497b919abf5fef50b67f7c9ec14d6740f34b4c784c6e70483", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000000000000000000000000000000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09001d0004000000080000000a0000000200d658f38d698eecc6b9bc62318429670eb5df3e847c3c6dd33c3011bea889357d31b65c54462bd27f1311a482f4743412265312f27ce078e2da8e617b479c45097105be212da66bccf54d4eec205c5167d9f75adb4fac19085362e118e554d2b5bc5235dfed4687505eb91936156de04700f3c69219c029000000000000000000000000004d83eadcc49aec9d1611382b68e1a93c8b664ebf", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x40}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0xe9, 0x0, &(0x7f0000000680)="af4b4e004f712f792e4baf873e3d8fd2d7c324a6240eeb0064e5391b21fe6ea03592d22129a5a1c165da58546a7bb0ca26c87f2446f469853b28a1af06fcdfe33dd4d731709da0abe0d28b67c5ec2d476bd5b1d2344750931cfd949e572e2c8e4a1e524cde9b43e02155dae5f72f4284d9e4af955023fbb6c28e4bc1bd9908a5e33607b96ac2bb01a6f72dc005d2fca68a0db585bd75361562e5091c85adf3f547883082167cc2bf4b73ab5d723b6023e286ded36afdba2d583c76c58cf73d893e3352bc1ed20d73b3a4e60411851aee852a39b319d435bf06df0294a1665902c6f5bbde62da2bd994", 0x0, 0x9, 0x0, 0x87, 0x0, &(0x7f0000000780)="85083934becad78c4513e2f7691d780c2b689baee50e03ac79175fd46061ce0a3f6bf92187c03f82d7a267ac2354d2c3220087fe82fcdef8e0d1f7ffe4df7f6e7b3b8ac8d727d9f9c9ab36d84e3f9dc9905f32c96afee8fa48c4d880238c7feb2755385032292403ee731761835912d88a0f4c25e8375546d58e61fc7830235bfffef82a1cd547", 0x0, 0x2, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) r7 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) syz_clone(0x8d008000, 0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 23m44.503079076s ago: executing program 3 (id=220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000640), &(0x7f0000000800)}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'veth0_macvtap\x00', @multicast}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000840)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0x22, 0x0, &(0x7f00000007c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m43.178501099s ago: executing program 3 (id=226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="7a0a000000004000001818130020b00275d92d9891da3ee0bf8312ed9e33e8253faa978264134f35a95b1880bba398e628e69143aa021f5d296770d6139927ace64c973e8c5fa2547b8dbba5ebed2c0736471204b8e07f662fc80302fb663ef7a9150e7699301708072dc233f6acfcc1516f70d47697631aa029a9439903a2ddcf30177fe2e25933e05e3949a4e67a9a7b2659749eff72bff63a87d2dd09c265201b272aff68392cd3f194f0454ac642ef5d2eaecfcefcf0982f"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x3, 0x0, 0x0, 0xa, 0x6, 0x8, 0xffffffffffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0x84, &(0x7f0000000680)=""/132, 0x40f00, 0x68, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x453e3be9, 0x400, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[{0x1, 0x1, 0x9}, {0x1, 0x4, 0x5, 0x5}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000089000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0100000000000000fffffff70030615f5f002e305f"], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) 23m42.74388319s ago: executing program 3 (id=229): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0], 0x0, 0xec, &(0x7f0000000a40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_ext={0x1c, 0xd, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, [@ldst={0x2, 0x1, 0x4, 0x1, 0x7, 0x10, 0x10}, @ldst={0x0, 0x1, 0x2, 0x2, 0x7, 0xfffffffffffffff0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @exit, @alu={0x7, 0x0, 0x1, 0x9, 0x4, 0x10, 0x10}, @alu={0x4, 0x1, 0x8, 0xd, 0x7, 0x30, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000880)='GPL\x00', 0x80, 0x95, &(0x7f00000008c0)=""/149, 0x40f00, 0x60, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000c80)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0x8, 0xe, 0x3}, 0x10, 0x1420d, r1, 0x4, &(0x7f0000000d00)=[r1, r1, r1], &(0x7f0000000d40)=[{0x5, 0x2, 0x6, 0xc}, {0x2, 0x5, 0xf, 0x3}, {0x0, 0x5, 0x10, 0x3}, {0x4, 0x1, 0x8, 0x4}], 0x10, 0x2}, 0x94) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000400), &(0x7f0000000440)='%+9llu \x00'}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000480), 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x58000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) close(r6) close(0x4) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000e40), 0xb, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x3, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) 23m42.286729461s ago: executing program 3 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="d402000020000000180000002000000000000000000000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) 23m41.9495338s ago: executing program 3 (id=234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000000001000008"], 0x48) socket$kcm(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, 0x0, &(0x7f0000000600)='GPL\x00', 0x5}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r7 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000800)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="14000000320081024e19b8f7f30cb9e717e643eb", 0x14}], 0x1}, 0x4000) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0xe, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="3eaa000000ff09007910990005000000de00000000000000edc77b1cda9af0f46c05804dae9174e8d64a3cf03590bdef"], &(0x7f0000000480)='GPL\x00'}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x3, [@fwd={0x2}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0xf, [{0x5, 0x2}, {0x4, 0x3, 0xffe}, {0x5, 0x1, 0x1000}, {0x4, 0x5, 0xd71}, {0xc, 0x1, 0x10}, {0xe, 0x0, 0x1}, {0x1, 0x0, 0x8001}, {0x9, 0x5, 0x8080000}]}, @struct={0xb, 0xa, 0x0, 0x4, 0x0, 0x6, [{0xf, 0x0, 0x3ff}, {0x7, 0x3, 0x8}, {0x5, 0x0, 0x2}, {0xd, 0x5, 0xb}, {0x2, 0x1, 0x2}, {0x10, 0x5, 0x80}, {0x6, 0x4, 0x3}, {0xb, 0x5, 0x5}, {0x0, 0x5, 0x3}, {0xd, 0x5, 0xa}]}]}, {0x0, [0x30]}}, &(0x7f0000000e40)=""/22, 0x117, 0x16, 0x0, 0x400}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{r9, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_ext={0x1c, 0x17, &(0x7f0000001980)=ANY=[@ANYBLOB="185100000a000000000000000000000018200000", @ANYRES32, @ANYBLOB="00000000060000001d7a0c00f0ffffff186b00000a000000000000000800000018290000", @ANYRES32, @ANYBLOB="000000000300000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000000c000000b7000000000000001800000009000000000000000880000018120000ff000000000000000000000080bf84af43495f7eab3c721929740bd51a6eda653b119c5593fe385c00000000dc12924b5a5c24566007334ebd2393c99adcb4294a61bcdaa629380ceff1abe1c2cf2c16ec37c2e432a55b596ded9682d1bade493b045b014b9e38d82e45a47530e7bf43b32a4ab0dfe1df10281cfe98dedc71a2c18fd7913363071234e2fb9d485d1e7db59e80acacc4a8f2a1832707776f1a12da018665442a52b396e0b70aea290ff75366780dbabb84b2", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186300000d00000000000000f1000000"], &(0x7f0000000b00)='syzkaller\x00', 0x1, 0x40, &(0x7f0000000b40)=""/64, 0x41100, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000ec0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x5, 0x8, 0xfffffd87}, 0x10, 0x6db2, r5, 0x6, &(0x7f0000001000)=[r2, r2, r11, r2, r2, r2, r0], &(0x7f0000001040)=[{0x0, 0x5, 0xb, 0x1}, {0x4, 0x2, 0x7, 0x9}, {0x4, 0x2, 0x4, 0x8}, {0x5, 0x1, 0x7, 0x7}, {0x0, 0x2, 0x7, 0xc}, {0x1, 0x4, 0xe, 0x5}], 0x10, 0x3}, 0x94) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_clone(0x44000080, &(0x7f00000001c0)="13d01abf", 0x4, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="c093c4108edd9c0dee0be75621b25ef71f5e607e8186a523314c79ec6e3643c84f8713d1816129155ea37733c4f309ab268680a8a5c987faf1") r12 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRESDEC=r10], 0x9a) 23m26.204856196s ago: executing program 32 (id=234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000000001000008"], 0x48) socket$kcm(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, 0x0, &(0x7f0000000600)='GPL\x00', 0x5}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r7 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000800)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="14000000320081024e19b8f7f30cb9e717e643eb", 0x14}], 0x1}, 0x4000) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0xe, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="3eaa000000ff09007910990005000000de00000000000000edc77b1cda9af0f46c05804dae9174e8d64a3cf03590bdef"], &(0x7f0000000480)='GPL\x00'}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x3, [@fwd={0x2}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0xf, [{0x5, 0x2}, {0x4, 0x3, 0xffe}, {0x5, 0x1, 0x1000}, {0x4, 0x5, 0xd71}, {0xc, 0x1, 0x10}, {0xe, 0x0, 0x1}, {0x1, 0x0, 0x8001}, {0x9, 0x5, 0x8080000}]}, @struct={0xb, 0xa, 0x0, 0x4, 0x0, 0x6, [{0xf, 0x0, 0x3ff}, {0x7, 0x3, 0x8}, {0x5, 0x0, 0x2}, {0xd, 0x5, 0xb}, {0x2, 0x1, 0x2}, {0x10, 0x5, 0x80}, {0x6, 0x4, 0x3}, {0xb, 0x5, 0x5}, {0x0, 0x5, 0x3}, {0xd, 0x5, 0xa}]}]}, {0x0, [0x30]}}, &(0x7f0000000e40)=""/22, 0x117, 0x16, 0x0, 0x400}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{r9, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_ext={0x1c, 0x17, &(0x7f0000001980)=ANY=[@ANYBLOB="185100000a000000000000000000000018200000", @ANYRES32, @ANYBLOB="00000000060000001d7a0c00f0ffffff186b00000a000000000000000800000018290000", @ANYRES32, @ANYBLOB="000000000300000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000000c000000b7000000000000001800000009000000000000000880000018120000ff000000000000000000000080bf84af43495f7eab3c721929740bd51a6eda653b119c5593fe385c00000000dc12924b5a5c24566007334ebd2393c99adcb4294a61bcdaa629380ceff1abe1c2cf2c16ec37c2e432a55b596ded9682d1bade493b045b014b9e38d82e45a47530e7bf43b32a4ab0dfe1df10281cfe98dedc71a2c18fd7913363071234e2fb9d485d1e7db59e80acacc4a8f2a1832707776f1a12da018665442a52b396e0b70aea290ff75366780dbabb84b2", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186300000d00000000000000f1000000"], &(0x7f0000000b00)='syzkaller\x00', 0x1, 0x40, &(0x7f0000000b40)=""/64, 0x41100, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000ec0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x5, 0x8, 0xfffffd87}, 0x10, 0x6db2, r5, 0x6, &(0x7f0000001000)=[r2, r2, r11, r2, r2, r2, r0], &(0x7f0000001040)=[{0x0, 0x5, 0xb, 0x1}, {0x4, 0x2, 0x7, 0x9}, {0x4, 0x2, 0x4, 0x8}, {0x5, 0x1, 0x7, 0x7}, {0x0, 0x2, 0x7, 0xc}, {0x1, 0x4, 0xe, 0x5}], 0x10, 0x3}, 0x94) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_clone(0x44000080, &(0x7f00000001c0)="13d01abf", 0x4, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="c093c4108edd9c0dee0be75621b25ef71f5e607e8186a523314c79ec6e3643c84f8713d1816129155ea37733c4f309ab268680a8a5c987faf1") r12 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRESDEC=r10], 0x9a) 15m43.81345734s ago: executing program 5 (id=2321): socket$kcm(0xa, 0x3, 0x73) (async) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0a00ff0000000071108a000000000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0x94) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xf, &(0x7f00000009c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002600)=ANY=[@ANYRESDEC=0x0], 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002600)=ANY=[@ANYRESDEC=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x11, 0x18, &(0x7f00000024c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@lld, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000002580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000025c0)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000025c0)={r4}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x4, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x2, 0xc3, &(0x7f0000000c40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x4, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x2, 0xc3, &(0x7f0000000c40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$kcm(0xa, 0x1, 0x0) (async) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000d40)={&(0x7f0000000d80)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) recvmsg$kcm(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/196, 0xc4}], 0x1}, 0x10000) (async) recvmsg$kcm(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/196, 0xc4}], 0x1}, 0x10000) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000001000)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001080)="f0cdb8cb57d256ea2c18a7b440749fbc8b9e6c73577c7908ccf2075a68b0f86567acc3764d5f0095eb6fe5192cc35ec6af930711904ca67c51a287da528889aa2f154a4a0b49f0c2", 0x48}, {&(0x7f0000001100)="70d159d6fa798956cf86c1585e3651ef37127aec52fbc6fad842554737e7465509e50308f6d3e069a21b43bfc486c153752a0b69503d33794b6355d1a35caf3d341ff7e1b60833140b6b18d3ffcff3e37ac439b24944995968cdc0dbe7ea3f9621ca16fdfb06cc64e9b9fbfdf48f00e79b7c991c2a3a9fa6652b846b08b56d467055f12b143066eae569240abdb4f6588ef2de44c7433a0253fe40f75cbc448f12fd5fbf77e3c2e6932c1d9a02da2a96c36dc76589e50f63d92fbfd3640464b8d9cb8deb8a0eea", 0xc7}, {&(0x7f0000001200)="d016ee9d1a99ed370f0dd2a76fd20e4221e7cd841b7980bf84e6503e69522a106c368c3d7949cd961121e009716392b92f8f3149d03b587430cbe6db1eb35ea572533aa627105e22c4c648bb1db447dd77c61db22fba2a8695d60c32083c7cc6cc4d321ea6bd1accedde2136b396f258ff462bb294fe314720c07af1621190fa59f96ed6c5f847daeb55614dcab5f1802dc459cac78f65b55c0a3a1f6ec17f8e17743947c50c26bcd129e4e158959b2936c4ed0951e1a54d5e4f68ff7c9a177d918c2048d6362109395fe6ad6399fef581d244edb1706e42e130d9fbb23abc9e9c69f7dc286fbd331591048eda841755318fd111d0f7755c24dbf026b57bc59c6bb381fbf82710b4865212c72459a9916bd8d4a0fe94122af7d0a10886154fa3aa5c1fa57107819580ee78ed6bf83b010d6336d7e9be804219ff04fe4714b38def14e1d07712ae65ee79bcb394e90b30fb5c7f534edc50d2c18052e627900bc35780930fba8923db7ffa3db8f57e8adbc66238a203c0e9dd2ab48eb43dc4263eff7b97cd396e50bad0cbf08f3bad1ddaea1c1a999e35c9a1b1e6ceeba3993bb3d98bfbaabaffa2e0a2ae06011a4704d4d64e5c809ccff22ac4c8fdc54afab0dee9fa4aae5cc70bb0b6af8c9b79c7fe6c4f34e9cf860b5518ebef671ac26f0416c980a237d02c34a7f42b7473551b087c7984533772493ad4311198d0f2c33e1252251ed2f86b740e784f168fcd1ba64a087369ef41697c01df9a8279b209c2ce9b288dcaf98c87f16ebe14db0ad913909a061963348305e054f8d23ad3fe24599b103d606eac2b47a7a3e51362204472615419468850dd3b507987a7a509b6dc46eaf99aed3b145fe09428c1b936d32dab2504af883b48a7c2cf39a70b1f8ff61153a0b1ebd156faff0bbd0017d07e55ce30c4680992e38086b6a60e4399528f2d25c242a9fd578e68f9a1ec9fea77b37af63e2a65e58638b6afe00e3d960dd121096d023db69ce009e5ffb05b3d53b02414addead8e0e2c7131a0eeac0ac15766be0baec8cee5416d4d3c31cfb4ef32da234a69c736e291b22f4be335d4aa1ff1b3cb194399050cfe15f2f0668dec75d63f2f70b39db9d25de04f922ae49937d628bc3f266272b560c548e612b0ff43a1e0163f3a67ce692148b9c616c677b0f992e241d3f2b71a725987acbfea5356e96d210d58e309502298ca9b8e27bdaf26e34f126d9804648d6341ab004f9a22b51a8af72eff660b2f829caed608d97d89caca76b609d1c9963bbda59f47219d59482a89706b1470fa03090514cb5e6e6aaf013b7ab7f8d2fa426a3bf84fca4eebac78111ff9d0190ebadfc87dabaece330e05f8b488c10533f468d68dc771d33359ab70c22694c695979a3d75827c522bbce2e74dfd49dff762c1dc9bcae4ab738157aae4927096273b38e0cb0a67c8bed6ce056969168440b830652a39a8806e4d3367e936c4cad5fbda3deb176cd66f20ee8c37bf4e7081e97bc8592851e96cbff8424b7c7b5ea4c8e00b5517c6c9c34317e76b6f0fc39495bc0ee21f43f1344dc9558b0dc6e82c0b2a796ffefda67b07401a79ccf1819f382797b73572c5228fd3917be999e3fe10ddf3b5c21e364b42e58384b6f0d4ca435da787ea997484a22dfff9bcea25c2687690a4c4a1bcad97a998369bb3bb13e0176c26593ebfc283f5898c57f2484b81e90f45af2c1038e546654c3359b0ad367b99fe51d85af437bd8e34fc3084d56c9b74f51dbd8327d30b9742182194d25397b20ef4d84a83f024eb79317ed0959e710575ed5911d036c301a73c20d88fc828d7cb43bde1bffc0133eaefa2cd3421c76efc380ac989db50711e8517cdb0d5ac367a3ec791ea1dff9b1b46ebc0a122d828d31b7fb7a7776ec01130bde8ace1faafbf4549a1ec0eadde1d4d01c1f3df78f1e28c3e34a500660def901ac4fd1efc90075c73d3e6ab77f4b7329f4f62eecb527b516d48eedfcff9f4ee9efaa947f6efa3b505bf1661821feb521f121d840a746eff9b930767e401f1b1d75d7e4914367bf81a8a2acfa5017b3febd554dd7ba694e30864a31195622290bb80ac8c2de95fe0d1e12ac2dc7565b33f89334ae552a2d8cf6125bfad749705c6c6bf92123bbc17ba17cb515d7b0356881c98dc58ac7e6c6242fa842c9ea27103781200da69543f3c45be4947e3fb77562f936f91a5827a11f0efc4f5b5bcabf4d5c19cf755356d0c3e22354c1297b34cac644a1222b9f791f24dcc044c996425e22363fe74f2b7c7f339ff22535282c6e524e4c1c5b9260d0777bb13164834d2417a2345a32a8a0cad82d8674f44b35bf0c0d85ce7a77432e3f4d437afb306a32139deb7247acd3ad908e6211a756f4c42c289524c06697ec9032e48ed8ffa16b3a7d992ec93b1f0cfe0d0bd6f0eb7990368a9c38434789e96916ae91ece6dc18b0e7b7433dc06a82bf376a2104cbc73ba908980e2ac7d161c240f46612b568709cc90f16c3c3b4d540453bea730822b892e3523b6005dd368ae74e99316b6129bfcb0487e05bc2c24c6f00eb8f695ba4ffafc0f1f188150742a05af9316542804660f0890f65ad40628ac5329b2ec2fc9425d11ed73f3f133122ecc8f2bb9471efffcfd2116914115e371b77d7e1834bb81946874624cc99729fd00c98f735b56ae4cbc8c087708cd0478eefd05ea010662429241db35549689d34a86d45b800bc56d0fd7266e051d00f37052f69ec7454312078a40fa85e25177a7334a3357f823bc381191500b6bd7b00d653b90bc099320ca7578d2e695d047deac00297c97226439cbe1a84c8441095ea1516ebd2379d9ceef84494e960ac36f97feeab61d0187792397b23c2d7ea62f32b44a68a58dd7055f6bd7ce54bbe954b05807dfaad3436c9eae1be7fe37537665d2028b66797856dc620e20cf365c523148b21567db27e66effea627b37077b144656dd5b4e4b61aa69c5bcf9c5d621ea2f79b3ef5b5499cd042e0bbc846fa9cfe6b4d6e0fa57a87b8d78d43c9a0f105aef819147bb5bfdbdb49e9188e170e0fb41e6a2eec540f23f061a68f792f92eaba9fac0c3a35997c8aee77377cbd5e6e13a2007e556d88fc8ceb86152e9044009b71b81eaa84286fa4207edbee273cafab511197cdde582f2389f588226ebc6569a0ed2372dd8c3f5008580696e389722605b1a3c6f7e4ce13f148c405979b912a8f48ff60230fe49bdbf23577d2cdde5064b2c79a654d4808d167b405cc694bf2dcafe0f7e20c499115ca7af2579596368f20b485397c8a0174db17968217245d3938d9ae2edac32e20a391445d86d9eedbc6ca6f15b0a93ec1607878b7d68a76ace5faaec40b79ee6b619c14c847e516c5a02e1257f0a992ad896b9316e02bf85f850d39042d6ad37b99d9b2ca9c806efaad08b44cb7a163e0412bc8d9004f6506aea08fdced0e99adb2191a4e523e098d8c30221b4470abba01a86a59764119b813e07e153f9a65a10cd45c4a182be22ecd7027e10b7e9460b9f16bbe23d5a6d1067c8c99a718b6a406c5cfb15e9cc419b153579bf199f2a541c093cb8be6c7ee167dfaa7f55724f44318c34caccafb06f39d30809ba3f4342a174ce256027195e445035df6565d1988153f0692cd050e9d3913048963c6cf7f277f70426598ce4892dac8d62a94963d2f383c7c2c3b390b70774b0dd307c31a144d7b5706c89a3d96e2e6a7fa1452844852ebbb01cf1d373ed81f1a02376b50bd5aaa134d6594c05d625911db9b412d6ce0da8d3d4c2115fc94be71e38bc5888d3f77eda11b90512acb32b3a7901a18049c309a54a4d2dc539535e793aaf57d4e767c5cf53594bc81f57ba814b38c65c9ff54e674ac67162395f8ace871f2e4c6754d5fb7240b334935e7cce6b87d89480869bde7e4010fe2c08bbda78a5d238fe5629c092c6015fb88f1187c8869ecbe8df229af88d86c6bdb83947242ab1971a9175d384cb3259e2168f03fd46310083e89820153932da2235b7d29e05291ba73fb7bfc6de22210169f33d96c2ec6160af8e2786b5a621f9acf86ea1bdd5a32b6d3cd96ab84387b93772f99af09f881f71b59a76b7b61c80c202eb0db7c169a04cc37adde7f0e2f10e458bb1801e65314e03049dc96494586ded313406668c3fef7feda66850ab42b6f8190043f56dceac641dc7cd25ab0308bdbe269009290bc72cb01019acd8b2790bfd5ff1c818216be5173cad5c2ded9e6254ac23cf808e0df70eec431644f27b35370640bdca78101ddceb1d103f785ed8920d70999422118a922fe92a18fcfbd8a47453c663dce3790a596b8a04806dd61c4368a124717f4334367acc8da810b2e0a134f7f65cbc1434f670a235d8f2cd784a08e548bb6625f28d26a0faa4bca7423cde728617bd28840062f4579ac0839368ebdff59d196efaa5681d86cb78026bbee6ef62d8f539ec8ad9f2168fc3f2b13ddc91145645d1ddb3d4fc06525f2868bca639145a0a7893cac7bb82133aa482f7a972965c35755d9181529241e5cf977b98d85a1006b243a1371f571ff393289632e53a45831cd1a66ba794d96e875e034fd48e57c67749a2e38d9a5aa4192f7314fc9ec2c2a0bc7089b332527ebc1b09bffa9e8e36e0ccd0fda3df90d9996ef45fc990c1f7ea2e95f02fbdf2a4985294aef0e3582bb7d5df5daf636c5b741353cb28aecba2b3cc63a433a95b3bef21540ac4401abfe78efaa7dd05ec32df3900d0805f4b31b78774a9a4359354c139ff229d66cf5745a4329d25cd025f9620e80f1671dc417eba4b02c1ace6ab484b1a07b7c7d4c0b467872b2fda3f05bf26956f7d09f44ec9bdb7bc33d42d1fc6f0f86fdc15fcef65e716e6af1e3c0a31c66ee5c2e15411ca3f72ede8bcec06783b45e30ad346ea5cfb1338a24b3e39537155513c04c74ce01cfce4bed98f92ed2e1935ba05abfa1e92895c882856dc599416c5b874db1a40553092c67fa9a02fcbaf917a2eedc5c73d85d51d0b9f40b0f1226f4b398d0d24873521a8e59688f39ab2e9cc973c2615b2fcbb9b32c5af62bee29dd8fbab85dbc8ef8c3561dd7758d4041ce34a19b0b9f07abfd22048bd8f9b45248b534e11cdd3d210eccf80226ae67abd9af870680da3a485e81d946ce7cea999b7bf7859ea748d5db621c8db040b73af72f355564bd726d506421abdc78bb3bb2c284718f5eae253b8d7eaf1e5615a8d66dac60982bf2e5af20cc7fa9811f9deb7987c22e2f30db6e153dbe44d6ea4e06bd99e7c96cba26645827d6f9ae12624d9a8ecb4e5016430be6ec340a4125744b314fa01396af6eefb4d9c82442b0aaa49114a7cd8d1678563da887f45153b4fd9127e54ae0b1ceb15d9b94d2226742127d663622358bfd7675ff16fd82b89fbc95b403f51c5be5578c8d92ab189cc9724121b59f8bb1da34f75a04c0d660db62c2fc222ce7dab7c278f06f7a7cbe901bba60cba6c2a792ef1259e05d9985a3fc2198a2fde9ed075f07ca91a915e45434d5cf05b97a293d442dac12cbe7b7d9a7d0fea302fc9d23dc1227c3def58d79c5d3e950823af7c597f617d09de1c9678fc46e82ea7ef91bf59a50aca2ae632dbedb20b7d90f769d290856088339833964586f0c1c615903283e4b37204367dbb51481b1c37e1cd64132c2ec5bab4e8deecae69a01c6d2d930afe7383663a81d54ea762c3bef1272ac3286d63723c9ae7c04601af63eeb816a3a0e5ba45b3fafd312d24489420f804a701e03289680a7ff46dc1c05e36906223a59945e02e7cc5ff91a8", 0x1000}, {&(0x7f0000002200)="aa7c2e075ac658cabf879dd00d39ec8118a5cca652fae1242bc52b074a0278fe1072fcd02f35c2565c632fa96cd3f8f2ff973991654ef6fb08a6795026aeb613bf795b86059cb5434812db8a83", 0x4d}], 0x4, &(0x7f0000002280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x38}, 0x40) perf_event_open(&(0x7f00000022c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) (async) sendmsg$kcm(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)="7c96dd5d9f621541a2a40ced1c1eb9ea356eec60362c00f505f720c347ae5efc", &(0x7f0000000440)="f0664fe4a2e37e4b69c88b0b4954011af189312753f70aed80fcecdb917841", 0x5, r7}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r7, 0x26, 0x1, 0x10001, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x13, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 15m42.97225289s ago: executing program 5 (id=2323): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x10, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bfa200000000000007026400fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000f40)='GPL\x00', 0x7, 0x1000, &(0x7f0000000f80)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m42.672699438s ago: executing program 5 (id=2324): r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffefffffffff, r0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="00000000000000000000e836b520", 0xe}], 0x1}, 0x8080) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x16, &(0x7f0000100700)=ANY=[@ANYBLOB="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"], &(0x7f0000100900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYRESHEX=r3], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x10, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000140)={0x8000, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m40.492544081s ago: executing program 5 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000200000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 15m40.264194327s ago: executing program 5 (id=2331): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000e4a2df45af0f8be93221e1ae64307c72e09ef32cb682649c859ea0412988a185eb2e2044f8c7d34b141c75522665544fb1a8633acd7d951a5f205b4476d1ef66c6ecb24417ef73f7a1314cb8d6dd03f727e5d5000625aa35e21fa7b719b28f00dada6d0d322071252497b919abf5fef50b67f7c9ec14d6740f34b4c784c6e70483", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000000000000000000000000000000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09001d0004000000080000000a0000000200d658f38d698eecc6b9bc62318429670eb5df3e847c3c6dd33c3011bea889357d31b65c54462bd27f1311a482f4743412265312f27ce078e2da8e617b479c45097105be212da66bccf54d4eec205c5167d9f75adb4fac19085362e118e554d2b5bc5235dfed4687505eb91936156de04700f3c69219c029000000000000000000000000004d83eadcc49aec9d1611382b68e1a93c8b664ebf", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x40}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0xe9, 0x0, &(0x7f0000000680)="af4b4e004f712f792e4baf873e3d8fd2d7c324a6240eeb0064e5391b21fe6ea03592d22129a5a1c165da58546a7bb0ca26c87f2446f469853b28a1af06fcdfe33dd4d731709da0abe0d28b67c5ec2d476bd5b1d2344750931cfd949e572e2c8e4a1e524cde9b43e02155dae5f72f4284d9e4af955023fbb6c28e4bc1bd9908a5e33607b96ac2bb01a6f72dc005d2fca68a0db585bd75361562e5091c85adf3f547883082167cc2bf4b73ab5d723b6023e286ded36afdba2d583c76c58cf73d893e3352bc1ed20d73b3a4e60411851aee852a39b319d435bf06df0294a1665902c6f5bbde62da2bd994", 0x0, 0x9, 0x0, 0x87, 0x0, &(0x7f0000000780)="85083934becad78c4513e2f7691d780c2b689baee50e03ac79175fd46061ce0a3f6bf92187c03f82d7a267ac2354d2c3220087fe82fcdef8e0d1f7ffe4df7f6e7b3b8ac8d727d9f9c9ab36d84e3f9dc9905f32c96afee8fa48c4d880238c7feb2755385032292403ee731761835912d88a0f4c25e8375546d58e61fc7830235bfffef82a1cd547", 0x0, 0x2, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) r7 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) syz_clone(0x8d008000, 0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 15m36.687616355s ago: executing program 5 (id=2343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r6) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000040", @ANYRESDEC], 0xffdd) 15m21.654911634s ago: executing program 33 (id=2343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r6) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000040", @ANYRESDEC], 0xffdd) 8.404828777s ago: executing program 2 (id=6923): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4862}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7}, 0x440, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x1, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='\x00') perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x96, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 7.947252038s ago: executing program 2 (id=6928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x11, 0x6, 0x300) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba5", 0x4d}], 0x1}, 0x8000) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000880)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000a00)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000a80)="088d85d1f409000a3164ae4398", 0xd}, {&(0x7f0000000ac0)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67a6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f83fd548e872bc197d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceeb2c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339", 0x66d}], 0x4}, 0x40000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0xd, 0x5, &(0x7f0000001200)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000001240)='GPL\x00'}, 0x90) sendmsg$kcm(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 7.619906956s ago: executing program 6 (id=6930): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000e40)={0x0, 0x14, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x6558, 0x7400}, 0x0) 7.46572415s ago: executing program 6 (id=6931): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b400000000e899e3d4d8a7ad9b0000fb72013300"], &(0x7f00000018c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000001900)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000001a00), 0x8}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x4, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f00000022c0)='GPL\x00'}, 0x48) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0xffffffffffffff97, 0x10, &(0x7f0000001880), 0xfffffd67}, 0x48) recvmsg$unix(r0, 0x0, 0x61) 6.706354968s ago: executing program 1 (id=6935): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000ec0)={r2, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xa3, 0x8, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$sock(r0, &(0x7f0000000b00)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000340)="d2fb397ac7b0", 0x6}, {&(0x7f00000004c0)="91137fa3873253e520dbc78888c0c3264ce6c19ed51c9b7abffba0e3749a0bb20c22d08d9dbed741275c8212f6ee4fd64dcc09089f4a5a53f131fe5a1ecd0958957bc1edc59f2b46f815cb7f439a97fc9990bcd36b8e101e5a38d01705d7e0896cf727ef65e63af33490f31167b33f174ea069b4847967059cc36066aa0f323efafebd47130e704d5998d0e88ab98b926b44d7a71f7b194ccda13bded225e22a575574da386e9707350d9dc5c3b7a2d92679f27b0f497da38f7fc4418191de25109ffc576ba4b49a6e838cbf9fb6", 0xce}, {&(0x7f0000000900)="2e0b6791808075b508345f78746463b4d08fb815e717b72c3721c819437185469cf17abd87b3d7ddbc1fcdbcc5325d1d3eaebc6628247b8fccbed245448a4092c45ee70137a1d77d6f4fa2641494941c19ec3319531288a5db385b226d9445c645e79a92444ede2e6c1889aaf5c1d6764999864bce1d8c038812043d6f7bf99218a3e81fcb418ea0f71244a0cf38dbe2bf8365c81e0635ac886955f00e37777d5098338753ac229f5b8ea6c075c97513d7879e235b4c36ef17fb09f20f08d586eae6e5612e05b68a3f", 0xc9}], 0x3, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0xa7f8}}, @timestamping={{0x14, 0x1, 0x25, 0x2e25}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xa8}, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 6.488823063s ago: executing program 0 (id=6936): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4}, 0x38) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000400000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007e80000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000a4ee9eb0766b1ae1eb38e50012e4ed991197aa734d21a4ec8557ad4cb71ba001b26557f60394a98b993d6cf9041efde64852a25ec025b35b8f83d2be74d022bc3c2eef56637f10119b681fc3c8b6b2946f6eca1f9bc18ccd743cd2d744652d2708e1bd1472841a44"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x2, 0x4, 0x0, 0x40000, 0x1, 0x6, '\x00', 0x0, r1, 0x4, 0x4, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x3, 0x10}, 0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000680)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000006c0)=0x1, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfff}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@ld}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r0, r2, 0x5, &(0x7f00000007c0)=[r4, 0xffffffffffffffff, r5, r6, r8, r1, 0x1, r9, 0xffffffffffffffff, r1], &(0x7f0000000800)=[{0x2, 0x3, 0x4, 0x8}, {0x3, 0x3, 0x3, 0x2}, {0x2, 0x3, 0x1, 0x3}, {0x3, 0x4, 0x2, 0x7}, {0x1, 0x3, 0xb, 0xc}], 0x10, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, 0x3c}, 0x1) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x7b, &(0x7f00000002c0), 0x8) socket$kcm(0x10, 0x2, 0x0) 6.366266036s ago: executing program 1 (id=6937): perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000700), 0x3) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/151, 0x97, 0x0, &(0x7f0000000600)=""/59, 0x3b}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x8, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x152f}, [@alu={0x7, 0x0, 0xc, 0x1, 0x6, 0x8, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.354427406s ago: executing program 6 (id=6938): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f00000009c0)=r1, 0x4) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0xc46, 0x5, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44080) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00), 0x1000, r2}, 0x38) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c40)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0x1, 0x58, &(0x7f0000000d00)}, 0x10) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x30, 0x7, 0x8, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0x0, 0x0, &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdir(0x0, 0x10c) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000f80)={&(0x7f0000000fc0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001040), 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB], 0x28}, 0x880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001140)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001802e2a2100d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="1400000026000b3b1de8db26fc15000000000000", 0x14}], 0x1}, 0x4080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.353100437s ago: executing program 4 (id=6939): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x1d, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYBLOB="0000000000000000b7020000000000008500000017000000bf910000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000080000000100000004880000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000b80)=""/4096}, 0x94) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000000c0), 0x43) close(r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x56}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03fe"], 0xffdd) 6.049476813s ago: executing program 1 (id=6940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r6) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.993380774s ago: executing program 0 (id=6941): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x1d, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000080000000100000004880000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000b80)=""/4096}, 0x94) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000000c0), 0x43) close(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03fe"], 0xffdd) 3.949241364s ago: executing program 6 (id=6942): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x1d, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000002181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000080000000100000004880000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000b80)=""/4096}, 0x94) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000000c0), 0x43) close(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03fe"], 0xffdd) 3.892423266s ago: executing program 2 (id=6943): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0xf2f3}, 0x1021, 0xc8, 0x6, 0x1, 0xfffffffffffffffd, 0x1, 0x108, 0x0, 0x81, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000f50000000000ac1414aa89"], 0xfdef) 3.868911766s ago: executing program 4 (id=6944): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c1003000000003e11783750ebcbc800", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000a00)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x12, &(0x7f0000000a80)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x80, 0x10}, @generic={0x66, 0x8}, @initr0, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x8}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000b40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r3, 0x0, 0xe, 0x0, &(0x7f0000000c80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000009000000080000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000e9ff003dbad181", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f0000000900)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={r5, &(0x7f0000000980), 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000009c0)={&(0x7f0000000200), &(0x7f0000000240)=""/219, &(0x7f0000000500)="43a7203a53fe48fc9476657e76435b4d4e474b1840467c47043314ef2ddf2f0375ac", &(0x7f0000000680)="c37a782ab1ce687412576edf42fa6af6519bf547cd40759ca73b3d823c37641db709f4204a16ef9f4de44573c5d17096b0a78390d04a072c4cacbc3f748cba63713ebc252efc99e18ccea9ef3e7ea7b66f6298eebfc514c18505581ed9cf239d5a84eca4605fffc54d726b285bb7459baa7045c582e2d754e8e6e74807a7d4c01aa26977d53e05f4dae95a65bdb7", 0x5, r5}, 0x38) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 3.826905538s ago: executing program 2 (id=6945): socket$kcm(0x22, 0x2, 0x26) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f0000000400), 0x18) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000600)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000c00)="e09f547ed3f02dc1fd3d648777", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r3}, &(0x7f0000000fc0), &(0x7f0000001000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x7, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="850000009e000000620a00ff0000000079006c0500000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000310000005000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000001180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 3.754351699s ago: executing program 1 (id=6946): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x6}, 0x63c4, 0x20000, 0xc2bc, 0x5, 0x4001000, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='GPL\x00', 0x5, 0x252, &(0x7f0000001280)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.752568959s ago: executing program 0 (id=6947): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000ec0)={r2, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xa3, 0x8, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$sock(r0, &(0x7f0000000b00)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000340)="d2fb397ac7b0", 0x6}, {&(0x7f00000004c0)="91137fa3873253e520dbc78888c0c3264ce6c19ed51c9b7abffba0e3749a0bb20c22d08d9dbed741275c8212f6ee4fd64dcc09089f4a5a53f131fe5a1ecd0958957bc1edc59f2b46f815cb7f439a97fc9990bcd36b8e101e5a38d01705d7e0896cf727ef65e63af33490f31167b33f174ea069b4847967059cc36066aa0f323efafebd47130e704d5998d0e88ab98b926b44d7a71f7b194ccda13bded225e22a575574da386e9707350d9dc5c3b7a2d92679f27b0f497da38f7fc4418191de25109ffc576ba4b49a6e838cbf9fb6", 0xce}, {&(0x7f0000000900)="2e0b6791808075b508345f78746463b4d08fb815e717b72c3721c819437185469cf17abd87b3d7ddbc1fcdbcc5325d1d3eaebc6628247b8fccbed245448a4092c45ee70137a1d77d6f4fa2641494941c19ec3319531288a5db385b226d9445c645e79a92444ede2e6c1889aaf5c1d6764999864bce1d8c038812043d6f7bf99218a3e81fcb418ea0f71244a0cf38dbe2bf8365c81e0635ac886955f00e37777d5098338753ac229f5b8ea6c075c97513d7879e235b4c36ef17fb09f20f08d586eae6e5612e05b68a3f", 0xc9}], 0x3, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0xa7f8}}, @timestamping={{0x14, 0x1, 0x25, 0x2e25}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xa8}, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3.72909781s ago: executing program 6 (id=6948): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ec0)={0x5, 0x80, 0x9, 0x80, 0xc, 0x99, 0x0, 0x4, 0xfc918, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x5}, 0x3005, 0x5, 0x5, 0x5, 0x0, 0x4, 0x187c, 0x0, 0x8001, 0x0, 0x5414}, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.492410995s ago: executing program 2 (id=6949): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = gettid() perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x4, 0xe, 0x10, 0x6f, 0x0, 0x0, 0x2010, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000000000000001, 0x8}, 0x114100, 0x9, 0xfffffff4, 0x2, 0x800, 0x81, 0x200, 0x0, 0x5, 0x0, 0xe92}, r2, 0x3, r1, 0x2) r3 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)={[{0x2b, 'io'}, {0x2d, 'freezer'}, {0x2b, 'rlimit'}, {0x2d, 'net_cls'}]}, 0x1e) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101602, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r6, 0x8010743f, 0xf0ff1f0000000a) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x40000) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40182, 0x0) ioctl$TUNDETACHFILTER(r10, 0x401054d6, 0x0) r11 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000280)='./file0\x00', r5}, 0x18) setsockopt$sock_attach_bpf(r11, 0x1, 0xd, &(0x7f0000000800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000b0ff00000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.164776633s ago: executing program 1 (id=6950): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x801c581f, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x1d, &(0x7f0000000600)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x4, &(0x7f0000000800)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4}]}, &(0x7f0000000840)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x5, 0xc3, &(0x7f0000000bc0)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000d40)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000d80)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000dc0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="bf9f74e5270adbfb5c806045d14634a4d5c8b8f6d8cd38d858852195f060f55b4701aa121b71b5754d523e419d36bf803da1179f75a2b5090c7ce80d825a", @ANYRESDEC, @ANYRESHEX, @ANYRES32], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x78}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000f40), 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000002fc0)={0x0, 0x76e9bdd7, &(0x7f0000003000)=[{&(0x7f0000003040)="c00e02002c000b35d25a806f8c6394f90a24fc602f1b02000a740100053582c137153e370248018000f01700d1bda35d97dd4680a1602eb7b5d3c778e4128f4e4179c2ee7a4f7b7520483cfa140482c7c6a93f855c766e19a8d84784437ed3b1feead649d6d371107f11a7da905316d53c222fa1c76b0df5dc91a48b2266cf763b0d052e118f50eb0170cc01935718b72fc00e961b6b7c436125b94153950dd2b3c170e7d49048cf0f425b5afd508463e2656cf4304103", 0x33fe0}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) 3.137787344s ago: executing program 6 (id=6951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x2, 0x58}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, @exit]}, &(0x7f0000000380)='GPL\x00', 0x2, 0xf4, &(0x7f0000000500)=""/244}, 0x94) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0x4aded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.133521264s ago: executing program 0 (id=6952): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4}, 0x38) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000400000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007e80000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000a4ee9eb0766b1ae1eb38e50012e4ed991197aa734d21a4ec8557ad4cb71ba001b26557f60394a98b993d6cf9041efde64852a25ec025b35b8f83d2be74d022bc3c2eef56637f10119b681fc3c8b6b2946f6eca1f9bc18ccd743cd2d744652d2708e1bd1472841a44"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x2, 0x4, 0x0, 0x40000, 0x1, 0x6, '\x00', 0x0, r1, 0x4, 0x4, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x3, 0x10}, 0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000680)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000006c0)=0x1, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfff}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@ld}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r0, r2, 0x5, &(0x7f00000007c0)=[r4, 0xffffffffffffffff, r5, r6, r8, r1, 0x1, r9, 0xffffffffffffffff, r1], &(0x7f0000000800)=[{0x2, 0x3, 0x4, 0x8}, {0x3, 0x3, 0x3, 0x2}, {0x2, 0x3, 0x1, 0x3}, {0x3, 0x4, 0x2, 0x7}, {0x1, 0x3, 0xb, 0xc}], 0x10, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, 0x3c}, 0x1) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x7b, &(0x7f00000002c0), 0x8) socket$kcm(0x10, 0x2, 0x0) 3.084464755s ago: executing program 4 (id=6953): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xe, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x8000000}, 0x366, 0x10, &(0x7f0000001580), 0x1dd}, 0x48) 3.045728436s ago: executing program 2 (id=6954): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x1d, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYBLOB="0000000000000000b7020000000000008500000017000000bf910000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000080000000100000004880000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000b80)=""/4096}, 0x94) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000000c0), 0x43) close(r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x56}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03fe"], 0xffdd) 2.978217178s ago: executing program 4 (id=6955): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000110000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) 2.90418623s ago: executing program 0 (id=6956): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x0, 0x42, 0x0, 0x1}, 0x28) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (rerun: 64) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007b00000018110000f3afa4b5310e0e33849637f4fc0b010adb0f6dffa8ab9241ede531ad290d6bd46b057466c1585369ed", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x12, &(0x7f00000001c0)=r0, 0x4) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000080850000007300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x0, 0xe, 0x0, &(0x7f0000000880)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xd7, 0x0}, 0x8) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='memory.swap.current\x00', 0x26e1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000c00)='cpuset.cpus\x00', 0x2, 0x0) (async) openat$cgroup_ro(r8, &(0x7f0000000c40)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRESHEX=r8, @ANYRES8=r7, @ANYRES16=r9, @ANYRESDEC=r6], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000d00)={r8, &(0x7f0000000d40), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r5, 0x4) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x26, 0x1, 0xffffffff, &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 2.724488584s ago: executing program 4 (id=6957): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7f}, 0x10c002, 0xac5d, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000004000)={&(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x0, 0xf, "c62662eefdcb969aea77138e57cf8e5878896014c38af461681aefdb2793b044272d5292eac5fc16d3ad01f12b0f6d81dca1de6b41d9f473445ec237ffb41e", 0x11}, 0x80, &(0x7f0000003f40)}, 0x20000014) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x200, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xc800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r3, 0x50, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[@ANYRES64=r2, @ANYRESOCT=r3], 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x800000}, 0x0, 0x400000, 0xfffffffc, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xd, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff0000b0ffbf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000000000eeb70500000000000085000000630000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 828.27182ms ago: executing program 1 (id=6958): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x1d, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000080000000100000004880000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000b80)=""/4096}, 0x94) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000000c0), 0x43) close(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03fe"], 0xffdd) 58.004868ms ago: executing program 4 (id=6959): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x1d, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000002181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000080000000100000004880000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000b80)=""/4096}, 0x94) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000000c0), 0x43) close(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03fe"], 0xffdd) 0s ago: executing program 0 (id=6960): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x6}, 0x63c4, 0x20000, 0xc2bc, 0x5, 0x4001000, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='GPL\x00', 0x5, 0x252, &(0x7f0000001280)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): enl_family_rcv_msg_doit+0x22f/0x350 [ 1382.444456][T24200] ? end_current_label_crit_section+0x170/0x170 [ 1382.450742][T24200] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1382.456683][T24200] ? bpf_lsm_capable+0x5/0x10 [ 1382.461406][T24200] ? security_capable+0x85/0xb0 [ 1382.466286][T24200] genl_rcv_msg+0x601/0x790 [ 1382.470897][T24200] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1382.477105][T24200] ? genl_bind+0x360/0x360 [ 1382.481568][T24200] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1382.487914][T24200] ? lock_acquire+0x226/0x4a0 [ 1382.492619][T24200] netlink_rcv_skb+0x1ef/0x440 [ 1382.497391][T24200] ? genl_bind+0x360/0x360 [ 1382.501812][T24200] ? netlink_ack+0x1160/0x1160 [ 1382.506585][T24200] ? down_read+0x1a8/0x2d0 [ 1382.511018][T24200] genl_rcv+0x24/0x40 [ 1382.515066][T24200] netlink_unicast+0x7ad/0x920 [ 1382.519848][T24200] netlink_sendmsg+0x8ad/0xbd0 [ 1382.524621][T24200] ? netlink_getsockopt+0x550/0x550 [ 1382.529826][T24200] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1382.535376][T24200] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1382.540660][T24200] ? security_socket_sendmsg+0x7c/0xa0 [ 1382.546121][T24200] ? netlink_getsockopt+0x550/0x550 [ 1382.551331][T24200] ____sys_sendmsg+0x5ed/0x9a0 [ 1382.556109][T24200] ? __sys_sendmsg_sock+0x30/0x30 [ 1382.561140][T24200] ? __import_iovec+0x306/0x510 [ 1382.566012][T24200] ? import_iovec+0x6f/0xa0 [ 1382.570607][T24200] ___sys_sendmsg+0x2a2/0x360 [ 1382.575287][T24200] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1382.581447][T24200] ? __sys_sendmsg+0x2a0/0x2a0 [ 1382.586248][T24200] __se_sys_sendmsg+0x1c3/0x2b0 [ 1382.591107][T24200] ? __x64_sys_sendmsg+0x80/0x80 [ 1382.596061][T24200] ? lockdep_hardirqs_on+0x94/0x140 [ 1382.601531][T24200] do_syscall_64+0x4c/0xa0 [ 1382.605955][T24200] ? clear_bhb_loop+0x60/0xb0 [ 1382.610667][T24200] ? clear_bhb_loop+0x60/0xb0 [ 1382.615344][T24200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.621240][T24200] RIP: 0033:0x7fe25f79e559 [ 1382.625654][T24200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.645344][T24200] RSP: 002b:00007fe260695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1382.653854][T24200] RAX: ffffffffffffffda RBX: 00007fe25fa25fa0 RCX: 00007fe25f79e559 [ 1382.661824][T24200] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1382.669886][T24200] RBP: 00007fe25f8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1382.677954][T24200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.685933][T24200] R13: 00007fe25fa26038 R14: 00007fe25fa25fa0 R15: 00007ffcb5599048 [ 1382.694185][T24200] [ 1382.851113][T24220] netlink: 'syz.2.5896': attribute type 2 has an invalid length. [ 1382.865072][T24207] device syzkaller0 entered promiscuous mode [ 1382.938706][T23901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.333584][T24220] device 10 entered promiscuous mode [ 1385.341505][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1385.353752][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1385.731030][T24247] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5903'. [ 1386.113382][T24255] netlink: 'syz.0.5906': attribute type 10 has an invalid length. [ 1386.835714][T24263] netlink: 'syz.1.5908': attribute type 41 has an invalid length. [ 1386.852300][T24269] netlink: 'syz.6.5910': attribute type 2 has an invalid length. [ 1386.872260][T24269] device 0 entered promiscuous mode [ 1386.895752][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1386.918274][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1386.946068][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1386.967192][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1386.986769][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1387.027364][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1387.059263][T23901] device veth0_vlan entered promiscuous mode [ 1387.102966][T23901] device veth1_vlan entered promiscuous mode [ 1387.300210][T24275] device syzkaller0 entered promiscuous mode [ 1387.336148][T23901] device veth0_macvtap entered promiscuous mode [ 1387.364452][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1387.375230][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1387.395521][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1387.416312][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1388.676738][T24292] delete_channel: no stack [ 1389.498957][T23901] device veth1_macvtap entered promiscuous mode [ 1389.507330][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1389.515994][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1389.524660][T24283] mac80211_hwsim hwsim87 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1389.535762][T24293] netlink: 'syz.2.5919': attribute type 15 has an invalid length. [ 1389.544250][T24293] netlink: 'syz.2.5919': attribute type 7 has an invalid length. [ 1389.579729][T23901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.604535][T23901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.647853][T23901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.676907][T23901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.709904][T23901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.737402][T23901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.752082][T23901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.762783][T23901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.785118][T23901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.800713][T23901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.844494][T23901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.875243][T23901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.895324][T23901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.926092][T23901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.938317][T23901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.948946][T23901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.959941][T23901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.971841][T23901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.993682][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1390.015902][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1390.030413][T24309] netlink: 'syz.0.5926': attribute type 2 has an invalid length. [ 1390.042946][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1390.053364][T20825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1390.079437][T23901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.099444][T23901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.116335][T23901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.146673][T23901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.201928][T24309] device 4 entered promiscuous mode [ 1390.928076][T24306] delete_channel: no stack [ 1391.043258][T18758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.073613][T18758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.113896][T18758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1391.163886][T18750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.175186][T24319] mac80211_hwsim hwsim87 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1391.197789][T18750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.207267][T18750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1391.377400][T24324] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1391.564437][T24328] device syzkaller0 entered promiscuous mode [ 1391.681985][T24334] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5934'. [ 1391.712150][T24337] netlink: 'syz.2.5935': attribute type 3 has an invalid length. [ 1391.730531][T24337] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5935'. [ 1392.189341][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1392.216214][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1392.232331][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1392.241744][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1392.250151][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1392.265676][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1393.810941][T18757] wlan1: Trigger new scan to find an IBSS to join [ 1394.011470][T24342] rxe_eth0 speed is unknown, defaulting to 1000 [ 1394.326065][T24358] netlink: 'syz.2.5940': attribute type 2 has an invalid length. [ 1394.362847][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 1394.827367][T20825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.881913][T24358] device 11 entered promiscuous mode [ 1394.887910][T24361] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1394.977371][T20825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.135656][T20825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.225439][T24372] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5945'. [ 1395.310771][T20825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.333765][T24342] chnl_net:caif_netlink_parms(): no params data found [ 1395.570561][T20825] device .*! left promiscuous mode [ 1395.600248][T24342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.608614][T24342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.646937][T24342] device bridge_slave_0 entered promiscuous mode [ 1395.712279][T20825] device 0 left promiscuous mode [ 1395.730015][T24342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.737162][T24342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.776739][T24342] device bridge_slave_1 entered promiscuous mode [ 1395.812561][T20825] device 1 left promiscuous mode [ 1395.875447][T24342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.900283][T24397] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5953'. [ 1395.935012][T20825] device 2 left promiscuous mode [ 1395.958488][T24342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.071660][T20825] device 3 left promiscuous mode [ 1396.096233][T24397] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1396.182468][T24342] team0: Port device team_slave_0 added [ 1396.250234][T24342] team0: Port device team_slave_1 added [ 1396.395748][T24414] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.5957'. [ 1396.411934][T20825] device ip6gretap0 left promiscuous mode [ 1396.437721][T20825] : port 1(ip6gretap0) entered disabled state [ 1396.447882][T22596] Bluetooth: hci4: command 0x041b tx timeout [ 1396.486365][T24413] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1396.531827][T24342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.571773][T24342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.623991][T24342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.718997][T24342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.729745][T24342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.821922][T24342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.849000][ T4371] wlan1: Trigger new scan to find an IBSS to join [ 1396.913626][T24430] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1397.066892][T24342] device hsr_slave_0 entered promiscuous mode [ 1397.092360][T24342] device hsr_slave_1 entered promiscuous mode [ 1397.112743][T24342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.121989][T24342] Cannot create hsr debugfs directory [ 1397.158581][T24440] IPv6: NLM_F_CREATE should be specified when creating new route [ 1397.168544][T24440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1397.175877][T24440] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.183211][T24440] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.190518][T24440] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.773937][ T4371] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1397.803803][T24462] FAULT_INJECTION: forcing a failure. [ 1397.803803][T24462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.826372][T24462] CPU: 0 PID: 24462 Comm: syz.4.5968 Not tainted syzkaller #0 [ 1397.833894][T24462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1397.844105][T24462] Call Trace: [ 1397.847449][T24462] [ 1397.850399][T24462] dump_stack_lvl+0x188/0x24e [ 1397.855203][T24462] ? show_regs_print_info+0x12/0x12 [ 1397.860432][T24462] ? load_image+0x410/0x410 [ 1397.864972][T24462] ? __lock_acquire+0x7ea0/0x7ea0 [ 1397.870035][T24462] should_fail_ex+0x390/0x4c0 [ 1397.874833][T24462] _copy_from_user+0x2c/0x170 [ 1397.879553][T24462] bpf_test_init+0xde/0x140 [ 1397.884089][T24462] bpf_prog_test_run_xdp+0x488/0xf80 [ 1397.889407][T24462] ? __lock_acquire+0x7ea0/0x7ea0 [ 1397.894469][T24462] ? dev_put+0x80/0x80 [ 1397.898675][T24462] ? bpf_prog_test_run+0x310/0x390 [ 1397.903823][T24462] ? dev_put+0x80/0x80 [ 1397.908023][T24462] bpf_prog_test_run+0x31c/0x390 [ 1397.912974][T24462] __sys_bpf+0x62b/0x780 [ 1397.917217][T24462] ? bpf_link_show_fdinfo+0x380/0x380 [ 1397.922604][T24462] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1397.928766][T24462] __x64_sys_bpf+0x78/0x90 [ 1397.933181][T24462] do_syscall_64+0x4c/0xa0 [ 1397.937598][T24462] ? clear_bhb_loop+0x60/0xb0 [ 1397.942275][T24462] ? clear_bhb_loop+0x60/0xb0 [ 1397.946980][T24462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1397.952870][T24462] RIP: 0033:0x7fd66979e559 [ 1397.957279][T24462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.976887][T24462] RSP: 002b:00007fd66a671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1397.985310][T24462] RAX: ffffffffffffffda RBX: 00007fd669a25fa0 RCX: 00007fd66979e559 [ 1397.993295][T24462] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1398.001273][T24462] RBP: 00007fd66a671090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.009252][T24462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1398.017250][T24462] R13: 00007fd669a26038 R14: 00007fd669a25fa0 R15: 00007ffedcbdab88 [ 1398.025263][T24462] [ 1398.348076][T24342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1398.408265][T24342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1398.494425][T24484] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5969'. [ 1398.518249][T22596] Bluetooth: hci4: command 0x040f tx timeout [ 1398.613698][T24342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1398.634330][T24342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1398.919167][T24497] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1398.971229][T24342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.983283][T20825] device veth0_to_team left promiscuous mode [ 1398.991605][T20825] : port 1(veth0_to_team) entered disabled state [ 1399.006606][T20825] device hsr_slave_0 left promiscuous mode [ 1399.014655][T20825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.022872][T20825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.032411][T20825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.058012][T20825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.068668][T20825] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1399.085428][T20825] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1399.094678][T20825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.117270][T20825] device bridge_slave_0 left promiscuous mode [ 1399.130888][T20825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.272641][T24509] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5980'. [ 1400.016036][T20825] device veth1_macvtap left promiscuous mode [ 1400.030342][T20825] device veth0_macvtap left promiscuous mode [ 1400.044817][T20825] device veth1_vlan left promiscuous mode [ 1400.055486][T20825] device veth0_vlan left promiscuous mode [ 1400.598295][T22596] Bluetooth: hci4: command 0x0419 tx timeout [ 1400.688989][T24521] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5985'. [ 1400.905052][T20825] team0 (unregistering): Port device macvlan0 removed [ 1401.217504][T20825] team0 (unregistering): Port device team_slave_1 removed [ 1401.263201][T20825] team0 (unregistering): Port device team_slave_0 removed [ 1401.308818][T20825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.354419][T20825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.806164][T20825] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1401.821791][T20825] bond0 (unregistering): Released all slaves [ 1401.895112][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1401.909216][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1401.921327][T24513] device sit0 left promiscuous mode [ 1402.009048][T24515] device sit0 entered promiscuous mode [ 1402.076656][T24527] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1402.100216][T24342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.228546][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1402.237417][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1402.274769][T18761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.281977][T18761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.314171][T24547] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1402.324226][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1402.348526][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1402.357157][T18761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.364364][T18761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.411724][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1402.439358][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1402.475188][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1402.507028][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1402.544118][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1402.568648][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1402.594713][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1402.640806][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1402.746080][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1402.798686][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1402.824150][T24342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1402.926429][T24342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1402.993828][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1403.011851][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1404.315536][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1404.327983][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1404.369746][T24342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.529505][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1404.566779][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1404.677983][T24342] device veth0_vlan entered promiscuous mode [ 1404.737578][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1404.772557][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1404.838670][T24342] device veth1_vlan entered promiscuous mode [ 1404.878780][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1404.887010][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1404.904199][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1405.040576][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1405.099220][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1405.128751][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1405.180604][T24342] device veth0_macvtap entered promiscuous mode [ 1405.250469][T24342] device veth1_macvtap entered promiscuous mode [ 1405.327539][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1405.369275][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1405.450989][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.508705][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.542412][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.588262][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.633677][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.683217][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.748914][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.775546][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.800783][T24342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.035189][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1406.044650][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1406.069139][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.093182][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.103131][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.113734][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.131155][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.157684][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.177816][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.197710][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.219288][T24342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.250470][T24602] device pim6reg1 entered promiscuous mode [ 1406.363874][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1406.388597][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1406.442557][T24342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.492949][T24342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.527853][T24342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.557213][T24342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.663191][T24619] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1406.778001][T18761] wlan1: Trigger new scan to find an IBSS to join [ 1406.839424][T18750] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1406.867761][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1406.877437][T18758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.891157][T18758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.950420][T18761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1406.986933][T18758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.997583][T18758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.043026][T18750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1407.408021][T24642] netlink: 'syz.4.6014': attribute type 41 has an invalid length. [ 1408.715080][T24674] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6022'. [ 1408.743237][T24672] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6021'. [ 1408.753779][T24674] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6022'. [ 1408.754178][T22596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1408.772336][T24674] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6022'. [ 1408.783759][T22596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1408.785598][T24674] netlink: 'syz.4.6022': attribute type 3 has an invalid length. [ 1408.800284][T22596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1408.800654][T24674] netlink: 'syz.4.6022': attribute type 1 has an invalid length. [ 1408.817800][T24674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6022'. [ 1408.832395][T22596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1408.841819][T22596] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1408.849479][T22596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1409.067976][T18763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.156712][T24675] rxe_eth0 speed is unknown, defaulting to 1000 [ 1409.310098][T18763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.391441][T24692] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1409.490155][T18763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.530833][T24695] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1409.640716][T18763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.798476][T20826] wlan1: Trigger new scan to find an IBSS to join [ 1410.410905][T24675] chnl_net:caif_netlink_parms(): no params data found [ 1410.488757][T18763] device 0 left promiscuous mode [ 1410.545746][T24715] FAULT_INJECTION: forcing a failure. [ 1410.545746][T24715] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.578487][T24715] CPU: 0 PID: 24715 Comm: syz.0.6034 Not tainted syzkaller #0 [ 1410.586034][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1410.596137][T24715] Call Trace: [ 1410.599464][T24715] [ 1410.602435][T24715] dump_stack_lvl+0x188/0x24e [ 1410.605348][T18763] device 1 left promiscuous mode [ 1410.607136][T24715] ? lock_chain_count+0x20/0x20 [ 1410.607175][T24715] ? show_regs_print_info+0x12/0x12 [ 1410.622343][T24715] ? load_image+0x410/0x410 [ 1410.626878][T24715] ? lockdep_hardirqs_on+0x94/0x140 [ 1410.632108][T24715] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1410.638294][T24715] should_fail_ex+0x390/0x4c0 [ 1410.643009][T24715] should_failslab+0x5/0x20 [ 1410.647572][T24715] slab_pre_alloc_hook+0x59/0x300 [ 1410.652652][T24715] kmem_cache_alloc_node+0x5a/0x310 [ 1410.657870][T24715] ? __alloc_skb+0xf9/0x7d0 [ 1410.662429][T24715] __alloc_skb+0xf9/0x7d0 [ 1410.666783][T24715] netlink_sendmsg+0x654/0xbd0 [ 1410.671583][T24715] ? netlink_getsockopt+0x550/0x550 [ 1410.676901][T24715] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1410.682477][T24715] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1410.687771][T24715] ? security_socket_sendmsg+0x7c/0xa0 [ 1410.693242][T24715] ? netlink_getsockopt+0x550/0x550 [ 1410.698459][T24715] ____sys_sendmsg+0x5ed/0x9a0 [ 1410.703266][T24715] ? __sys_sendmsg_sock+0x30/0x30 [ 1410.708305][T24715] ? __import_iovec+0x306/0x510 [ 1410.713197][T24715] ? import_iovec+0x6f/0xa0 [ 1410.717727][T24715] ___sys_sendmsg+0x2a2/0x360 [ 1410.722615][T24715] ? __sys_sendmsg+0x2a0/0x2a0 [ 1410.727444][T24715] ? ktime_get+0x7b/0x270 [ 1410.731863][T24715] __se_sys_sendmsg+0x1c3/0x2b0 [ 1410.736812][T24715] ? perf_trace_preemptirq_template+0x268/0x320 [ 1410.743085][T24715] ? __x64_sys_sendmsg+0x80/0x80 [ 1410.748076][T24715] ? lockdep_hardirqs_on+0x94/0x140 [ 1410.753415][T24715] do_syscall_64+0x4c/0xa0 [ 1410.757843][T24715] ? clear_bhb_loop+0x60/0xb0 [ 1410.762656][T24715] ? clear_bhb_loop+0x60/0xb0 [ 1410.767351][T24715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1410.773292][T24715] RIP: 0033:0x7fa17e39e559 [ 1410.777721][T24715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.797360][T24715] RSP: 002b:00007fa17f195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.805824][T24715] RAX: ffffffffffffffda RBX: 00007fa17e625fa0 RCX: 00007fa17e39e559 [ 1410.813809][T24715] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000003 [ 1410.821806][T24715] RBP: 00007fa17f195090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.829994][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.837985][T24715] R13: 00007fa17e626038 R14: 00007fa17e625fa0 R15: 00007fff29319c48 [ 1410.846095][T24715] [ 1410.917927][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 1410.987981][T18763] device 2 left promiscuous mode [ 1411.021233][T24714] delete_channel: no stack [ 1411.023575][T24675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.055523][T24719] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6035'. [ 1411.065430][T24675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.073977][T24675] device bridge_slave_0 entered promiscuous mode [ 1411.086918][T18763] device 3 left promiscuous mode [ 1411.106070][T24724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.124208][T24724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.148515][T24724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.167984][T24724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.346995][T24675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.357087][T24675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.389951][T24675] device bridge_slave_1 entered promiscuous mode [ 1411.412357][T18763] device 4 left promiscuous mode [ 1411.462554][T24730] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1411.543750][T18763] device 5 left promiscuous mode [ 1411.570757][T24675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.597794][T18763] device 6 left promiscuous mode [ 1411.624110][T24675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.697023][T18763] device 7 left promiscuous mode [ 1411.745139][T24675] team0: Port device team_slave_0 added [ 1411.776407][T18763] device 8 left promiscuous mode [ 1411.823528][T24675] team0: Port device team_slave_1 added [ 1411.893478][T24675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.917798][T24675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.013692][T24675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.046037][T18763] device 9 left promiscuous mode [ 1412.101857][T24675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.137875][T24675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.171035][T24675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.203268][T18763] device 10 left promiscuous mode [ 1412.282464][T24760] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6047'. [ 1412.296191][T24675] device hsr_slave_0 entered promiscuous mode [ 1412.311468][T24675] device hsr_slave_1 entered promiscuous mode [ 1412.320479][T24675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1412.341604][T24675] Cannot create hsr debugfs directory [ 1412.347170][T18763] device 11 left promiscuous mode [ 1412.402073][T24763] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6048'. [ 1412.473292][T24764] delete_channel: no stack [ 1412.482543][T18763] tipc: Left network mode [ 1412.492357][T24763] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1412.629215][T24771] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1412.736109][T24778] FAULT_INJECTION: forcing a failure. [ 1412.736109][T24778] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.765888][T24778] CPU: 0 PID: 24778 Comm: syz.6.6052 Not tainted syzkaller #0 [ 1412.773419][T24778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1412.783511][T24778] Call Trace: [ 1412.786816][T24778] [ 1412.789778][T24778] dump_stack_lvl+0x188/0x24e [ 1412.794514][T24778] ? show_regs_print_info+0x12/0x12 [ 1412.799749][T24778] ? load_image+0x410/0x410 [ 1412.804376][T24778] ? __might_sleep+0xd0/0xd0 [ 1412.809085][T24778] ? __lock_acquire+0x7ea0/0x7ea0 [ 1412.814142][T24778] should_fail_ex+0x390/0x4c0 [ 1412.818859][T24778] should_failslab+0x5/0x20 [ 1412.823399][T24778] slab_pre_alloc_hook+0x59/0x300 [ 1412.828471][T24778] ? __lock_acquire+0x7ea0/0x7ea0 [ 1412.833530][T24778] ? kvmalloc_node+0x6c/0x180 [ 1412.838241][T24778] __kmem_cache_alloc_node+0x4f/0x270 [ 1412.843646][T24778] ? schedule_delayed_monitor_work+0x160/0x160 [ 1412.849844][T24778] ? kvmalloc_node+0x6c/0x180 [ 1412.854543][T24778] __kmalloc_node+0xa2/0x240 [ 1412.859167][T24778] kvmalloc_node+0x6c/0x180 [ 1412.863773][T24778] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1412.869163][T24778] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1412.875068][T24778] ? xdp_convert_md_to_buff+0x330/0x330 [ 1412.880658][T24778] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1412.886907][T24778] ? bpf_test_init+0x119/0x140 [ 1412.891673][T24778] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1412.897134][T24778] bpf_prog_test_run_xdp+0x757/0xf80 [ 1412.902431][T24778] ? dev_put+0x80/0x80 [ 1412.906692][T24778] ? dev_put+0x80/0x80 [ 1412.910758][T24778] bpf_prog_test_run+0x31c/0x390 [ 1412.915879][T24778] __sys_bpf+0x62b/0x780 [ 1412.920126][T24778] ? bpf_link_show_fdinfo+0x380/0x380 [ 1412.925510][T24778] ? lock_chain_count+0x20/0x20 [ 1412.930377][T24778] __x64_sys_bpf+0x78/0x90 [ 1412.934835][T24778] do_syscall_64+0x4c/0xa0 [ 1412.939251][T24778] ? clear_bhb_loop+0x60/0xb0 [ 1412.944187][T24778] ? clear_bhb_loop+0x60/0xb0 [ 1412.948866][T24778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1412.954850][T24778] RIP: 0033:0x7fd028b9e559 [ 1412.959265][T24778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.979044][T24778] RSP: 002b:00007fd029a58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1412.987459][T24778] RAX: ffffffffffffffda RBX: 00007fd028e25fa0 RCX: 00007fd028b9e559 [ 1412.995466][T24778] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1413.003443][T24778] RBP: 00007fd029a58090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.011446][T24778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.019415][T24778] R13: 00007fd028e26038 R14: 00007fd028e25fa0 R15: 00007ffd6e06f6b8 [ 1413.027491][T24778] [ 1413.045151][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 1414.559680][T24850] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1414.723640][T24857] mac80211_hwsim hwsim87 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1414.886458][T24675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1414.928754][T24675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1415.087670][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 1415.096187][T24675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1415.313281][T24675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1415.376575][T24878] netlink: 'syz.1.6069': attribute type 10 has an invalid length. [ 1415.386230][T24878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1415.402480][T24878] device dummy0 entered promiscuous mode [ 1415.429997][T24878] bridge0: port 3(dummy0) entered blocking state [ 1415.461465][T24878] bridge0: port 3(dummy0) entered disabled state [ 1415.494786][T24878] bridge0: port 3(dummy0) entered blocking state [ 1415.501940][T24878] bridge0: port 3(dummy0) entered forwarding state [ 1415.617051][T24893] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6073'. [ 1415.938834][T24675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.005518][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1416.022677][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1416.052245][T24675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.080714][T18763] device hsr_slave_0 left promiscuous mode [ 1416.119277][T18763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.148122][T18763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.169025][T18763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.176506][T18763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.238266][T18763] bridge0: port 3(dummy0) entered disabled state [ 1416.268280][T18763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.284879][T18763] device bridge_slave_0 left promiscuous mode [ 1416.307884][T18763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.416751][T24923] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6084'. [ 1416.433829][T18763] device veth1_macvtap left promiscuous mode [ 1416.454866][T18763] device veth0_macvtap left promiscuous mode [ 1416.476034][T18763] device veth1_vlan left promiscuous mode [ 1416.876794][T18763] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1417.063893][T18763] team0 (unregistering): Port device vlan0 removed [ 1417.167934][T22596] Bluetooth: hci1: command 0x0419 tx timeout [ 1417.344900][T18763] team0 (unregistering): Port device team_slave_1 removed [ 1417.398534][T18763] team0 (unregistering): Port device team_slave_0 removed [ 1417.444667][T18763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.492223][T18763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.812348][T18763] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1417.821274][T18763] bond0 (unregistering): Released all slaves [ 1417.879557][T24915] netlink: 'syz.0.6081': attribute type 19 has an invalid length. [ 1417.887856][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1417.902231][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1417.931925][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.939131][T11339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.947044][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1417.956064][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1417.966742][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.973924][T11339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.982015][T24937] netlink: 'syz.1.6088': attribute type 25 has an invalid length. [ 1417.993339][T24937] netlink: 'syz.1.6088': attribute type 9 has an invalid length. [ 1418.001705][T24937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6088'. [ 1418.047882][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1418.063559][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1418.109768][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1418.145779][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1418.195076][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1418.211577][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1418.294842][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1418.304251][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1418.331457][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1418.364581][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1418.385726][T24675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1418.406014][T24675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1418.502278][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1418.577486][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1419.777923][T18759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1419.823240][T18759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1419.945580][T24675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.058506][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1420.109067][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1420.183505][T24675] device veth0_vlan entered promiscuous mode [ 1420.203574][T20826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1420.233031][T20826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1420.263778][T20826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1420.318870][T20826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1420.333462][T24675] device veth1_vlan entered promiscuous mode [ 1420.435895][T24675] device veth0_macvtap entered promiscuous mode [ 1420.476710][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1420.509879][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1420.545811][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1420.566597][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1420.591335][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1420.634066][T24675] device veth1_macvtap entered promiscuous mode [ 1420.698752][T24675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.736977][T24675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.767507][T24675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.787828][T24675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.807668][T24675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.831486][T24675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.854149][T24675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.867562][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1420.891807][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1420.928584][T11339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1420.960719][T24675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.981857][T24675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.021702][T24675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.049526][T24675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.067720][T24675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.126474][T24675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.174499][T24675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.439031][T24992] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6105'. [ 1422.757880][T11366] wlan1: Trigger new scan to find an IBSS to join [ 1423.003829][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.010316][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.647853][T18759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1423.656794][T18759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1423.674169][T24675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.693488][T24675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.704197][T24675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.713996][T24675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.909285][T25007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1423.926948][T18763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.947912][T18763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.956108][T25007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1423.983490][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1424.008630][T25009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1424.063053][T11366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.079112][T11366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.104036][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1424.370652][T25020] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6115'. [ 1424.923309][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1424.936680][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1424.946387][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1424.958309][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1424.973851][T12479] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1424.984873][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1425.272665][T25034] rxe_eth0 speed is unknown, defaulting to 1000 [ 1425.797939][T18763] wlan1: Trigger new scan to find an IBSS to join [ 1425.800225][T20826] wlan1: Trigger new scan to find an IBSS to join [ 1425.840391][T25034] chnl_net:caif_netlink_parms(): no params data found [ 1425.918910][T25034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.926349][T25034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.941952][T25034] device bridge_slave_0 entered promiscuous mode [ 1425.951632][T25034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.959579][T25034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.969093][T25034] device bridge_slave_1 entered promiscuous mode [ 1425.998540][T25034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.012028][T25034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.119261][T25034] team0: Port device team_slave_0 added [ 1426.135073][T25034] team0: Port device team_slave_1 added [ 1426.171857][T25034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.186289][T25034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.221972][T25034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.241580][T25034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.251541][T25034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.288760][T25034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.574679][T25064] delete_channel: no stack [ 1426.734096][T25073] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1427.082658][T22596] Bluetooth: hci5: command 0x0409 tx timeout [ 1427.141670][T25034] device hsr_slave_0 entered promiscuous mode [ 1427.152124][T18763] wlan1: Creating new IBSS network, BSSID 52:71:c9:7f:d0:7a [ 1427.188349][T25034] device hsr_slave_1 entered promiscuous mode [ 1427.196145][T25034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1427.221496][T25034] Cannot create hsr debugfs directory [ 1427.312236][T11366] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.444610][T11366] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.603857][T11366] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.731375][T11366] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.813135][T25095] netlink: 'syz.2.6139': attribute type 10 has an invalid length. [ 1427.836393][T25095] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1427.859503][T25095] device hsr0 entered promiscuous mode [ 1427.875813][T25103] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6141'. [ 1427.905256][T25095] bridge0: port 3(hsr0) entered blocking state [ 1427.920549][T25095] bridge0: port 3(hsr0) entered disabled state [ 1427.933289][T25095] bridge0: port 3(hsr0) entered blocking state [ 1427.941108][T25095] bridge0: port 3(hsr0) entered forwarding state [ 1427.962010][T25103] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6141'. [ 1427.997879][T25106] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6141'. [ 1428.170821][T11366] device 0 left promiscuous mode [ 1428.241665][T11366] device 1 left promiscuous mode [ 1428.354363][T25114] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6144'. [ 1429.168604][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 1429.387849][T11366] device 2 left promiscuous mode [ 1429.525088][T11366] device 3 left promiscuous mode [ 1429.609183][T11366] device 4 left promiscuous mode [ 1429.776365][T25151] delete_channel: no stack [ 1429.797283][T25156] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6156'. [ 1429.913455][T25156] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1429.968603][T25156] CPU: 1 PID: 25156 Comm: syz.1.6156 Not tainted syzkaller #0 [ 1429.976129][T25156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1429.986223][T25156] Call Trace: [ 1429.989527][T25156] [ 1429.992482][T25156] dump_stack_lvl+0x188/0x24e [ 1429.997205][T25156] ? show_regs_print_info+0x12/0x12 [ 1430.002443][T25156] ? load_image+0x410/0x410 [ 1430.004280][T25164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1430.006972][T25156] sysfs_warn_dup+0x8a/0xa0 [ 1430.007009][T25156] sysfs_do_create_link_sd+0xc0/0x110 [ 1430.025859][T25156] device_add+0x83b/0x1050 [ 1430.030326][T25156] wiphy_register+0x1d8b/0x2aa0 [ 1430.035233][T25156] ? cfg80211_event_work+0x40/0x40 [ 1430.040387][T25156] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1430.046588][T25156] ? ieee80211_register_hw+0x2b97/0x3b00 [ 1430.052261][T25156] ieee80211_register_hw+0x2e33/0x3b00 [ 1430.057774][T25156] ? ieee80211_register_hw+0xf31/0x3b00 [ 1430.063347][T25156] ? ieee80211_register_hw+0xf31/0x3b00 [ 1430.068929][T25156] ? ieee80211_tasklet_handler+0x20/0x20 [ 1430.074593][T25156] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1430.080614][T25156] ? __debug_object_init+0xed/0x440 [ 1430.085849][T25156] ? memset+0x1e/0x40 [ 1430.089852][T25156] ? __hrtimer_init+0x189/0x270 [ 1430.094712][T25156] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1430.100440][T25156] ? memcpy+0x3c/0x60 [ 1430.104513][T25156] hwsim_new_radio_nl+0xab7/0xc90 [ 1430.109562][T25156] genl_family_rcv_msg_doit+0x22f/0x350 [ 1430.115211][T25156] ? end_current_label_crit_section+0x170/0x170 [ 1430.121472][T25156] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1430.127473][T25156] ? bpf_lsm_capable+0x5/0x10 [ 1430.132152][T25156] ? security_capable+0x85/0xb0 [ 1430.137249][T25156] genl_rcv_msg+0x601/0x790 [ 1430.141852][T25156] ? genl_bind+0x360/0x360 [ 1430.146289][T25156] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1430.152673][T25156] netlink_rcv_skb+0x1ef/0x440 [ 1430.157440][T25156] ? genl_bind+0x360/0x360 [ 1430.161865][T25156] ? netlink_ack+0x1160/0x1160 [ 1430.166642][T25156] ? down_read+0x1a8/0x2d0 [ 1430.171062][T25156] genl_rcv+0x24/0x40 [ 1430.175039][T25156] netlink_unicast+0x7ad/0x920 [ 1430.179807][T25156] netlink_sendmsg+0x8ad/0xbd0 [ 1430.184574][T25156] ? netlink_getsockopt+0x550/0x550 [ 1430.189806][T25156] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1430.195440][T25156] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1430.200749][T25156] ? security_socket_sendmsg+0x7c/0xa0 [ 1430.206205][T25156] ? netlink_getsockopt+0x550/0x550 [ 1430.211419][T25156] ____sys_sendmsg+0x5ed/0x9a0 [ 1430.216193][T25156] ? __sys_sendmsg_sock+0x30/0x30 [ 1430.221214][T25156] ? __import_iovec+0x306/0x510 [ 1430.226072][T25156] ? import_iovec+0x6f/0xa0 [ 1430.230578][T25156] ___sys_sendmsg+0x2a2/0x360 [ 1430.235268][T25156] ? __sys_sendmsg+0x2a0/0x2a0 [ 1430.240045][T25156] ? rcu_is_watching+0x11/0xa0 [ 1430.244852][T25156] __se_sys_sendmsg+0x1c3/0x2b0 [ 1430.249702][T25156] ? __x64_sys_sendmsg+0x80/0x80 [ 1430.254737][T25156] ? lockdep_hardirqs_on+0x94/0x140 [ 1430.259941][T25156] do_syscall_64+0x4c/0xa0 [ 1430.264357][T25156] ? clear_bhb_loop+0x60/0xb0 [ 1430.269033][T25156] ? clear_bhb_loop+0x60/0xb0 [ 1430.273709][T25156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1430.279646][T25156] RIP: 0033:0x7f78ce39e559 [ 1430.284058][T25156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.303674][T25156] RSP: 002b:00007f78cf20d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1430.312099][T25156] RAX: ffffffffffffffda RBX: 00007f78ce625fa0 RCX: 00007f78ce39e559 [ 1430.320160][T25156] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1430.328304][T25156] RBP: 00007f78ce4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.336282][T25156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1430.344247][T25156] R13: 00007f78ce626038 R14: 00007f78ce625fa0 R15: 00007ffd5aed7c58 [ 1430.352234][T25156] [ 1430.474556][T25164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1430.576211][T25166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1430.593407][T25170] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6160'. [ 1431.243240][T22596] Bluetooth: hci5: command 0x040f tx timeout [ 1431.914802][T25034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1432.020330][T25034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1432.040911][T25034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1432.086429][T25034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1432.495222][T25034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.578314][T25223] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6173'. [ 1432.580739][T25034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.613923][T20826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1432.629480][T20826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1432.826933][T11366] team0: Port device wlan1 removed [ 1432.848528][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1432.857412][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1432.882961][T18751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.890204][T18751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.934571][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1432.967192][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1432.987486][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1433.026780][T18751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.034028][T18751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.072791][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1433.103272][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1433.153475][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1433.186248][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1433.217055][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1433.268376][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1433.329144][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 1433.333025][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1433.384511][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1433.441888][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1433.491374][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1433.535376][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1433.599670][T25034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1434.282955][T25247] netlink: 'syz.6.6180': attribute type 10 has an invalid length. [ 1434.302637][T25247] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6180'. [ 1434.331334][T25247] device dummy0 entered promiscuous mode [ 1434.394831][T25247] bridge0: port 3(dummy0) entered blocking state [ 1434.413138][T25247] bridge0: port 3(dummy0) entered disabled state [ 1434.458749][T25247] bridge0: port 3(dummy0) entered blocking state [ 1434.465814][T25247] bridge0: port 3(dummy0) entered forwarding state [ 1434.723589][T18759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1434.753608][T18759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1434.765140][T25034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1434.823739][T11366] device hsr_slave_0 left promiscuous mode [ 1434.849734][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.865666][T11366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1434.894295][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.926222][T11366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.948625][T25265] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6187'. [ 1434.959263][T11366] bridge0: port 3(dummy0) entered disabled state [ 1434.967382][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.619471][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.698687][T11366] device veth1_macvtap left promiscuous mode [ 1435.704788][T11366] device veth0_macvtap left promiscuous mode [ 1435.720639][T11366] device veth1_vlan left promiscuous mode [ 1435.733321][T11366] device veth0_vlan left promiscuous mode [ 1436.059748][T25283] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6194'. [ 1436.504163][T11366] team0 (unregistering): Port device geneve1 removed [ 1436.553231][T18757] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1436.990290][T11366] team0 (unregistering): Port device team_slave_1 removed [ 1437.033591][T11366] team0 (unregistering): Port device team_slave_0 removed [ 1437.077157][T11366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.125981][T11366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.449138][T11366] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1437.458392][T11366] bond0 (unregistering): Released all slaves [ 1437.528375][T25283] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1437.568339][T25283] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1437.583951][T25283] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1437.640890][T25288] device syzkaller0 entered promiscuous mode [ 1437.864047][T25302] netlink: 'syz.2.6199': attribute type 29 has an invalid length. [ 1437.943041][T25303] netlink: 'syz.4.6198': attribute type 2 has an invalid length. [ 1437.971679][T25305] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6200'. [ 1440.402114][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1440.411224][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1440.420901][T25300] netlink: 'syz.4.6198': attribute type 21 has an invalid length. [ 1440.429924][T25300] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6198'. [ 1440.448760][T25302] netlink: 'syz.2.6199': attribute type 29 has an invalid length. [ 1440.508462][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1440.528334][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1440.553521][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1440.568513][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1440.579618][T25034] device veth0_vlan entered promiscuous mode [ 1440.678516][T25034] device veth1_vlan entered promiscuous mode [ 1440.786234][T25034] device veth0_macvtap entered promiscuous mode [ 1440.795673][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1440.818789][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1440.839168][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1440.868992][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1440.879847][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1440.904930][T25034] device veth1_macvtap entered promiscuous mode [ 1440.961153][T25332] delete_channel: no stack [ 1440.975006][T25335] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6210'. [ 1440.975837][T25034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.010629][T25034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.027043][T25034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.044483][T25034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.059915][T25034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.070838][T25034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.082765][T25034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.117990][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1441.137067][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1441.172199][T18757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1441.195054][T25034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.216038][T25034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.229760][T25034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.241288][T25034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.252478][T25034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.272704][T25034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.284808][T25034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.300622][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1441.310121][T18763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1441.348049][T25034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.360210][T25034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.369385][T25034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.378493][T25034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.446893][T11366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.466170][T11366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.518087][T18751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1443.538887][T25358] netlink: 'syz.6.6217': attribute type 29 has an invalid length. [ 1443.545588][T11366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.547207][T25358] netlink: 'syz.6.6217': attribute type 29 has an invalid length. [ 1443.566661][T11366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.604625][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1443.648918][T25358] netlink: 'syz.6.6217': attribute type 29 has an invalid length. [ 1443.701315][T25358] netlink: 'syz.6.6217': attribute type 29 has an invalid length. [ 1443.720153][T25358] netlink: 'syz.6.6217': attribute type 29 has an invalid length. [ 1443.996614][T25377] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6225'. [ 1444.407318][T25381] delete_channel: no stack [ 1444.938572][T25400] delete_channel: no stack [ 1445.093769][T25417] netlink: 'syz.0.6240': attribute type 29 has an invalid length. [ 1445.109096][T25417] netlink: 'syz.0.6240': attribute type 29 has an invalid length. [ 1445.124905][T25417] netlink: 'syz.0.6240': attribute type 29 has an invalid length. [ 1445.142403][T25419] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6241'. [ 1445.803786][T25441] FAULT_INJECTION: forcing a failure. [ 1445.803786][T25441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.898137][T25441] CPU: 1 PID: 25441 Comm: syz.4.6250 Not tainted syzkaller #0 [ 1445.905672][T25441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1445.915765][T25441] Call Trace: [ 1445.919081][T25441] [ 1445.922051][T25441] dump_stack_lvl+0x188/0x24e [ 1445.926777][T25441] ? show_regs_print_info+0x12/0x12 [ 1445.932001][T25441] ? load_image+0x410/0x410 [ 1445.936558][T25441] ? __might_fault+0xa6/0x120 [ 1445.941361][T25441] should_fail_ex+0x390/0x4c0 [ 1445.946053][T25441] copyin+0x1b/0x120 [ 1445.949984][T25441] _copy_from_iter+0x447/0x1130 [ 1445.954909][T25441] ? copyout_mc+0x110/0x110 [ 1445.959509][T25441] ? __virt_addr_valid+0x188/0x540 [ 1445.964853][T25441] ? __virt_addr_valid+0x188/0x540 [ 1445.969994][T25441] ? __virt_addr_valid+0x467/0x540 [ 1445.975112][T25441] ? __phys_addr_symbol+0x2b/0x70 [ 1445.980161][T25441] ? __check_object_size+0x4f6/0xa70 [ 1445.985536][T25441] netlink_sendmsg+0x755/0xbd0 [ 1445.990463][T25441] ? netlink_getsockopt+0x550/0x550 [ 1445.995710][T25441] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1446.001305][T25441] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1446.006629][T25441] ? security_socket_sendmsg+0x7c/0xa0 [ 1446.012109][T25441] ? netlink_getsockopt+0x550/0x550 [ 1446.017359][T25441] ____sys_sendmsg+0x5ed/0x9a0 [ 1446.022162][T25441] ? __sys_sendmsg_sock+0x30/0x30 [ 1446.027196][T25441] ? __import_iovec+0x306/0x510 [ 1446.032085][T25441] ? import_iovec+0x6f/0xa0 [ 1446.036613][T25441] ___sys_sendmsg+0x2a2/0x360 [ 1446.041316][T25441] ? __sys_sendmsg+0x2a0/0x2a0 [ 1446.046218][T25441] ? ktime_get+0x7b/0x270 [ 1446.050672][T25441] __se_sys_sendmsg+0x1c3/0x2b0 [ 1446.055548][T25441] ? ct_nmi_exit+0x145/0x1c0 [ 1446.060341][T25441] ? __x64_sys_sendmsg+0x80/0x80 [ 1446.065458][T25441] ? lockdep_hardirqs_on+0x94/0x140 [ 1446.070766][T25441] do_syscall_64+0x4c/0xa0 [ 1446.075199][T25441] ? clear_bhb_loop+0x60/0xb0 [ 1446.079916][T25441] ? clear_bhb_loop+0x60/0xb0 [ 1446.084614][T25441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1446.090520][T25441] RIP: 0033:0x7fd66979e559 [ 1446.094952][T25441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.114582][T25441] RSP: 002b:00007fd66a671028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.123016][T25441] RAX: ffffffffffffffda RBX: 00007fd669a25fa0 RCX: 00007fd66979e559 [ 1446.131025][T25441] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000003 [ 1446.139101][T25441] RBP: 00007fd66a671090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.147089][T25441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.155075][T25441] R13: 00007fd669a26038 R14: 00007fd669a25fa0 R15: 00007ffedcbdab88 [ 1446.163101][T25441] [ 1446.322441][T25440] delete_channel: no stack [ 1446.719083][T25469] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1447.290145][T25478] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6260'. [ 1447.614827][T25491] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6267'. [ 1448.129641][T25483] delete_channel: no stack [ 1448.395375][T25508] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6272'. [ 1451.091571][T25541] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6286'. [ 1451.937554][T25581] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6301'. [ 1452.272176][T25602] validate_nla: 2 callbacks suppressed [ 1452.272194][T25602] netlink: 'syz.6.6307': attribute type 25 has an invalid length. [ 1452.309474][T25602] netlink: 'syz.6.6307': attribute type 9 has an invalid length. [ 1452.317346][T25602] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6307'. [ 1452.355819][T25601] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1452.375441][T25606] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1452.882541][T25618] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6315'. [ 1453.414614][T25641] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1453.510426][T25644] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1453.688594][T25650] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6326'. [ 1453.708533][T25650] bridge_slave_1: default FDB implementation only supports local addresses [ 1453.909293][T25655] device syzkaller0 entered promiscuous mode [ 1454.331627][T25668] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6333'. [ 1454.838263][T18751] wlan1: Trigger new scan to find an IBSS to join [ 1455.798839][T11341] wlan1: Trigger new scan to find an IBSS to join [ 1455.851099][T25691] netlink: 'syz.6.6341': attribute type 3 has an invalid length. [ 1455.885081][T25691] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6341'. [ 1457.800884][T18751] wlan1: Trigger new scan to find an IBSS to join [ 1457.807546][T18756] wlan1: Trigger new scan to find an IBSS to join [ 1458.149894][T25679] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1458.163276][T25686] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1458.484122][T25703] device syzkaller0 entered promiscuous mode [ 1458.760843][T18756] wlan1: Creating new IBSS network, BSSID 52:1b:3e:30:e0:16 [ 1460.849888][T11366] wlan1: Trigger new scan to find an IBSS to join [ 1460.932707][T25722] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1460.947005][T25708] rxe_eth0 speed is unknown, defaulting to 1000 [ 1461.063092][T25728] FAULT_INJECTION: forcing a failure. [ 1461.063092][T25728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.097221][T25728] CPU: 0 PID: 25728 Comm: syz.1.6353 Not tainted syzkaller #0 [ 1461.104740][T25728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1461.114817][T25728] Call Trace: [ 1461.118113][T25728] [ 1461.121058][T25728] dump_stack_lvl+0x188/0x24e [ 1461.125770][T25728] ? show_regs_print_info+0x12/0x12 [ 1461.130999][T25728] ? load_image+0x410/0x410 [ 1461.135545][T25728] ? __lock_acquire+0x7ea0/0x7ea0 [ 1461.140824][T25728] should_fail_ex+0x390/0x4c0 [ 1461.145539][T25728] _copy_from_user+0x2c/0x170 [ 1461.150262][T25728] __sys_bpf+0x2ea/0x780 [ 1461.154554][T25728] ? bpf_link_show_fdinfo+0x380/0x380 [ 1461.159979][T25728] ? lock_chain_count+0x20/0x20 [ 1461.164880][T25728] __x64_sys_bpf+0x78/0x90 [ 1461.169508][T25728] do_syscall_64+0x4c/0xa0 [ 1461.173998][T25728] ? clear_bhb_loop+0x60/0xb0 [ 1461.178701][T25728] ? clear_bhb_loop+0x60/0xb0 [ 1461.183439][T25728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1461.189353][T25728] RIP: 0033:0x7f78ce39e559 [ 1461.193775][T25728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.213697][T25728] RSP: 002b:00007f78cf20d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1461.222121][T25728] RAX: ffffffffffffffda RBX: 00007f78ce625fa0 RCX: 00007f78ce39e559 [ 1461.230193][T25728] RDX: 0000000000000094 RSI: 0000200000000f80 RDI: 0000000000000005 [ 1461.238167][T25728] RBP: 00007f78cf20d090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.246135][T25728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.254189][T25728] R13: 00007f78ce626038 R14: 00007f78ce625fa0 R15: 00007ffd5aed7c58 [ 1461.262180][T25728] [ 1461.388027][T25733] FAULT_INJECTION: forcing a failure. [ 1461.388027][T25733] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.438125][T25733] CPU: 0 PID: 25733 Comm: syz.2.6355 Not tainted syzkaller #0 [ 1461.445666][T25733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1461.455939][T25733] Call Trace: [ 1461.459257][T25733] [ 1461.462353][T25733] dump_stack_lvl+0x188/0x24e [ 1461.467092][T25733] ? show_regs_print_info+0x12/0x12 [ 1461.472375][T25733] ? load_image+0x410/0x410 [ 1461.476942][T25733] ? verify_lock_unused+0x140/0x140 [ 1461.482394][T25733] ? perf_trace_lock_acquire+0x342/0x3f0 [ 1461.488106][T25733] should_fail_ex+0x390/0x4c0 [ 1461.492859][T25733] should_failslab+0x5/0x20 [ 1461.497401][T25733] slab_pre_alloc_hook+0x59/0x300 [ 1461.502501][T25733] kmem_cache_alloc+0x56/0x2f0 [ 1461.507403][T25733] ? skb_clone+0x1e7/0x370 [ 1461.511894][T25733] skb_clone+0x1e7/0x370 [ 1461.516192][T25733] __netlink_deliver_tap+0x3e4/0x7e0 [ 1461.521654][T25733] ? netlink_deliver_tap+0x2e/0x1b0 [ 1461.526909][T25733] netlink_deliver_tap+0x19c/0x1b0 [ 1461.532058][T25733] netlink_unicast+0x777/0x920 [ 1461.536923][T25733] netlink_sendmsg+0x8ad/0xbd0 [ 1461.541722][T25733] ? netlink_getsockopt+0x550/0x550 [ 1461.546937][T25733] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1461.552597][T25733] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1461.557906][T25733] ? security_socket_sendmsg+0x7c/0xa0 [ 1461.563376][T25733] ? netlink_getsockopt+0x550/0x550 [ 1461.568589][T25733] ____sys_sendmsg+0x5ed/0x9a0 [ 1461.573393][T25733] ? __sys_sendmsg_sock+0x30/0x30 [ 1461.578772][T25733] ? __import_iovec+0x306/0x510 [ 1461.583705][T25733] ? import_iovec+0x6f/0xa0 [ 1461.588331][T25733] ___sys_sendmsg+0x2a2/0x360 [ 1461.593048][T25733] ? __sys_sendmsg+0x2a0/0x2a0 [ 1461.597874][T25733] ? __lock_acquire+0x7ea0/0x7ea0 [ 1461.602967][T25733] __se_sys_sendmsg+0x1c3/0x2b0 [ 1461.607844][T25733] ? perf_trace_preemptirq_template+0x268/0x320 [ 1461.614116][T25733] ? __x64_sys_sendmsg+0x80/0x80 [ 1461.619102][T25733] ? lockdep_hardirqs_on+0x94/0x140 [ 1461.624329][T25733] do_syscall_64+0x4c/0xa0 [ 1461.628754][T25733] ? clear_bhb_loop+0x60/0xb0 [ 1461.633466][T25733] ? clear_bhb_loop+0x60/0xb0 [ 1461.638156][T25733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1461.644101][T25733] RIP: 0033:0x7fb15899e559 [ 1461.648529][T25733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.668153][T25733] RSP: 002b:00007fb15988a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1461.676585][T25733] RAX: ffffffffffffffda RBX: 00007fb158c25fa0 RCX: 00007fb15899e559 [ 1461.684654][T25733] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000003 [ 1461.692633][T25733] RBP: 00007fb15988a090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.700725][T25733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.708724][T25733] R13: 00007fb158c26038 R14: 00007fb158c25fa0 R15: 00007fffba4a1448 [ 1461.716833][T25733] [ 1462.845305][T11341] wlan1: Trigger new scan to find an IBSS to join [ 1464.175737][T25730] delete_channel: no stack [ 1464.376546][T25752] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1464.533134][T25754] device syzkaller0 entered promiscuous mode [ 1464.795761][T25765] delete_channel: no stack [ 1464.823880][T25768] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6367'. [ 1466.762438][T18759] wlan1: Trigger new scan to find an IBSS to join [ 1466.854609][T11353] wlan1: Trigger new scan to find an IBSS to join [ 1467.561045][T25768] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1468.620809][T18759] wlan1: Creating new IBSS network, BSSID 3e:88:a6:74:82:ba [ 1468.629492][T25806] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1468.943375][T25825] device syzkaller0 entered promiscuous mode [ 1469.056307][T25834] netlink: 'syz.2.6390': attribute type 10 has an invalid length. [ 1469.136143][T25834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1469.155672][T25834] device dummy0 entered promiscuous mode [ 1469.196395][T25834] bridge0: port 4(dummy0) entered blocking state [ 1469.240826][T25834] bridge0: port 4(dummy0) entered disabled state [ 1469.259251][T25834] bridge0: port 4(dummy0) entered blocking state [ 1469.266057][T25834] bridge0: port 4(dummy0) entered forwarding state [ 1469.565075][T25851] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1469.812352][T18756] wlan1: Trigger new scan to find an IBSS to join [ 1471.167743][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 1471.704748][T25831] netlink: 'syz.4.6389': attribute type 10 has an invalid length. [ 1471.712913][T25831] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6389'. [ 1471.722213][T25831] device hsr0 entered promiscuous mode [ 1471.728558][T25831] bridge0: port 3(hsr0) entered blocking state [ 1471.734900][T25831] bridge0: port 3(hsr0) entered disabled state [ 1471.742752][T25831] bridge0: port 3(hsr0) entered blocking state [ 1471.749200][T25831] bridge0: port 3(hsr0) entered forwarding state [ 1471.762671][T25859] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1471.913929][T25870] netlink: 'syz.2.6402': attribute type 25 has an invalid length. [ 1471.958388][T25870] netlink: 'syz.2.6402': attribute type 9 has an invalid length. [ 1471.977515][T25870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6402'. [ 1472.006768][T25873] netlink: 'syz.0.6403': attribute type 17 has an invalid length. [ 1472.031914][T25873] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1472.543359][T25897] device syzkaller0 entered promiscuous mode [ 1472.848023][T18756] wlan1: Trigger new scan to find an IBSS to join [ 1473.340984][T25900] delete_channel: no stack [ 1473.457438][T18759] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1473.798050][T18759] wlan1: Trigger new scan to find an IBSS to join [ 1475.811652][T18756] wlan1: Creating new IBSS network, BSSID d2:9e:89:a8:8d:72 [ 1476.382328][T25954] delete_channel: no stack [ 1476.608895][T25912] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1477.056730][T25966] device syzkaller0 entered promiscuous mode [ 1479.618428][T25993] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1479.769356][T25999] device syzkaller0 entered promiscuous mode [ 1480.173393][T26022] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6447'. [ 1480.295499][T26023] netlink: 'syz.2.6447': attribute type 29 has an invalid length. [ 1481.809220][T18759] wlan1: Trigger new scan to find an IBSS to join [ 1481.815810][T18759] wlan1: Trigger new scan to find an IBSS to join [ 1482.383812][T26023] netlink: 'syz.2.6447': attribute type 29 has an invalid length. [ 1482.384518][T26027] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6448'. [ 1482.595289][T26034] delete_channel: no stack [ 1482.602789][T26039] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1482.948182][T26047] delete_channel: no stack [ 1483.033821][T26053] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6460'. [ 1483.083352][T26053] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1483.114014][T26053] CPU: 1 PID: 26053 Comm: syz.1.6460 Not tainted syzkaller #0 [ 1483.121802][T26053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1483.131898][T26053] Call Trace: [ 1483.135548][T26053] [ 1483.138582][T26053] dump_stack_lvl+0x188/0x24e [ 1483.143401][T26053] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1483.149584][T26053] ? show_regs_print_info+0x12/0x12 [ 1483.154814][T26053] ? load_image+0x410/0x410 [ 1483.159354][T26053] ? sysfs_warn_dup+0x61/0xa0 [ 1483.164075][T26053] sysfs_warn_dup+0x8a/0xa0 [ 1483.168617][T26053] sysfs_do_create_link_sd+0xc0/0x110 [ 1483.174028][T26053] device_add+0x83b/0x1050 [ 1483.178484][T26053] wiphy_register+0x1d8b/0x2aa0 [ 1483.183385][T26053] ? cfg80211_event_work+0x40/0x40 [ 1483.188527][T26053] ? minstrel_ht_alloc+0x894/0xa20 [ 1483.193704][T26053] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1483.199806][T26053] ieee80211_register_hw+0x2e33/0x3b00 [ 1483.205314][T26053] ? ieee80211_register_hw+0xf31/0x3b00 [ 1483.210878][T26053] ? ieee80211_register_hw+0xf31/0x3b00 [ 1483.216456][T26053] ? ieee80211_tasklet_handler+0x20/0x20 [ 1483.222111][T26053] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1483.228037][T26053] ? __debug_object_init+0xed/0x440 [ 1483.233262][T26053] ? memset+0x1e/0x40 [ 1483.237273][T26053] ? __hrtimer_init+0x189/0x270 [ 1483.242168][T26053] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1483.247931][T26053] ? memcpy+0x3c/0x60 [ 1483.251952][T26053] hwsim_new_radio_nl+0xab7/0xc90 [ 1483.257024][T26053] genl_family_rcv_msg_doit+0x22f/0x350 [ 1483.262605][T26053] ? end_current_label_crit_section+0x170/0x170 [ 1483.268889][T26053] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1483.274827][T26053] ? bpf_lsm_capable+0x5/0x10 [ 1483.279532][T26053] ? security_capable+0x85/0xb0 [ 1483.284446][T26053] genl_rcv_msg+0x601/0x790 [ 1483.289003][T26053] ? genl_bind+0x360/0x360 [ 1483.293459][T26053] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1483.299838][T26053] netlink_rcv_skb+0x1ef/0x440 [ 1483.304640][T26053] ? genl_bind+0x360/0x360 [ 1483.309095][T26053] ? netlink_ack+0x1160/0x1160 [ 1483.313912][T26053] ? down_read+0x1a8/0x2d0 [ 1483.318497][T26053] genl_rcv+0x24/0x40 [ 1483.322514][T26053] netlink_unicast+0x7ad/0x920 [ 1483.327334][T26053] netlink_sendmsg+0x8ad/0xbd0 [ 1483.332139][T26053] ? lockdep_hardirqs_on+0x94/0x140 [ 1483.337472][T26053] ? netlink_getsockopt+0x550/0x550 [ 1483.342714][T26053] ? bpf_lsm_socket_accept+0x10/0x10 [ 1483.348063][T26053] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1483.353380][T26053] ? security_socket_sendmsg+0x7c/0xa0 [ 1483.358877][T26053] ? netlink_getsockopt+0x550/0x550 [ 1483.364217][T26053] ____sys_sendmsg+0x5ed/0x9a0 [ 1483.369031][T26053] ? __sys_sendmsg_sock+0x30/0x30 [ 1483.374083][T26053] ? __import_iovec+0x306/0x510 [ 1483.378985][T26053] ? import_iovec+0x6f/0xa0 [ 1483.383530][T26053] ___sys_sendmsg+0x2a2/0x360 [ 1483.388257][T26053] ? __sys_sendmsg+0x2a0/0x2a0 [ 1483.393165][T26053] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1483.399349][T26053] ? irqentry_enter+0x33/0x50 [ 1483.404083][T26053] ? rcu_is_watching+0x11/0xa0 [ 1483.408918][T26053] __se_sys_sendmsg+0x1c3/0x2b0 [ 1483.413805][T26053] ? __x64_sys_sendmsg+0x80/0x80 [ 1483.418798][T26053] ? lockdep_hardirqs_on+0x94/0x140 [ 1483.424039][T26053] do_syscall_64+0x4c/0xa0 [ 1483.428491][T26053] ? clear_bhb_loop+0x60/0xb0 [ 1483.433225][T26053] ? clear_bhb_loop+0x60/0xb0 [ 1483.437942][T26053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1483.443873][T26053] RIP: 0033:0x7f78ce39e559 [ 1483.448313][T26053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.467945][T26053] RSP: 002b:00007f78cf20d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.476394][T26053] RAX: ffffffffffffffda RBX: 00007f78ce625fa0 RCX: 00007f78ce39e559 [ 1483.484399][T26053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1483.492488][T26053] RBP: 00007f78ce4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.500577][T26053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.508580][T26053] R13: 00007f78ce626038 R14: 00007f78ce625fa0 R15: 00007ffd5aed7c58 [ 1483.516605][T26053] [ 1483.599449][T26069] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6462'. [ 1483.782970][T26063] device syzkaller0 entered promiscuous mode [ 1484.453439][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.464044][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.839052][T11366] wlan1: Trigger new scan to find an IBSS to join [ 1484.845760][T11341] wlan1: Trigger new scan to find an IBSS to join [ 1484.852429][T18751] wlan1: Trigger new scan to find an IBSS to join [ 1486.796343][T26082] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1486.972045][T26107] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1487.283134][T26122] sctp: [Deprecated]: syz.1.6479 (pid 26122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1487.283134][T26122] Use struct sctp_sack_info instead [ 1487.344948][T26131] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1487.443375][T26135] device syzkaller0 entered promiscuous mode [ 1487.797891][T11353] wlan1: Trigger new scan to find an IBSS to join [ 1487.809454][T11339] wlan1: Trigger new scan to find an IBSS to join [ 1488.261233][T26155] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1489.013614][T11339] wlan1: Creating new IBSS network, BSSID 22:63:2c:fc:18:f2 [ 1490.790530][T26187] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6500'. [ 1490.960856][T26185] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1490.978246][T26188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6499'. [ 1491.131309][T26193] netlink: 'syz.6.6501': attribute type 25 has an invalid length. [ 1491.149578][T26193] netlink: 'syz.6.6501': attribute type 9 has an invalid length. [ 1491.169811][T26193] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6501'. [ 1491.647887][T22596] Bluetooth: hci3: command 0x0406 tx timeout [ 1491.798264][T18756] wlan1: Trigger new scan to find an IBSS to join [ 1491.804886][T16451] wlan1: Trigger new scan to find an IBSS to join [ 1491.965610][T26226] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6511'. [ 1492.031354][T26232] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1492.075427][T26230] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1492.185550][T26237] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6515'. [ 1492.298991][T26237] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6515'. [ 1492.311949][T26239] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6515'. [ 1492.735221][T18751] wlan1: Creating new IBSS network, BSSID ba:1f:38:83:e9:16 [ 1492.772551][T18751] wlan1: Creating new IBSS network, BSSID 6e:2d:ee:43:d5:18 [ 1495.028253][T26255] delete_channel: no stack [ 1495.249377][T26269] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6526'. [ 1495.528283][T26278] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1495.651783][T26279] netlink: 103 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1495.898836][T26282] mac80211_hwsim hwsim87 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1497.330136][T26325] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1497.381208][T26323] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1497.770191][T26340] delete_channel: no stack [ 1498.013555][T26347] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6553'. [ 1498.177777][T26347] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1498.235677][T26347] CPU: 0 PID: 26347 Comm: syz.1.6553 Not tainted syzkaller #0 [ 1498.243211][T26347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1498.253435][T26347] Call Trace: [ 1498.256741][T26347] [ 1498.259744][T26347] dump_stack_lvl+0x188/0x24e [ 1498.264505][T26347] ? show_regs_print_info+0x12/0x12 [ 1498.269779][T26347] ? load_image+0x410/0x410 [ 1498.274402][T26347] sysfs_warn_dup+0x8a/0xa0 [ 1498.278938][T26347] sysfs_do_create_link_sd+0xc0/0x110 [ 1498.284431][T26347] device_add+0x83b/0x1050 [ 1498.288984][T26347] wiphy_register+0x1d8b/0x2aa0 [ 1498.293887][T26347] ? cfg80211_event_work+0x40/0x40 [ 1498.299036][T26347] ? minstrel_ht_alloc+0x894/0xa20 [ 1498.304208][T26347] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1498.310319][T26347] ieee80211_register_hw+0x2e33/0x3b00 [ 1498.315836][T26347] ? ieee80211_register_hw+0xf31/0x3b00 [ 1498.321409][T26347] ? ieee80211_register_hw+0xf31/0x3b00 [ 1498.327080][T26347] ? ieee80211_tasklet_handler+0x20/0x20 [ 1498.332834][T26347] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1498.338864][T26347] ? __debug_object_init+0xed/0x440 [ 1498.344187][T26347] ? memset+0x1e/0x40 [ 1498.348207][T26347] ? __hrtimer_init+0x189/0x270 [ 1498.353101][T26347] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1498.358862][T26347] ? memcpy+0x3c/0x60 [ 1498.362880][T26347] hwsim_new_radio_nl+0xab7/0xc90 [ 1498.367953][T26347] genl_family_rcv_msg_doit+0x22f/0x350 [ 1498.373530][T26347] ? end_current_label_crit_section+0x170/0x170 [ 1498.379810][T26347] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1498.385741][T26347] ? bpf_lsm_capable+0x5/0x10 [ 1498.390504][T26347] ? security_capable+0x85/0xb0 [ 1498.395397][T26347] genl_rcv_msg+0x601/0x790 [ 1498.400039][T26347] ? genl_bind+0x360/0x360 [ 1498.404488][T26347] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1498.410868][T26347] netlink_rcv_skb+0x1ef/0x440 [ 1498.415661][T26347] ? genl_bind+0x360/0x360 [ 1498.420118][T26347] ? netlink_ack+0x1160/0x1160 [ 1498.424920][T26347] ? down_read+0x1a8/0x2d0 [ 1498.429374][T26347] genl_rcv+0x24/0x40 [ 1498.433822][T26347] netlink_unicast+0x7ad/0x920 [ 1498.438632][T26347] netlink_sendmsg+0x8ad/0xbd0 [ 1498.443474][T26347] ? netlink_getsockopt+0x550/0x550 [ 1498.448823][T26347] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1498.454419][T26347] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1498.459739][T26347] ? security_socket_sendmsg+0x7c/0xa0 [ 1498.465232][T26347] ? netlink_getsockopt+0x550/0x550 [ 1498.470484][T26347] ____sys_sendmsg+0x5ed/0x9a0 [ 1498.475293][T26347] ? __sys_sendmsg_sock+0x30/0x30 [ 1498.480349][T26347] ? __import_iovec+0x306/0x510 [ 1498.485241][T26347] ? import_iovec+0x6f/0xa0 [ 1498.489780][T26347] ___sys_sendmsg+0x2a2/0x360 [ 1498.494488][T26347] ? __sys_sendmsg+0x2a0/0x2a0 [ 1498.499326][T26347] __se_sys_sendmsg+0x1c3/0x2b0 [ 1498.504208][T26347] ? __x64_sys_sendmsg+0x80/0x80 [ 1498.509193][T26347] ? lockdep_hardirqs_on+0x94/0x140 [ 1498.514431][T26347] do_syscall_64+0x4c/0xa0 [ 1498.518871][T26347] ? clear_bhb_loop+0x60/0xb0 [ 1498.523572][T26347] ? clear_bhb_loop+0x60/0xb0 [ 1498.528279][T26347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1498.534204][T26347] RIP: 0033:0x7f78ce39e559 [ 1498.538654][T26347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.558381][T26347] RSP: 002b:00007f78cf20d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1498.566918][T26347] RAX: ffffffffffffffda RBX: 00007f78ce625fa0 RCX: 00007f78ce39e559 [ 1498.574918][T26347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1498.582988][T26347] RBP: 00007f78ce4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1498.590995][T26347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1498.599113][T26347] R13: 00007f78ce626038 R14: 00007f78ce625fa0 R15: 00007ffd5aed7c58 [ 1498.607216][T26347] [ 1499.175131][T26363] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1499.325423][T26365] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6560'. [ 1501.519944][T26399] netlink: 'syz.6.6572': attribute type 1 has an invalid length. [ 1501.548700][T26402] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1501.643935][T26411] FAULT_INJECTION: forcing a failure. [ 1501.643935][T26411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1501.665825][T26411] CPU: 0 PID: 26411 Comm: syz.4.6574 Not tainted syzkaller #0 [ 1501.673605][T26411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1501.683860][T26411] Call Trace: [ 1501.687152][T26411] [ 1501.690099][T26411] dump_stack_lvl+0x188/0x24e [ 1501.694800][T26411] ? show_regs_print_info+0x12/0x12 [ 1501.700019][T26411] ? load_image+0x410/0x410 [ 1501.704805][T26411] ? __lock_acquire+0x7ea0/0x7ea0 [ 1501.709855][T26411] should_fail_ex+0x390/0x4c0 [ 1501.714557][T26411] _copy_from_user+0x2c/0x170 [ 1501.719381][T26411] __sys_bpf+0x2ea/0x780 [ 1501.723646][T26411] ? bpf_link_show_fdinfo+0x380/0x380 [ 1501.729072][T26411] ? lock_chain_count+0x20/0x20 [ 1501.733954][T26411] __x64_sys_bpf+0x78/0x90 [ 1501.738385][T26411] do_syscall_64+0x4c/0xa0 [ 1501.742806][T26411] ? clear_bhb_loop+0x60/0xb0 [ 1501.747498][T26411] ? clear_bhb_loop+0x60/0xb0 [ 1501.752268][T26411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1501.758214][T26411] RIP: 0033:0x7fd66979e559 [ 1501.762719][T26411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1501.782425][T26411] RSP: 002b:00007fd66a671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1501.791214][T26411] RAX: ffffffffffffffda RBX: 00007fd669a25fa0 RCX: 00007fd66979e559 [ 1501.799275][T26411] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1501.807252][T26411] RBP: 00007fd66a671090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.815232][T26411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.823299][T26411] R13: 00007fd669a26038 R14: 00007fd669a25fa0 R15: 00007ffedcbdab88 [ 1501.831383][T26411] [ 1501.908435][T26416] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6576'. [ 1502.060695][T26421] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1502.153530][T26426] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1502.179629][T26421] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1502.246947][T26421] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1502.262312][T26421] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1502.273534][T26421] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1503.557169][T26454] netlink: 'syz.0.6589': attribute type 10 has an invalid length. [ 1503.577867][T26454] __nla_validate_parse: 28 callbacks suppressed [ 1503.577924][T26454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6589'. [ 1503.595847][T26454] device dummy0 entered promiscuous mode [ 1503.643578][T26454] bridge0: port 3(dummy0) entered blocking state [ 1503.657258][T26454] bridge0: port 3(dummy0) entered disabled state [ 1503.817531][T26454] bridge0: port 3(dummy0) entered blocking state [ 1503.824257][T26454] bridge0: port 3(dummy0) entered forwarding state [ 1504.140850][T26475] FAULT_INJECTION: forcing a failure. [ 1504.140850][T26475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1504.171693][T26472] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6594'. [ 1504.206570][T26475] CPU: 1 PID: 26475 Comm: syz.1.6596 Not tainted syzkaller #0 [ 1504.214090][T26475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1504.224358][T26475] Call Trace: [ 1504.227671][T26475] [ 1504.230618][T26475] dump_stack_lvl+0x188/0x24e [ 1504.235412][T26475] ? show_regs_print_info+0x12/0x12 [ 1504.240637][T26475] ? load_image+0x410/0x410 [ 1504.245158][T26475] ? __lock_acquire+0x7ea0/0x7ea0 [ 1504.250218][T26475] should_fail_ex+0x390/0x4c0 [ 1504.255027][T26475] _copy_from_user+0x2c/0x170 [ 1504.259831][T26475] __sys_bpf+0x2ea/0x780 [ 1504.264238][T26475] ? bpf_link_show_fdinfo+0x380/0x380 [ 1504.269638][T26475] ? lock_chain_count+0x20/0x20 [ 1504.274497][T26475] __x64_sys_bpf+0x78/0x90 [ 1504.278916][T26475] do_syscall_64+0x4c/0xa0 [ 1504.283332][T26475] ? clear_bhb_loop+0x60/0xb0 [ 1504.288010][T26475] ? clear_bhb_loop+0x60/0xb0 [ 1504.292684][T26475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1504.298574][T26475] RIP: 0033:0x7f78ce39e559 [ 1504.302992][T26475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.322714][T26475] RSP: 002b:00007f78cf20d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1504.331306][T26475] RAX: ffffffffffffffda RBX: 00007f78ce625fa0 RCX: 00007f78ce39e559 [ 1504.339287][T26475] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1504.347352][T26475] RBP: 00007f78cf20d090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.355356][T26475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.363330][T26475] R13: 00007f78ce626038 R14: 00007f78ce625fa0 R15: 00007ffd5aed7c58 [ 1504.371320][T26475] [ 1504.685183][T26488] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1505.243600][T26514] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6612'. [ 1505.350538][T26520] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1505.379766][T26513] delete_channel: no stack [ 1505.904528][T26542] rxe_eth0 speed is unknown, defaulting to 1000 [ 1506.006858][T26547] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1506.648275][T26559] delete_channel: no stack [ 1507.073297][T26570] device sit0 entered promiscuous mode [ 1507.236937][T26578] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1507.978053][T26589] delete_channel: no stack [ 1508.440372][T26606] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6652'. [ 1508.758206][T16451] wlan1: Trigger new scan to find an IBSS to join [ 1509.028793][T26631] delete_channel: no stack [ 1509.080283][T26637] netlink: 'syz.4.6664': attribute type 3 has an invalid length. [ 1509.157120][T26637] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1509.422470][T26641] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6667'. [ 1510.276989][T26660] rxe_eth0 speed is unknown, defaulting to 1000 [ 1510.556137][T26668] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6676'. [ 1510.705930][T26668] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1510.777208][T18756] wlan1: Trigger new scan to find an IBSS to join [ 1510.790731][T26668] CPU: 0 PID: 26668 Comm: syz.1.6676 Not tainted syzkaller #0 [ 1510.798353][T26668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1510.808437][T26668] Call Trace: [ 1510.811732][T26668] [ 1510.814779][T26668] dump_stack_lvl+0x188/0x24e [ 1510.819496][T26668] ? show_regs_print_info+0x12/0x12 [ 1510.824714][T26668] ? load_image+0x410/0x410 [ 1510.829263][T26668] sysfs_warn_dup+0x8a/0xa0 [ 1510.833807][T26668] sysfs_do_create_link_sd+0xc0/0x110 [ 1510.839285][T26668] device_add+0x83b/0x1050 [ 1510.843740][T26668] wiphy_register+0x1d8b/0x2aa0 [ 1510.848641][T26668] ? cfg80211_event_work+0x40/0x40 [ 1510.853781][T26668] ? minstrel_ht_alloc+0x894/0xa20 [ 1510.858958][T26668] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1510.865066][T26668] ieee80211_register_hw+0x2e33/0x3b00 [ 1510.870563][T26668] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1510.876773][T26668] ? ieee80211_register_hw+0xf31/0x3b00 [ 1510.882352][T26668] ? ieee80211_register_hw+0xf31/0x3b00 [ 1510.887943][T26668] ? ieee80211_tasklet_handler+0x20/0x20 [ 1510.893693][T26668] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1510.899704][T26668] ? __debug_object_init+0xed/0x440 [ 1510.904934][T26668] ? memset+0x1e/0x40 [ 1510.908936][T26668] ? __hrtimer_init+0x189/0x270 [ 1510.913904][T26668] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1510.919664][T26668] ? memcpy+0x3c/0x60 [ 1510.923676][T26668] hwsim_new_radio_nl+0xab7/0xc90 [ 1510.928758][T26668] genl_family_rcv_msg_doit+0x22f/0x350 [ 1510.934434][T26668] ? end_current_label_crit_section+0x170/0x170 [ 1510.940742][T26668] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1510.946678][T26668] ? bpf_lsm_capable+0x5/0x10 [ 1510.951396][T26668] ? security_capable+0x85/0xb0 [ 1510.956299][T26668] genl_rcv_msg+0x601/0x790 [ 1510.960950][T26668] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1510.967139][T26668] ? genl_bind+0x360/0x360 [ 1510.971579][T26668] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1510.977957][T26668] ? lock_acquire+0x226/0x4a0 [ 1510.982764][T26668] netlink_rcv_skb+0x1ef/0x440 [ 1510.987549][T26668] ? genl_bind+0x360/0x360 [ 1510.991988][T26668] ? netlink_ack+0x1160/0x1160 [ 1510.996823][T26668] ? down_read+0x1a8/0x2d0 [ 1511.001356][T26668] genl_rcv+0x24/0x40 [ 1511.005359][T26668] netlink_unicast+0x7ad/0x920 [ 1511.010164][T26668] netlink_sendmsg+0x8ad/0xbd0 [ 1511.014963][T26668] ? netlink_getsockopt+0x550/0x550 [ 1511.020230][T26668] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1511.025861][T26668] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1511.031170][T26668] ? security_socket_sendmsg+0x7c/0xa0 [ 1511.036738][T26668] ? netlink_getsockopt+0x550/0x550 [ 1511.041966][T26668] ____sys_sendmsg+0x5ed/0x9a0 [ 1511.046769][T26668] ? __sys_sendmsg_sock+0x30/0x30 [ 1511.051864][T26668] ? __import_iovec+0x306/0x510 [ 1511.056753][T26668] ? import_iovec+0x6f/0xa0 [ 1511.061290][T26668] ___sys_sendmsg+0x2a2/0x360 [ 1511.065995][T26668] ? __sys_sendmsg+0x2a0/0x2a0 [ 1511.070822][T26668] __se_sys_sendmsg+0x1c3/0x2b0 [ 1511.075701][T26668] ? __x64_sys_sendmsg+0x80/0x80 [ 1511.080704][T26668] ? lockdep_hardirqs_on+0x94/0x140 [ 1511.086023][T26668] do_syscall_64+0x4c/0xa0 [ 1511.090460][T26668] ? clear_bhb_loop+0x60/0xb0 [ 1511.095222][T26668] ? clear_bhb_loop+0x60/0xb0 [ 1511.099941][T26668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1511.105942][T26668] RIP: 0033:0x7f78ce39e559 [ 1511.110378][T26668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.130183][T26668] RSP: 002b:00007f78cf20d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1511.138638][T26668] RAX: ffffffffffffffda RBX: 00007f78ce625fa0 RCX: 00007f78ce39e559 [ 1511.146635][T26668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1511.155013][T26668] RBP: 00007f78ce4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1511.163003][T26668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.170995][T26668] R13: 00007f78ce626038 R14: 00007f78ce625fa0 R15: 00007ffd5aed7c58 [ 1511.179048][T26668] [ 1511.552785][T26678] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6680'. [ 1511.933965][T22596] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1511.941751][T22596] Bluetooth: hci3: Invalid handle: 0x5393 > 0x0eff [ 1512.158188][T11341] wlan1: Creating new IBSS network, BSSID 92:d5:a5:8f:47:f7 [ 1512.845384][T26712] FAULT_INJECTION: forcing a failure. [ 1512.845384][T26712] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.942139][T26712] CPU: 0 PID: 26712 Comm: syz.6.6693 Not tainted syzkaller #0 [ 1512.949668][T26712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1512.959755][T26712] Call Trace: [ 1512.963058][T26712] [ 1512.966193][T26712] dump_stack_lvl+0x188/0x24e [ 1512.970904][T26712] ? show_regs_print_info+0x12/0x12 [ 1512.976138][T26712] ? load_image+0x410/0x410 [ 1512.980664][T26712] ? __lock_acquire+0x7ea0/0x7ea0 [ 1512.985737][T26712] should_fail_ex+0x390/0x4c0 [ 1512.990459][T26712] should_failslab+0x5/0x20 [ 1512.994979][T26712] slab_pre_alloc_hook+0x59/0x300 [ 1513.000024][T26712] ? lock_chain_count+0x20/0x20 [ 1513.005178][T26712] ? bpf_test_init+0x9f/0x140 [ 1513.009974][T26712] __kmem_cache_alloc_node+0x4f/0x270 [ 1513.015469][T26712] ? bpf_test_init+0x9f/0x140 [ 1513.020174][T26712] __kmalloc+0xa3/0x240 [ 1513.024353][T26712] bpf_test_init+0x9f/0x140 [ 1513.028892][T26712] bpf_prog_test_run_xdp+0x488/0xf80 [ 1513.034206][T26712] ? __lock_acquire+0x7ea0/0x7ea0 [ 1513.039264][T26712] ? dev_put+0x80/0x80 [ 1513.043363][T26712] ? dev_put+0x80/0x80 [ 1513.047436][T26712] bpf_prog_test_run+0x31c/0x390 [ 1513.052375][T26712] __sys_bpf+0x62b/0x780 [ 1513.056639][T26712] ? bpf_link_show_fdinfo+0x380/0x380 [ 1513.062026][T26712] ? lock_chain_count+0x20/0x20 [ 1513.066884][T26712] __x64_sys_bpf+0x78/0x90 [ 1513.071296][T26712] do_syscall_64+0x4c/0xa0 [ 1513.075714][T26712] ? clear_bhb_loop+0x60/0xb0 [ 1513.080396][T26712] ? clear_bhb_loop+0x60/0xb0 [ 1513.085250][T26712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1513.091142][T26712] RIP: 0033:0x7fd028b9e559 [ 1513.095550][T26712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1513.115168][T26712] RSP: 002b:00007fd029a58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1513.123592][T26712] RAX: ffffffffffffffda RBX: 00007fd028e25fa0 RCX: 00007fd028b9e559 [ 1513.131569][T26712] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1513.139644][T26712] RBP: 00007fd029a58090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.147714][T26712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1513.155942][T26712] R13: 00007fd028e26038 R14: 00007fd028e25fa0 R15: 00007ffd6e06f6b8 [ 1513.163928][T26712] [ 1513.328376][T26702] rxe_eth0 speed is unknown, defaulting to 1000 [ 1513.617068][T26720] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6694'. [ 1515.250648][T26759] device sit0 entered promiscuous mode [ 1515.334490][T26761] netlink: 'syz.6.6712': attribute type 10 has an invalid length. [ 1515.348012][T26761] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6712'. [ 1515.364288][T26763] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1515.916826][T26784] FAULT_INJECTION: forcing a failure. [ 1515.916826][T26784] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.943823][T26784] CPU: 1 PID: 26784 Comm: syz.4.6721 Not tainted syzkaller #0 [ 1515.951350][T26784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1515.961440][T26784] Call Trace: [ 1515.964740][T26784] [ 1515.967692][T26784] dump_stack_lvl+0x188/0x24e [ 1515.972403][T26784] ? show_regs_print_info+0x12/0x12 [ 1515.977896][T26784] ? load_image+0x410/0x410 [ 1515.982431][T26784] ? __lock_acquire+0x7ea0/0x7ea0 [ 1515.987751][T26784] should_fail_ex+0x390/0x4c0 [ 1515.992475][T26784] should_failslab+0x5/0x20 [ 1515.997005][T26784] slab_pre_alloc_hook+0x59/0x300 [ 1516.002149][T26784] ? bpf_test_init+0x9f/0x140 [ 1516.006863][T26784] __kmem_cache_alloc_node+0x4f/0x270 [ 1516.012359][T26784] ? bpf_test_init+0x9f/0x140 [ 1516.017077][T26784] __kmalloc+0xa3/0x240 [ 1516.021263][T26784] bpf_test_init+0x9f/0x140 [ 1516.025809][T26784] bpf_prog_test_run_xdp+0x488/0xf80 [ 1516.031138][T26784] ? __lock_acquire+0x7ea0/0x7ea0 [ 1516.036227][T26784] ? dev_put+0x80/0x80 [ 1516.040341][T26784] ? dev_put+0x80/0x80 [ 1516.044442][T26784] bpf_prog_test_run+0x31c/0x390 [ 1516.049501][T26784] __sys_bpf+0x62b/0x780 [ 1516.053774][T26784] ? bpf_link_show_fdinfo+0x380/0x380 [ 1516.059189][T26784] ? lock_chain_count+0x20/0x20 [ 1516.064076][T26784] __x64_sys_bpf+0x78/0x90 [ 1516.068518][T26784] do_syscall_64+0x4c/0xa0 [ 1516.072954][T26784] ? clear_bhb_loop+0x60/0xb0 [ 1516.077638][T26784] ? clear_bhb_loop+0x60/0xb0 [ 1516.082340][T26784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1516.088350][T26784] RIP: 0033:0x7fd66979e559 [ 1516.092773][T26784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.112414][T26784] RSP: 002b:00007fd66a671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1516.121069][T26784] RAX: ffffffffffffffda RBX: 00007fd669a25fa0 RCX: 00007fd66979e559 [ 1516.129048][T26784] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1516.137039][T26784] RBP: 00007fd66a671090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.145207][T26784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.153191][T26784] R13: 00007fd669a26038 R14: 00007fd669a25fa0 R15: 00007ffedcbdab88 [ 1516.161392][T26784] [ 1516.314255][T26794] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1516.558204][T26804] device sit0 entered promiscuous mode [ 1517.241894][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 1517.459023][T26820] netlink: 'syz.1.6735': attribute type 21 has an invalid length. [ 1517.618279][T26812] delete_channel: no stack [ 1517.756897][T26828] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1517.906514][T26834] netlink: 'syz.6.6742': attribute type 10 has an invalid length. [ 1518.066399][T26834] device veth0_macvtap left promiscuous mode [ 1518.138046][T26837] delete_channel: no stack [ 1518.654439][T26859] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6751'. [ 1518.671689][T26863] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1519.357372][T26880] delete_channel: no stack [ 1519.798742][T18751] wlan1: Trigger new scan to find an IBSS to join [ 1519.830221][T26889] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6764'. [ 1519.881328][T26893] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1519.914943][T26891] netlink: 'syz.6.6765': attribute type 2 has an invalid length. [ 1520.838035][T11341] wlan1: Trigger new scan to find an IBSS to join [ 1521.137450][T26929] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6779'. [ 1521.591215][T26925] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1521.752024][T26941] netlink: 'syz.6.6782': attribute type 25 has an invalid length. [ 1521.776944][T26941] netlink: 'syz.6.6782': attribute type 9 has an invalid length. [ 1521.785976][T26941] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6782'. [ 1522.096152][T26954] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6790'. [ 1522.332979][T26967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1522.375860][T26967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1522.416068][T26968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1522.837813][T18751] wlan1: Trigger new scan to find an IBSS to join [ 1523.366570][T26968] netlink: 'syz.2.6793': attribute type 49 has an invalid length. [ 1523.798862][T18756] wlan1: Trigger new scan to find an IBSS to join [ 1525.100887][T26972] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1525.208971][T26989] netlink: 'syz.4.6800': attribute type 11 has an invalid length. [ 1525.217128][T26989] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6800'. [ 1525.432091][T26995] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6803'. [ 1525.864716][T27019] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1527.798315][T11353] wlan1: Trigger new scan to find an IBSS to join [ 1527.805064][T18751] wlan1: Trigger new scan to find an IBSS to join [ 1527.818971][T18759] wlan1: Trigger new scan to find an IBSS to join [ 1528.726857][T11353] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1528.734551][T11341] wlan1: Creating new IBSS network, BSSID b6:ca:ce:e9:56:b1 [ 1528.958734][T27043] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6819'. [ 1530.052163][T27065] netlink: 'syz.2.6829': attribute type 10 has an invalid length. [ 1530.109080][T27065] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1530.151675][T27066] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6830'. [ 1530.175954][T27066] bridge_slave_1: default FDB implementation only supports local addresses [ 1530.398708][T27080] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6836'. [ 1530.762793][T11341] wlan1: Trigger new scan to find an IBSS to join [ 1532.607678][T22596] Bluetooth: hci1: command 0x0406 tx timeout [ 1533.008936][T18751] wlan1: Creating new IBSS network, BSSID de:4f:b6:9b:c0:0c [ 1534.426328][T27104] netlink: 'syz.0.6845': attribute type 10 has an invalid length. [ 1534.486905][T27104] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1534.580030][T27113] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6848'. [ 1536.086292][T27144] FAULT_INJECTION: forcing a failure. [ 1536.086292][T27144] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.113527][T27144] CPU: 1 PID: 27144 Comm: syz.4.6860 Not tainted syzkaller #0 [ 1536.113898][T27148] netlink: 'syz.6.6862': attribute type 10 has an invalid length. [ 1536.121029][T27144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1536.121046][T27144] Call Trace: [ 1536.121054][T27144] [ 1536.121063][T27144] dump_stack_lvl+0x188/0x24e [ 1536.121093][T27144] ? show_regs_print_info+0x12/0x12 [ 1536.133293][T27145] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1536.139044][T27144] ? load_image+0x410/0x410 [ 1536.139076][T27144] ? __might_sleep+0xd0/0xd0 [ 1536.139092][T27144] ? __lock_acquire+0x7ea0/0x7ea0 [ 1536.139120][T27144] should_fail_ex+0x390/0x4c0 [ 1536.139150][T27144] should_failslab+0x5/0x20 [ 1536.139168][T27144] slab_pre_alloc_hook+0x59/0x300 [ 1536.139189][T27144] ? __lock_acquire+0x7ea0/0x7ea0 [ 1536.198105][T27144] ? kvmalloc_node+0x6c/0x180 [ 1536.202814][T27144] __kmem_cache_alloc_node+0x4f/0x270 [ 1536.208216][T27144] ? schedule_delayed_monitor_work+0x160/0x160 [ 1536.214418][T27144] ? kvmalloc_node+0x6c/0x180 [ 1536.219169][T27144] __kmalloc_node+0xa2/0x240 [ 1536.223799][T27144] kvmalloc_node+0x6c/0x180 [ 1536.228369][T27144] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1536.233779][T27144] ? 0xffffffffa0005180 [ 1536.238048][T27144] ? text_poke_copy+0x7b/0x90 [ 1536.242761][T27144] ? 0xffffffffa0005180 [ 1536.246944][T27144] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1536.252987][T27144] ? xdp_convert_md_to_buff+0x330/0x330 [ 1536.258600][T27144] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1536.264907][T27144] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1536.270573][T27144] bpf_prog_test_run_xdp+0x757/0xf80 [ 1536.275903][T27144] ? __lock_acquire+0x7ea0/0x7ea0 [ 1536.280986][T27144] ? dev_put+0x80/0x80 [ 1536.285110][T27144] ? dev_put+0x80/0x80 [ 1536.289214][T27144] bpf_prog_test_run+0x31c/0x390 [ 1536.294187][T27144] __sys_bpf+0x62b/0x780 [ 1536.298474][T27144] ? bpf_link_show_fdinfo+0x380/0x380 [ 1536.303930][T27144] ? lock_chain_count+0x20/0x20 [ 1536.308996][T27144] __x64_sys_bpf+0x78/0x90 [ 1536.313446][T27144] do_syscall_64+0x4c/0xa0 [ 1536.317888][T27144] ? clear_bhb_loop+0x60/0xb0 [ 1536.322701][T27144] ? clear_bhb_loop+0x60/0xb0 [ 1536.327408][T27144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1536.333334][T27144] RIP: 0033:0x7fd66979e559 [ 1536.337776][T27144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.357499][T27144] RSP: 002b:00007fd66a671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1536.366055][T27144] RAX: ffffffffffffffda RBX: 00007fd669a25fa0 RCX: 00007fd66979e559 [ 1536.374151][T27144] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1536.382154][T27144] RBP: 00007fd66a671090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.390156][T27144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.398154][T27144] R13: 00007fd669a26038 R14: 00007fd669a25fa0 R15: 00007ffedcbdab88 [ 1536.406177][T27144] [ 1536.511691][T27148] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1537.686733][T27154] netlink: 'syz.1.6859': attribute type 10 has an invalid length. [ 1537.746661][T27154] bridge0: port 3(dummy0) entered disabled state [ 1537.821732][T27154] device dummy0 left promiscuous mode [ 1537.831660][T27154] bridge0: port 3(dummy0) entered disabled state [ 1537.925626][T27154] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1538.228765][T27181] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6873'. [ 1538.397519][T27186] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1538.638534][T27193] netlink: 'syz.2.6877': attribute type 10 has an invalid length. [ 1539.244576][T27193] team0 (unregistering): Port device team_slave_0 removed [ 1539.422203][T27192] delete_channel: no stack [ 1539.705419][T27193] team0 (unregistering): Port device team_slave_1 removed [ 1539.743142][T27197] tipc: Started in network mode [ 1539.748267][T27197] tipc: Node identity 9215a268, cluster identity 4711 [ 1539.755371][T27197] tipc: Node number set to 2450891368 [ 1539.764320][T27206] netlink: 'syz.0.6880': attribute type 10 has an invalid length. [ 1539.863446][T27211] netlink: 'syz.6.6882': attribute type 10 has an invalid length. [ 1540.006928][T27216] netlink: 'syz.0.6884': attribute type 10 has an invalid length. [ 1540.026674][T27216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6884'. [ 1540.284256][T27228] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6889'. [ 1540.340725][T27230] mac80211_hwsim hwsim99 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1541.798597][T18759] wlan1: Trigger new scan to find an IBSS to join [ 1543.088071][T18751] wlan1: Creating new IBSS network, BSSID 5e:04:24:88:a2:d9 [ 1543.314057][T27242] netlink: 'syz.2.6896': attribute type 10 has an invalid length. [ 1543.579065][T11339] wlan1: Creating new IBSS network, BSSID a2:ea:86:94:71:0d [ 1543.619097][T27247] Q6\bY4: renamed from lo [ 1543.658735][T27251] netlink: 'syz.0.6897': attribute type 10 has an invalid length. [ 1543.863666][T27251] team0 (unregistering): Port device team_slave_0 removed [ 1543.899278][T27251] team0 (unregistering): Port device team_slave_1 removed [ 1543.959329][T27260] tipc: Started in network mode [ 1543.973686][T27260] tipc: Node identity 9215a268, cluster identity 4711 [ 1543.986487][T27260] tipc: Node number set to 2450891368 [ 1544.009046][T27257] netlink: 'syz.2.6898': attribute type 10 has an invalid length. [ 1544.103029][T27250] delete_channel: no stack [ 1544.272129][T27270] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1544.292701][T27268] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6904'. [ 1544.322748][T27272] netlink: 'syz.1.6905': attribute type 10 has an invalid length. [ 1544.371082][T27272] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1544.524508][T27278] mac80211_hwsim hwsim87 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1544.588858][T27284] netlink: 'syz.4.6911': attribute type 10 has an invalid length. [ 1544.667960][T27279] delete_channel: no stack [ 1544.674285][T27284] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1544.800374][T27286] netlink: 'syz.6.6922': attribute type 10 has an invalid length. [ 1544.865018][T27288] netlink: 'syz.4.6912': attribute type 10 has an invalid length. [ 1545.446985][T27303] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6918'. [ 1545.476559][T27306] netlink: 'syz.1.6919': attribute type 10 has an invalid length. [ 1545.646385][T27306] team0 (unregistering): Port device team_slave_0 removed [ 1545.673259][T27306] team0 (unregistering): Port device team_slave_1 removed [ 1545.694216][T27307] netlink: 'syz.6.6920': attribute type 10 has an invalid length. [ 1545.702741][T27311] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1545.713842][T27314] netlink: 'syz.0.6924': attribute type 10 has an invalid length. [ 1545.769825][T27316] tipc: Started in network mode [ 1545.774747][T27316] tipc: Node identity 9215a268, cluster identity 4711 [ 1545.797783][T27316] tipc: Node number set to 2450891368 [ 1545.852301][T27305] delete_channel: no stack [ 1545.883318][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.890013][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.950897][T27319] delete_channel: no stack [ 1546.153940][T27325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6928'. [ 1546.174518][T27325] bridge0: port 4(dummy0) entered disabled state [ 1546.181156][T27325] bridge0: port 3(hsr0) entered disabled state [ 1546.187605][T27325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.195072][T27325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.237181][T27325] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1546.274094][T27325] bridge0: port 4(dummy0) entered blocking state [ 1546.280664][T27325] bridge0: port 4(dummy0) entered forwarding state [ 1546.287789][T27325] bridge0: port 3(hsr0) entered blocking state [ 1546.294197][T27325] bridge0: port 3(hsr0) entered forwarding state [ 1546.300815][T27325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.308058][T27325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.315514][T27325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.322812][T27325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.364070][T27325] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1546.760793][T16451] wlan1: Trigger new scan to find an IBSS to join [ 1547.350666][T27346] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6934'. [ 1547.967898][T22596] Bluetooth: hci5: command 0x0406 tx timeout [ 1549.776044][T27351] validate_nla: 2 callbacks suppressed [ 1549.776056][T27351] netlink: 'syz.0.6936': attribute type 10 has an invalid length. [ 1549.800924][T27361] device .*! entered promiscuous mode [ 1549.814239][T16451] wlan1: Trigger new scan to find an IBSS to join [ 1550.139516][T27381] delete_channel: no stack [ 1550.751980][T27395] netlink: 'syz.0.6952': attribute type 10 has an invalid length. [ 1550.796668][T27396] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1550.937289][T27406] netlink: 'syz.4.6955': attribute type 25 has an invalid length. [ 1550.959095][T27406] netlink: 'syz.4.6955': attribute type 9 has an invalid length. [ 1550.979551][T27406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6955'. [ 1552.760084][T11339] wlan1: Trigger new scan to find an IBSS to join [ 1553.783255][T11339] wlan1: Creating new IBSS network, BSSID 52:fc:0f:e4:8f:aa [ 1553.827324][T16451] ------------[ cut here ]------------ [ 1553.833604][T16451] WARNING: CPU: 1 PID: 16451 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1553.843712][T16451] Modules linked in: [ 1553.847680][T16451] CPU: 1 PID: 16451 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1553.855358][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1553.865507][T16451] Workqueue: cfg80211 cfg80211_event_work [ 1553.871311][T16451] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1553.877655][T16451] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 85 e7 f7 0f 0b eb bf e8 07 85 e7 f7 <0f> 0b eb b6 e8 fe 84 e7 f7 0f 0b e9 82 fd ff ff e8 f2 84 e7 f7 0f [ 1553.897379][T16451] RSP: 0018:ffffc90003477ac0 EFLAGS: 00010293 [ 1553.903651][T16451] RAX: ffffffff899ac179 RBX: 1ffff9200068ef5c RCX: ffff88802ccc9e00 [ 1553.911696][T16451] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf7160 [ 1553.919770][T16451] RBP: ffffc90003477b70 R08: ffffffff919342af R09: 1ffffffff2326855 [ 1553.927850][T16451] R10: dffffc0000000000 R11: fffffbfff2326856 R12: ffff888079d6b5b8 [ 1553.935864][T16451] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888025144c90 [ 1553.943924][T16451] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1553.952919][T16451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1553.959602][T16451] CR2: 0000555556c5c7e0 CR3: 000000003000f000 CR4: 00000000003506e0 [ 1553.967667][T16451] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 1553.975760][T16451] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1553.983835][T16451] Call Trace: [ 1553.987139][T16451] [ 1553.990147][T16451] ? trace_rdev_return_void+0x240/0x240 [ 1553.995830][T16451] cfg80211_process_wdev_events+0x359/0x4d0 [ 1554.001844][T16451] ? process_one_work+0x7b4/0x1160 [ 1554.007019][T16451] cfg80211_process_rdev_events+0x9d/0x110 [ 1554.012912][T16451] cfg80211_event_work+0x2b/0x40 [ 1554.018010][T16451] process_one_work+0x8ab/0x1160 [ 1554.023010][T16451] ? worker_detach_from_pool+0x240/0x240 [ 1554.028751][T16451] ? _raw_spin_lock_irq+0x86/0xf0 [ 1554.033825][T16451] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1554.038915][T16451] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1554.044486][T16451] ? wq_worker_running+0x97/0x190 [ 1554.049601][T16451] worker_thread+0xaf5/0x12a0 [ 1554.054519][T16451] kthread+0x29d/0x330 [ 1554.058657][T16451] ? worker_clr_flags+0x1a0/0x1a0 [ 1554.063853][T16451] ? kthread_blkcg+0xd0/0xd0 [ 1554.068573][T16451] ret_from_fork+0x1f/0x30 [ 1554.073051][T16451] [ 1554.076100][T16451] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1554.083384][T16451] CPU: 1 PID: 16451 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1554.091009][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1554.101079][T16451] Workqueue: cfg80211 cfg80211_event_work [ 1554.106898][T16451] Call Trace: [ 1554.110174][T16451] [ 1554.113098][T16451] dump_stack_lvl+0x188/0x24e [ 1554.117798][T16451] ? memcpy+0x3c/0x60 [ 1554.121780][T16451] ? show_regs_print_info+0x12/0x12 [ 1554.127002][T16451] ? load_image+0x410/0x410 [ 1554.131515][T16451] panic+0x2d3/0x710 [ 1554.135418][T16451] ? bpf_jit_dump+0xd0/0xd0 [ 1554.140023][T16451] ? ret_from_fork+0x1f/0x30 [ 1554.144635][T16451] __warn+0x2f8/0x4f0 [ 1554.148634][T16451] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1554.154185][T16451] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1554.159739][T16451] report_bug+0x2ba/0x4f0 [ 1554.164151][T16451] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1554.169696][T16451] handle_bug+0x3a/0x70 [ 1554.173892][T16451] exc_invalid_op+0x16/0x40 [ 1554.178402][T16451] asm_exc_invalid_op+0x16/0x20 [ 1554.183300][T16451] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1554.189457][T16451] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 85 e7 f7 0f 0b eb bf e8 07 85 e7 f7 <0f> 0b eb b6 e8 fe 84 e7 f7 0f 0b e9 82 fd ff ff e8 f2 84 e7 f7 0f [ 1554.209063][T16451] RSP: 0018:ffffc90003477ac0 EFLAGS: 00010293 [ 1554.215131][T16451] RAX: ffffffff899ac179 RBX: 1ffff9200068ef5c RCX: ffff88802ccc9e00 [ 1554.223110][T16451] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf7160 [ 1554.231096][T16451] RBP: ffffc90003477b70 R08: ffffffff919342af R09: 1ffffffff2326855 [ 1554.239091][T16451] R10: dffffc0000000000 R11: fffffbfff2326856 R12: ffff888079d6b5b8 [ 1554.247184][T16451] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888025144c90 [ 1554.255241][T16451] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1554.260934][T16451] ? trace_rdev_return_void+0x240/0x240 [ 1554.266493][T16451] cfg80211_process_wdev_events+0x359/0x4d0 [ 1554.272507][T16451] ? process_one_work+0x7b4/0x1160 [ 1554.277650][T16451] cfg80211_process_rdev_events+0x9d/0x110 [ 1554.283481][T16451] cfg80211_event_work+0x2b/0x40 [ 1554.288511][T16451] process_one_work+0x8ab/0x1160 [ 1554.293470][T16451] ? worker_detach_from_pool+0x240/0x240 [ 1554.299121][T16451] ? _raw_spin_lock_irq+0x86/0xf0 [ 1554.304340][T16451] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1554.309362][T16451] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1554.314923][T16451] ? wq_worker_running+0x97/0x190 [ 1554.319959][T16451] worker_thread+0xaf5/0x12a0 [ 1554.324713][T16451] kthread+0x29d/0x330 [ 1554.328835][T16451] ? worker_clr_flags+0x1a0/0x1a0 [ 1554.333927][T16451] ? kthread_blkcg+0xd0/0xd0 [ 1554.338514][T16451] ret_from_fork+0x1f/0x30 [ 1554.342937][T16451] [ 1554.346257][T16451] Kernel Offset: disabled [ 1554.350663][T16451] Rebooting in 86400 seconds..