last executing test programs: 4.912459507s ago: executing program 4 (id=4233): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="2b6e657400000000000001000000d4c8a097ff7d55a65447f44145f4c56d5f5bb1245d11038c54921493f001d7c053dc792382ee1b39737a7a2dc13a1b343fe51076ad750901bf3e41a04cc5e74b22f52d52385bd90000000042e55eccc0d9b7841ca645da88306c5f53bcb1d2e1d849d534ae4bd45602a69d0c28644a81720bab1069158e24"], 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0d00000005000080030000000e0000", @ANYRES32=r0, @ANYBLOB="bc0c00"/20, @ANYRES32, @ANYBLOB="01000000050000000300"/28], 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x2}, 0x100010, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000ffff0f00000000000001000004040000000000000002000000000000000061612e003bdb4e4a8959ba546c"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0xc2bc, 0x0, 0xfffffffffffffff7, 0x2000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff51c00ff003b002b000000000000022b000000000000", 0x2f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x3, 0x0, 0x0, 0xfd, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 4.901581638s ago: executing program 3 (id=4234): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="990d9c", @ANYBLOB='\x00'/24], 0x50) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, r4}, 0x94) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x7ffffffffffffd}, 0x104040, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x0, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4) (async) r8 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='1-6:5', @ANYRESDEC=r0], 0x31) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="0000791040000000000095000000000000000000000000004e53c243d9d08a60848c8183da29cba50118b5c6c97f0e1383e585d1417daf7f844b3204d7063944cf675ed3c2cefe"], &(0x7f0000000000)='GPL\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000648600000080000000003ad02202887b0000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@typedef={0xd}]}, {0x0, [0x30, 0x2e, 0x6f, 0x30, 0x5f, 0x30, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000200)=""/127, 0x30, 0x7f, 0x0, 0x7}, 0x28) (rerun: 32) socket$kcm(0xa, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4.594220445s ago: executing program 4 (id=4237): socket$kcm(0xf, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f00000003c0)='io.pressure\x00', 0x2, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000300feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) recvmsg$kcm(r7, &(0x7f0000000300)={&(0x7f00000000c0)=@nl=@proc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f00000001c0)=""/97, 0x61}], 0x3, &(0x7f0000000280)=""/67, 0x43}, 0x40002142) 3.660129289s ago: executing program 3 (id=4241): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x28) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x10, 0x3, 0x9, &(0x7f0000000800)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair(0x26, 0x5, 0x4, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f01000000200000000000000d0200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3bc6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@generic={0x0, 0x1, 0x5, 0x9, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) unlink(&(0x7f0000000200)='./cgroup\x00') recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.659580039s ago: executing program 4 (id=4242): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6200, 0x3ffffe, 0x0, 0x4, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x6}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_config_ext={0x8, 0x1ff}, 0x21, 0x0, 0x3, 0x4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x12986, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES64=r1, @ANYBLOB="933099503aa2b750b7712d1481a5e65220f3b2dedfefc1b5b6b8361d02064c65fa5f9003b0d69ec19dd18167b2b5335f59dd86ac84bdf2ef1edf4fe3e39b8aabcfe4dca18ef31c94df67176766e7b9d38b0e00c472d674bf2209d5cc83e4877362f57c6772b52e4eb82fad68b8cf21cad820cd4c530982f175e52ab9bf0f0548fffa73219c6d91e2ca2e69a4cb0a8ecfd41a09847b"], 0x50) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r5], 0xfe33) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) sendmsg$inet(r6, &(0x7f0000003940)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003780)=[{&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="0a5f7174980a7b8fdc36d298dcc7476079712f4297809e4c7a6b7266f313055ee173e805fd09a5f6f0cd5237d8f5a6d2775c88bc604a6bf5a24d073dcc4d2edc2bb3b46c5a53e1fea8", 0x49}, {&(0x7f0000002640)="6384a74c55551460f20797c9911d67bd8da6dcc5dcdc7c6e184880ee49eae2296258a3fd3d7a90fc7dd7c80f5ab3c40ab20dec78ab92e93b81cd0d8fbc25a5877d636997d4de0df65aeb9b9af49f394f8f98bda7dc2a3aba9a1baca6fe663e2f3796d393aa8c13f4a8e4bf40e75a74a576ca374e1ec9ecde5cacddb5e09ac877ce1cc83058f281c004fadd15bb7faf73e4a001725e18395eda74c22b59525b9bfb84bf7dcbb60ebbe1e6767131789b6995fb6c2d62ce8636743b7b388d036cf67d5c71f42f82801a28591506f9b9f3f76c33b2727d7f336886d4561a492c28d8a1030a4321092da5eed703946a39877e19fd45", 0xf3}, {&(0x7f0000002740)="6058cfaedc06123df0457b53712b80cf5851112ed3d20c95dc89d54226c547c7d39f0acf98b0c335fd1fe1a1a074c25a7dad", 0x32}, {&(0x7f0000002780)="bda343225504da4333403bbae71864db0583d3698b8280142c1e7920c26828c6107c22235c8693b744e0d04b4341a86f5057eede9f2fc518c1aed48c38e06517ee059363cbc72e8b349c9103d0424891a06e46b033ed48373bbccf5fae14531470f7d362e85f0ee539af0b7eb21fd05d87cfacd9c9dfb6208db0889c8288af4aae156325684c6eb09bb3813a2a923f2e025cc0929199580c423d855656e82bf861a32c1cf57438c0f08106bb0bdeb6a0dbeecd09805b1fa8d57c59772743ef190aaf71b7c29f11aad37b4a2ceb891ec280fec4318ed9f3c7d52b11d47f1913f6d003a815838cc09c7b8af144f15c8dbeaf08df2db8511ca2a03676096a1fa81c121c359bf032e70082e7aa5f7ab7cab5e18af67bfb4aabacba8fc8f81a3183597d528b1135d9b15c3fe0d2e57a154a266e5d341586e02ddf0c9af5313d4bd972006dbfab6c460c8bf49d2b43a581615360d9e8bcc6246a2bc9ae2c8e80a70b58ec5432516240d9c0e2cea50be07b21e3d1969d5ae04bc9a6b917bc01d99ebb6a512708fc68629c5efcb8ea43369d3555491453925cff20015b28c676e30e5280165dd066085bd1a72a0b2963b202c5e0d9fb6ca3ea113c6818e202c7c006bbcc5c5b9e40ee205c9107edb5b8529c061b725d0a0db3465e8f758989060ed20090f3f9992dc68946202aa3b24849bb954c83d4709e92dffeb5ccfe0a0c6c4a7193b769fcd79aec038e201f6adf903e75c3653f440e3df33c2a218c144f4d52bb5e201b127494f8909dd2edf021c7c90e8a6cbb42d18d884bdcdd0f3923f7a8e81c33043abeeac907f226d46d943b0de38a35356bde8d0ee7804d4e1ad96864721ef7a4fc3dc1a0679e6b046814a6e48310dcbfbdbed4e35505de5cee67740941325ff3b9f9e074030e868a630043810d0bc24005a82c2e7a5d0dd04523239bb4245bdc771f5a8b8a549eec2b97b82c9ff2ee5c0d045350930c63fa6ad877061736d7ac5e5503f9f775182361b5e79063439b0934681fa440e9428f8a384001e6b430d682735921f6fa42f7c4b3984e0002ecb48b2bc71f95885daff9093074b3f7efaff06513cb9fee36d2b916eb23eb4d8284727c32b995d80b7a97912380588072d6f707ad4f9e0fa66cb800d96c153c5de44ca04e88c065c9e3c2703adbbfde8d14d1c65e4e25c767cf532a80846798251232f30f076ca7289dded8b3e429f6a66bd15b11740e6a68f7ae9591321a54a9ed20f7886c4c212d34fd8346293d016267d1f397864095e6b041687dbe2fb090930940d90e530fa87cbba04b1cf40d7981eb72ef39b96efb3814eaa484ee15fd43993d43c4b75403ca7bab3ec3848b4621ae70452c1175da09064b5499e9e8cd74073ea0cc9fb08dd4253a53a2fab56ba4059ccabc023ca12cd2c0d576572fc88469df7279225122096da8c2ebce165fbc1b948798c6c0938713ac0cf6548df25c52da774f34b8d13999791ca7f047a820c5609d8f4b9cc6c132ea2d299bcbdd7de3aa4d0bde13992f72c7d2d9fc0835f712132994a8ea097c2b0b2bd02742b2fdb364a55d03f1c572dbc074f2181e0122e9ccdf13958dc6927c6f1729a78e35eb790e4f4e9e30f67c47fbe84c913a6fbb62b4f0180a1f0e1e55c44c54b4a9bca5395e7ce3621da41fd4391166db63b5cb52f30ae0007ae31510f7ae2ea62943e4607980d6ba06bc16117c4f17a3e6baf9815adeaa6222596cdf2190c2d4604b04df82539a32efd1c8717a5596cc49db876ee8b2a4da263bf0d468bc61adbdf5714d32ca451a100de650f65b8a9ab30c40a3c36afdcec03e4da026d462ddbd736dc16ee51aa52abbfe608bb2232d2c3a51b155d46ec54cdc32ef800980ea8b50dc89e505de788d2c50f973ec14decca160f03dcb4406210a5ee30b15d3dbe8bdc123d932bf1c069a02855c80dfc716f1a263c62f454b3ac47e89c6e3603f9aa3749e1c8674eba1075e249fef6faa19652cf2265ded5d449dae7d2068fd88ef1fbb5bb03cb07dd403d18f909f0b3241be8d6b97ada1aacaecf74955be78fe0176e7be61fa76882918c2edc4dbd7244d94143f71ed8f4022fe6aaca3af696b4cd3daf009c72acb905756ef264bcdc336c81cf77708933019a01331ee3884475ddde5c748f606b382a2f6911f85b16e263ee1e33c6b84b3164821d1f57a4aa097f6a57ee6872152d28bb9f9dfe958ee24de22dd069bf6907f34c14ab4249c0cfaa1418f5222731f5221016d432204365530567954a2081b1abaff10cfe94343a7500a3f63b7ee96282b7806a5f6e3ea3ba5d855aa72f980b08eadaf9253d56cba72447dda1564fe1d735df8a66dd4a7e8bb68d43cabd211b2623a4851c98a3a889749d640323c01f7740f7650fa6405bee631cf8545e59b86512fdcbb60c74ee53f71f111f4b093703dc7b8be47d697ff2360b49d7490034fbc943104ed826559380e228fbf8cc0379f456694ef41a3db08358fe021d14adaafac1b3c7aff7780db017b745a6bb1d438754d425414e8fc282fd8d228f7819797b3ed3f4e2bdab20b9f5b6313258a702c5a9e200c1d305a9077ff5c91ea44ab3e6bdb89a1beb93929bda431a1cee66248a53c9f4bf1e5e881102a42f6fc9a5a43f56a2aa4d0c12cc77d894499bc1829010af56c5984f750e8f4cdaa6186afd476cb9eda07d4a15ea867473bc517233cafee3861b58002a60b239a5148dbb1da5063de01265860f7c4444eda1a24603d035bad3465a757dce88787a184385d0c55571b8b23d64dc37f0a0b014562eb3589d68c5d9a28dd3f87a237215640ea57efc68e9b1e87713a74c27c3b1260310bade0332074979ccb862b34807d1dd15de61c66cf917730c29764e6cb919fa64dab3e3dbb47ad41350d4799281605369ecc82cb0bbb53155ee4e691d348b12199598577c91773796fc64a1048f3544888dbd9fd4e89786a04348181c7875d7b9b012e91265765f481562034adc5d1e7867679947524924ec3cd49582149a97f3d51d415efdb13f7000eaab9f5c84dd2614bd2ff6fb6fa1beef566db55cbb3583b8e6fab8833f5f97f80866de231569757fefaa35dfdc27ba4e89b76bdc5682ed2dbbea601065dae904e3e99f0e2363e1a3c142a9778a94fa7e627eb3e901b6189845bfd126f0e11f39bd5b47efac61379e23869df3307e25084047d4d86545e5eb5e76cfb70c66f2da348fe280d23139445f532fdabae2033145c6c66bc7e15456d5c6c6033973617f466ea2cb12c25f77d88f99d82969280a7ff588ed9a9757366844013e2525238be988406644c00de2d8b89644b7dcdb27de9dad0d4b38be7ce426ded8f2d53723ac362a298d1382a481d6a0c25cee5d083d2958e1976a620fcc3bbe8890c8e76f2a51b8119ca4117f03f14641bb6c5029f690ecc1b53bdffbce9f30c8ce754ac66f5c26c40105f97a669f84d46ec2f223c24b70fb117b8dffd3a99ee4ee3aafdb413dd6cba5fc271c845e84bd2c789750dd78332acfb5f40253180841c6ff9379cb4d14cc53fefd755233604e6106cba5ae3107a951e02c3681b9a1f6035aeed741f56c529382faec194e99353d0bd3472f123194c6e6016eff32998a4028b08bb9bfef09f1a8b6a9d89e79036815ab521ff672f8f9d62afce09e694c660d51a23de21aecec4016439f4205f9a548cc6fb3bd496669657adbf61abfefce84853ddb26957eea51171033411ff65c0f0ebd7218ff3413e1fe36885d8b2ba6704f3181cfbab944f1573a2c7cf763b9f6b725d837964323a649b9c67082bd794258c4db0b2012163db99d9ba377c85f6eb892ee7bc4acabbab60c638904fb23b6e864371d27ce1999e2e5891afbe809da677470c342616399c1446de35c45ec9c8981fc7cc4b7f7f5caa1325a1367e385def9d77099d001d7a7e4600ab69fadf8fec41c8c641d02d7600bd0b7897e1dcda9788eadc1b2e570a0a6c6896eff001600b730be1054f8b899d2a1a8ba242f3aa7230a6da8e0c00a310c69a9b569e4874f68ad67d62f6a21745e837e91a9ba8b05a1fa02ca8032d22b74ca6f090250a812f0ff963e2b97a2a9ca3f15e57ad1c1b5cb0491826d503eb7ecd709545969bd7e451c14d412067369d6c62235b484ce7abf270aad45509c37bf7e3dab1c88ed8290be18addb03218912626cb53a8a546a276278186b4ac4aaadc46a7c7aad869254c9089551b02e5f47e3144b51e980bf158d800ebf387b99af2147938cb0e14991d638d4df157518c535b43507a24cc67012d94e79e3d7f189406322d1ed3e4c3e460e449ad5fb521e83f4ef1562a02cc11f8d77759880c733a57f9c77b8bd98eaa6657967bf0c9d35055b368b77a776ee3f63d8d00afcbaeceaa9ea7113c2a462601f39fcdfcd7f833fd9f81670b03cfd99b511381f8657f60825649504a962579756655e032dbe44c35394360e33ef3203213af501a911a90cd8a035a3825d7f8ae3ab840616e8807b500ccc6f150f9e4b9f1dcde821704a653f6eabb1e670b8a141f7998566efc70184375065555d364df78f17408e0d7f3d224c83cf0f82354e07e6f2cc51d4edeed460d879ac44046dc84cb943be64e7a56e4fe1c238b240d5383943b08fa5b62c18ab5d73681711d96c7bf8855f3edf45b861be49fb11917b32eb54a7ad758d3cb83b724095c13aaa1aaae0559c07b59788f012cc5b0453ee475b810f7b76504ea1579642102219ade8d6dcf18050fb2861912327f139635af41bd0d5d59ded46fe11ddf6f2bc8be309ff3bd487a1ef9de669a61f6f745979fdd2140f7f9238ad81937262ae11e10559194adeb3d474de2242a45c1efb2fe0238633ad9b7bb341b6fcdf704aa557ed33c46b8e4713523a30c9f153be8dbd0621be77ff5c7ff3b8f6d92926c7986abb7bc22a6bb0ebaa360a8687f878565ccc7c2326b9fa583c95229d1e5574da86d6d0654731844ebbe7433dca85e7f1501941da433cad853b09eb22d4b04ce7e94b827d89efe84f23f3d735344b0608c53a77478f2a0e71914bfaf2fc02a422841983ae3619524b39f7a922d908d2fa9a334f6c6b0ea4e3eac9d2ead9938b6081d3ecf6940ca91aa797e22e08778ba1f84272c7ec520a5586bf5d69337ffe715c4ca97e0fb8c75ede5069d00f0c4331028a27a4c537369635e47d0bdc463c3093e6f1736aa4d6b347a83a094c200b88b8567eb0d8576be8e9d014bdca5bc2fd2a83c90381206888666d3c28109224bd05671720a4290dda432c22473aa190bc27721759de0e575278192d9bddc2891f2fc110c9d5581a05af0dda4094cbe7aa698df77124cfcb935515455830a0a2f4657a82547b5e2a14ca0bf41facef95864cef271fc274bce7fa6a7886d4cb20f5992b331c02f0cfbf40a82b279a99983c56ccb98e981d278daeb3988eb1fb84e9708bf0867a97fe303a1e58719c854cd768528008a019739c895919c4bd0245cc45ca1d30a713b26f46c0434fa1709ead8b64be7b4d3b80e99b4f110ba33e919fec9f37fe25bd2e548b968bdc2094cd7deb1d2517fa513eec2dbee48fc8374a902edb328282d62b2701e90fd04b6c521536912d5bb258a867014b6137e5bb8536582eafa9d956ce55cf648f0a2f134ea0901f6653053bdafd683995c866aa25ea2625443b695d908ff009bc9ffe7bd47a2488ea5b98893c9ed3d1407eaca3b7079a8d043b1ec04b8ee51c1214c88b45fad1993eede2b2717c4efac5e5636b7d529c6eadaf0f1ee4a0a0f13391bd9c539bb104fd6d77b3ec79e55b3eb32012eff4f", 0x1000}], 0x5, &(0x7f0000003800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x108, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xfd, 0x1, 0x4, [{@loopback}, {@local, 0x6}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc65}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@private=0xa010100, 0x1ff}]}, @timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b6e21fb}, {@loopback, 0x100}]}, @rr={0x7, 0x1f, 0x7, [@multicast1, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x41, 0x2, [{0x6, 0x12, "380955b8748a1ec113422a6ed485b61f"}, {0x2, 0x4, "8614"}, {0x5, 0xb, "3c87bad66716cb9ce8"}, {0x5, 0xd, "1dec2c591b98b77bfabc37"}, {0x1, 0x4, 'J\x00'}, {0x6, 0x9, "7872b4b8642a56"}]}, @rr={0x7, 0xb, 0xf7, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x1, 0x3, "aa"}, {0x2, 0xb, "01122e3c0208171345"}, {0x5, 0x10, "4089340d1a1aa06b80615a82276a"}, {0x1, 0xe, "a313339a99a3bce72dfc546c"}, {0x1, 0x3, "8e"}]}]}}}], 0x120}, 0x4000000) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) 3.60531139s ago: executing program 0 (id=4243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) (async) ioctl$TUNSETLINK(r0, 0x400454cc, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200000000000000000000000000000004000000"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r2, &(0x7f00000005c0)="696f1dbeee953675b3b70a7e8908ccf7c9cd0c0761b8e618d54acb8f308c4475cda29fb4c20d1b80384fe5ed9dc0d7912434524eb2720fc233f9471ad4e8e64e13fdc3c80873ecb76489c3e9a38380f81ed40c3f4f2f3f0add95be1907648f48e401031f764a5513b1cffdd551402cb88fbdde"}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) (async) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x4869, 0x6, 0xfffffffe, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x7, &(0x7f0000000000), 0x4) (async) socket$kcm(0x10, 0x2, 0x0) 2.970302336s ago: executing program 2 (id=4247): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000b80)=r0, 0x4) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="1400000015000b00000000000000020d1a24fca7", 0x14}], 0x1}, 0x840) 2.912053347s ago: executing program 1 (id=4248): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000a00)=ANY=[], 0x38}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c07", 0x17}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x0, 0x4b01, 0x4220, 0xffffffffffffffff, 0x1, '\x00', r5, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x2}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000540)=""/31, 0x1f, 0x0, &(0x7f0000000680)=""/164, 0xa4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x19, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6a0}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xf9, &(0x7f00000003c0)=""/249, 0x41100, 0x6f, '\x00', r5, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x10, 0x31f, 0x2}, 0x10, r6, r4, 0x8, &(0x7f00000007c0)=[r3, r3, r3], &(0x7f0000000800)=[{0x4, 0x3, 0xe, 0x7}, {0x2, 0x3, 0xd, 0x9}, {0x3, 0x5, 0xa, 0x7}, {0x5, 0x1, 0xb, 0x5}, {0x6, 0x5, 0xd, 0x5}, {0x2, 0x1, 0x10, 0xb}, {0x3, 0x5, 0x5, 0x3}, {0x5, 0x5, 0xe, 0x3}], 0x10, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000600)}, 0x10) 2.680114153s ago: executing program 4 (id=4249): r0 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x4004004) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r4, 0x13, 0x1, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b0000000006800200", @ANYRES32=r3, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x13, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="e03f03002a000b06d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x20000811) 2.632665444s ago: executing program 0 (id=4250): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', 0x0, r4, 0x1, 0x4}, 0x50) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2.552097186s ago: executing program 1 (id=4251): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x1f, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1814, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000004000030000000000000008400000001"], 0x50}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, 0x0) getpid() r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) 2.551796926s ago: executing program 2 (id=4252): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x28}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) getpid() socket$kcm(0x2, 0x200000000000001, 0x106) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='[-#]-\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000069006bcd8e3fe3dc6e000000008c000000007280", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x50) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x16, &(0x7f0000000040), 0x12b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$inet(r4, &(0x7f0000001900)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8922, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.538395816s ago: executing program 3 (id=4253): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.670008968s ago: executing program 1 (id=4254): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x6a}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x402, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.59624227s ago: executing program 4 (id=4255): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="df333b89f8000000000000000000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.531489321s ago: executing program 2 (id=4256): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x7, 0x2, 0x1c, {0xa, 0x4e23, 0x101, @mcast2, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa00000080ee360018000000000000001001000001"], 0x30}, 0x20000004) 1.382701065s ago: executing program 3 (id=4257): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x47, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000fe7f8500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x3, 0x1, 0xf8, 0x0, 0x6, 0x4000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x400, 0x6, 0x1, 0xa, 0x5, 0x8001, 0x4, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x40, 0x20, 0x1, 0x0, 0xffff, 0x8a412, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x4}, 0x10000a, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000280), 0x0}, 0x20) 1.312238417s ago: executing program 4 (id=4258): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40402, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xaa00}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000001000000010000005400000000c000", @ANYRES32=0x1, @ANYBLOB="8100000000000000000000ceffffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000050000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x0, 0x4b01, 0x4220, r1, 0x1, '\x00', r2, r3, 0x3, 0x5, 0x2, 0x2}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x7, '\x00', r2, r4, 0x5, 0x2, 0x5, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.260079488s ago: executing program 0 (id=4259): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="2e020000fe0000bb3c2c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000800000000000000001c00000000000000000f00d143639efd", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000e0078f0208000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000000000000700000094040000441088000000000000000000000000000000000011000000000000000000000001"], 0x98}, 0x0) 1.20042978s ago: executing program 1 (id=4260): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x201, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000008c0)="d80000001a0081024e81f782db4cb904021d0800fe0055a11500150002f3102ae81dba4e3000142603600e12080009007a010401a8041600200002400400027c035c0461c1d6ff6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000000000000000", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)}], 0x2}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xaf, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcf, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="00000000020000000000000000de"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x9, 0x7, 0x7, 0x208, r4, 0x4, '\x00', r5, r6, 0x3, 0x5, 0x3, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x2, 0xfffffffc, 0x4, 0x0, 0x1ff, 0x0, 0x20000000000a8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xf, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r0, &(0x7f0000000bc0)={&(0x7f0000000800)=@generic={0xf, "d738316d38a6eff581d1d5b51e0015e7e9053c278ba46e7e26e690d4f77c5baf67f416273a7f9b63d4db02ea86cb03b3649f6828bc124edf21a39213ccd589db8096fda263bb56acdb291285094813a0b869d582b56c4237dab5d161f2ad4b2efe0499ec322db8742a7358262370b64880890fccbcd48df1d15a4add111c"}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)="face7c7403365737e9823f38dc4d8ebe4474ed2f1bcd1381cceb47a44d0bf4dc101554f951f34341ea8869654bcafb7f902a677247aca4dee68bfd6722a81ae64ded27526a9d286e59cc6f7106f31c4b2a217c39cc7cb785754448d01e20b7ea4de3be4db95e7527f77418b6295c71836064b7096be3372cc3dd9896f74f7868ff7b9e0318b009b1bca0bf64d301db4e1f392207e6df4f831f1a5007ef226281bddde3b2d7de0305f48ac72b9af709e5d15aea9b8791a984f1bd356ccddb7ca6d7b2ff4abb830a67fde797306f42841ab2545c25", 0xd4}, {&(0x7f0000000980)="178627db0f782f3b9dfec0b2055b43f7a25523fb4057cfc6eaeba655c58391c74b12017147892fc9b0829e7965d24ec76b6c9f6b36fc0ee8d5ada9fe336373081d4aad49b97daf15e96b00748eee2d5a16ce135a3fae96318ab245763769e050bd3e2fa826ff2b8d416bcc8c130af05cca2befca8d04e5390c0af22f6b31ae21bce0877d6ad0f13152d0d557eb5b6326b0a68a1090325db7535b855a6d3b522f3e23096d53aa49ca076b1b0829363f0048f917f6a4ee6765144776266f7aa9c06355fc868c60", 0xc6}, {&(0x7f0000000a80)="c7d7fdb5c34842424c37d27e47247ebad4789c99631e755773ae6f003788baf8eb9d6d7a43accc77264f9005a98684c6578321e66765c1ec8ba0be8f07a873f252594452a607747b36873cc3f97e6c62", 0x50}], 0x3, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x48}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 1.115618702s ago: executing program 2 (id=4261): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000)={0x1010000}, 0x1dd}, 0x48) 1.032121764s ago: executing program 3 (id=4262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002bc0)={&(0x7f0000002a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@fwd={0xc}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x5b, 0x6}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8001, [{0x10, 0x0, 0x4f000}]}]}, {0x0, [0x2e]}}, &(0x7f0000002b00)=""/154, 0x73, 0x9a, 0x0, 0x743, 0x10000, @value=r1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d00)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@generic={0x97, 0xf, 0x4, 0x9, 0x10}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000001a80)=""/4096, 0x0, 0x20, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000002c00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002c40)={0x5, 0x0, 0x8, 0x81a3}, 0x10, 0x217c8, r1, 0x3, &(0x7f0000002c80)=[r3], &(0x7f0000002cc0)=[{0x0, 0x2, 0x0, 0x2}, {0x3, 0x3, 0x2, 0xb}, {0x1, 0x5, 0x6, 0xa}], 0x10, 0x72af}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002bc0)={&(0x7f0000002a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@fwd={0xc}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x5b, 0x6}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8001, [{0x10, 0x0, 0x4f000}]}]}, {0x0, [0x2e]}}, &(0x7f0000002b00)=""/154, 0x73, 0x9a, 0x0, 0x743, 0x10000, @value=r1}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d00)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@generic={0x97, 0xf, 0x4, 0x9, 0x10}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000001a80)=""/4096, 0x0, 0x20, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000002c00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002c40)={0x5, 0x0, 0x8, 0x81a3}, 0x10, 0x217c8, r1, 0x3, &(0x7f0000002c80)=[r3], &(0x7f0000002cc0)=[{0x0, 0x2, 0x0, 0x2}, {0x3, 0x3, 0x2, 0xb}, {0x1, 0x5, 0x6, 0xa}], 0x10, 0x72af}, 0x94) (async) 752.106641ms ago: executing program 1 (id=4263): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0x5, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 750.209671ms ago: executing program 0 (id=4264): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x1f, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1814, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000004000030000000000000008400000001"], 0x50}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, 0x0) getpid() r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) 737.945912ms ago: executing program 2 (id=4265): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 684.930832ms ago: executing program 3 (id=4266): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110ba00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x800}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000022007d283840253ada4785391f890b0f", 0x14}], 0x1}, 0x4000010) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1408000000000000b89e08dc88a8", 0x0, 0xffffff02, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x0) 588.182525ms ago: executing program 1 (id=4267): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 516.277897ms ago: executing program 2 (id=4268): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="df333b89f8000000000000000000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 270.209853ms ago: executing program 0 (id=4269): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x300000000000000) 0s ago: executing program 0 (id=4270): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x6a}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x402, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) kernel console output (not intermixed with test programs): 07][T13824] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 671.683309][T13728] chnl_net:caif_netlink_parms(): no params data found [ 671.766830][ T5162] tipc: Left network mode [ 671.791525][ T5168] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 671.818364][ T5168] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 672.082899][T13840] sock: sock_timestamping_bind_phc: sock not bind to device [ 672.307058][T13728] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.326414][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.361749][T13728] device bridge_slave_0 entered promiscuous mode [ 672.391110][T13728] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.415083][T13728] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.447802][T13728] device bridge_slave_1 entered promiscuous mode [ 672.654828][T13856] netlink: 'syz.4.3094': attribute type 10 has an invalid length. [ 672.734445][T13856] bridge0: port 3(dummy0) entered disabled state [ 672.763034][T13856] device dummy0 left promiscuous mode [ 672.775395][T13856] bridge0: port 3(dummy0) entered disabled state [ 672.953590][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 672.978457][T13856] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 676.054420][T13728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.067867][T13728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.102619][T13728] team0: Port device team_slave_0 added [ 676.143201][T13728] team0: Port device team_slave_1 added [ 676.235470][T13728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.272291][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.338453][T13728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.476488][T13909] sock: sock_timestamping_bind_phc: sock not bind to device [ 676.571267][T13728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.588858][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.626021][T13728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.638690][T13907] netlink: 'syz.3.3105': attribute type 10 has an invalid length. [ 676.769948][T13907] team0: Device gre0 is of different type [ 677.027919][T13908] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 677.060416][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 677.075726][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 677.227558][T13931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3108'. [ 677.313883][T13728] device hsr_slave_0 entered promiscuous mode [ 677.356477][T13728] device hsr_slave_1 entered promiscuous mode [ 677.389166][T13728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.428807][T13728] Cannot create hsr debugfs directory [ 677.987615][T13952] netlink: 'syz.4.3111': attribute type 4 has an invalid length. [ 678.070951][T13952] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3111'. [ 678.664237][T13963] netlink: 'syz.2.3114': attribute type 29 has an invalid length. [ 679.349448][T13975] sock: sock_timestamping_bind_phc: sock not bind to device [ 680.514549][T13963] netlink: 'syz.2.3114': attribute type 29 has an invalid length. [ 680.537044][T13980] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 680.674018][ T5162] device hsr_slave_0 left promiscuous mode [ 680.686412][ T5162] device hsr_slave_1 left promiscuous mode [ 680.718449][ T5162] device bridge_slave_1 left promiscuous mode [ 680.726173][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.765484][ T5162] device bridge_slave_0 left promiscuous mode [ 680.782345][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.906978][ T5162] device veth1_macvtap left promiscuous mode [ 680.932708][ T5162] device veth0_macvtap left promiscuous mode [ 680.942908][ T5162] device veth1_vlan left promiscuous mode [ 681.409852][T14007] netlink: 'syz.3.3123': attribute type 10 has an invalid length. [ 681.423201][T14007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3123'. [ 681.555784][ T5162] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 681.928773][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.976067][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.232130][ T5162] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 682.260799][ T5162] bond0 (unregistering): Released all slaves [ 682.353318][T14007] netlink: 'syz.3.3123': attribute type 10 has an invalid length. [ 682.369272][T14007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3123'. [ 682.525462][T14012] sock: sock_timestamping_bind_phc: sock not bind to device [ 684.907744][T14023] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 685.285718][T14042] netlink: 'syz.2.3131': attribute type 46 has an invalid length. [ 685.306059][T14042] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3131'. [ 685.362068][T13728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 685.403121][T13728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 685.447211][T13728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 685.515567][T13728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 685.630687][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.637397][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.882788][T14060] sock: sock_timestamping_bind_phc: sock not bind to device [ 685.890992][T13728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.922202][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 685.940513][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.960771][T13728] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.021459][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 686.043680][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 686.077039][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.084296][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.127499][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 686.177535][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 686.216739][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 686.262587][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.269889][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.346186][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 686.425949][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 686.451395][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 686.484644][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 686.515778][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 686.550874][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 686.607074][T13728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.719223][T13728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.806966][T14086] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 686.842134][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 686.876948][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 686.963720][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 687.025186][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 687.067020][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 687.116347][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 690.077644][T14124] sock: sock_timestamping_bind_phc: sock not bind to device [ 690.385125][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.398618][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.435674][T13728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.575066][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.605879][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.763940][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 690.790714][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 690.834127][T13728] device veth0_vlan entered promiscuous mode [ 690.849164][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 690.879745][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.921509][T13728] device veth1_vlan entered promiscuous mode [ 691.331161][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 691.365578][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 691.374798][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 691.396984][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 691.416784][T13728] device veth0_macvtap entered promiscuous mode [ 691.442158][T13728] device veth1_macvtap entered promiscuous mode [ 691.508177][T14130] netlink: 'syz.4.3150': attribute type 2 has an invalid length. [ 691.591369][T14130] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3150'. [ 692.448306][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 692.456805][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 692.467757][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.479337][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.490200][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.501114][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.513194][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.524146][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.536351][T13728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.545277][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 692.555775][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 692.568636][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.594361][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.607510][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.624059][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.634416][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.650818][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.666177][T13728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.683264][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 692.722682][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 692.766744][T13728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.805993][T13728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.831613][T13728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.847202][T13728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.090457][T14140] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3153'. [ 693.124543][ T5168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.158202][ T5168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.186128][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 693.244195][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.260196][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.295054][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 693.568005][T14160] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 693.992525][T14172] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.3161'. [ 694.365572][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 694.376898][ T4293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 694.389613][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 694.398467][ T4293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 694.406415][ T4293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 694.414256][ T4293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 694.651173][T14181] chnl_net:caif_netlink_parms(): no params data found [ 694.764140][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.775299][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.787040][T14181] device bridge_slave_0 entered promiscuous mode [ 694.805240][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.815433][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.827963][T14181] device bridge_slave_1 entered promiscuous mode [ 694.961732][T14181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.019486][T14181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.173240][T14181] team0: Port device team_slave_0 added [ 695.191984][T14190] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3162'. [ 695.218417][T14181] team0: Port device team_slave_1 added [ 695.313019][T14181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.338629][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.425869][T14181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.456868][T14181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.496606][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.573854][T14181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.687335][ T4280] device syz_tun left promiscuous mode [ 695.698199][ T4280] : port 1(syz_tun) entered disabled state [ 695.858718][T14181] device hsr_slave_0 entered promiscuous mode [ 695.886461][T14181] device hsr_slave_1 entered promiscuous mode [ 695.907740][T14181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.929267][T14181] Cannot create hsr debugfs directory [ 696.083547][ T5162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.187905][T14221] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 696.226631][ T5168] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 696.240726][T14222] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 696.254842][ T5168] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 696.286226][ T5162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.356098][ T5159] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 696.398213][ T5159] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 696.424746][ T5162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.509114][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 696.519387][T14228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3174'. [ 696.552449][ T5162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.237976][T14228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3174'. [ 697.286058][T14229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3174'. [ 697.505098][T14234] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3184'. [ 697.530462][ T5162] device 0 left promiscuous mode [ 697.616647][T14239] netlink: 'syz.2.3175': attribute type 4 has an invalid length. [ 697.635194][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'. [ 697.647619][T14241] netlink: 'syz.4.3176': attribute type 10 has an invalid length. [ 697.735992][T14241] team0: Device gre0 is of different type [ 697.952014][T14237] ¥: port 1(team0) entered blocking state [ 697.957884][T14237] ¥: port 1(team0) entered disabled state [ 698.018805][T14237] device team0 entered promiscuous mode [ 698.024601][T14237] device team_slave_0 entered promiscuous mode [ 698.038839][T14237] device team_slave_1 entered promiscuous mode [ 698.382751][T14246] device team0 left promiscuous mode [ 698.394217][T14246] device team_slave_0 left promiscuous mode [ 698.408426][T14246] device team_slave_1 left promiscuous mode [ 698.426032][T14246] ¥: port 1(team0) entered disabled state [ 698.592611][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 699.074945][T14269] netlink: 'syz.4.3183': attribute type 29 has an invalid length. [ 699.114517][T14269] netlink: 'syz.4.3183': attribute type 29 has an invalid length. [ 699.169874][T14269] netlink: 'syz.4.3183': attribute type 29 has an invalid length. [ 699.212268][T14269] netlink: 'syz.4.3183': attribute type 29 has an invalid length. [ 699.738887][T14276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3185'. [ 699.754862][T14276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3185'. [ 699.774927][T14276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3185'. [ 699.804140][T14276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3185'. [ 700.672369][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 701.498783][T14293] netlink: 'syz.0.3189': attribute type 10 has an invalid length. [ 701.725263][T14293] team0: Device gre0 is of different type [ 702.583734][T14300] netlink: 'syz.0.3190': attribute type 2 has an invalid length. [ 702.608440][T14300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3190'. [ 702.620131][T14302] netlink: 'syz.3.3188': attribute type 4 has an invalid length. [ 702.628077][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 702.748308][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 702.901670][T14181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 702.926134][T14181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 703.019985][ T5175] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 703.020001][T14311] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 703.027854][ T5175] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 703.073171][T14181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 703.103804][T14181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 703.531920][T14181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.614090][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 703.661437][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 703.790590][T14181] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.868612][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 703.887238][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 703.907909][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.915126][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.945622][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 703.965493][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 703.975629][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.982842][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.048970][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 704.134717][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 704.152308][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 704.210106][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 704.242528][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 704.265284][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 704.275754][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 704.299435][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 704.326313][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 704.369369][T14341] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 704.378941][ T5175] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 704.386815][ T5175] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 704.423943][T14181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.459371][T14181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 704.506545][T14345] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3199'. [ 704.527848][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 704.536690][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 704.555752][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 704.614449][T14348] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.758605][T14349] ¥: port 1(team0) entered blocking state [ 704.780179][T14349] ¥: port 1(team0) entered disabled state [ 704.807310][T14349] device team0 entered promiscuous mode [ 704.821849][T14349] device team_slave_0 entered promiscuous mode [ 704.861066][T14349] device team_slave_1 entered promiscuous mode [ 704.916662][T14352] device team0 left promiscuous mode [ 704.952844][T14352] device team_slave_0 left promiscuous mode [ 704.986723][T14352] device team_slave_1 left promiscuous mode [ 705.018595][T14352] ¥: port 1(team0) entered disabled state [ 705.295978][T14366] sock: sock_timestamping_bind_phc: sock not bind to device [ 705.561348][T14374] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3205'. [ 705.717008][T14370] netlink: 'syz.3.3204': attribute type 2 has an invalid length. [ 705.744312][T14370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3204'. [ 705.866398][ T5162] device hsr_slave_0 left promiscuous mode [ 705.889039][ T5162] device hsr_slave_1 left promiscuous mode [ 705.927102][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.975246][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.984696][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.001552][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.043234][ T5162] batman_adv: batadv0: Interface deactivated: vlan1 [ 706.067423][ T5162] batman_adv: batadv0: Removing interface: vlan1 [ 706.116052][ T5162] device bridge_slave_1 left promiscuous mode [ 706.125056][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.147503][ T5162] device bridge_slave_0 left promiscuous mode [ 706.165252][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.242947][ T5162] device veth1_macvtap left promiscuous mode [ 706.256852][ T5162] device veth0_macvtap left promiscuous mode [ 706.273114][ T5162] device veth1_vlan left promiscuous mode [ 706.298627][ T5162] device veth0_vlan left promiscuous mode [ 707.022778][ T5162] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 707.583893][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.648818][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.021997][ T5162] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 708.067781][ T5162] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 708.083663][ T5162] bond0 (unregistering): Released all slaves [ 708.154054][T14395] device wlan1 entered promiscuous mode [ 708.235335][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 708.253802][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 708.304482][T14181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.542779][T14416] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.3214'. [ 708.559686][T14414] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 708.626083][T14416] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3214'. [ 708.656843][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 708.674728][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 708.775814][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 708.788535][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 708.807932][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 708.824374][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 708.994735][T14181] device veth0_vlan entered promiscuous mode [ 709.023332][T14181] device veth1_vlan entered promiscuous mode [ 709.086414][T14428] netlink: 'syz.0.3215': attribute type 21 has an invalid length. [ 709.111055][T14428] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.3215'. [ 709.133990][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 709.155248][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 709.203555][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 709.232490][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 709.257083][T14181] device veth0_macvtap entered promiscuous mode [ 709.287972][T14181] device veth1_macvtap entered promiscuous mode [ 709.351840][T14181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.364690][T14181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.381511][T14181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.394309][T14181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.407506][T14181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.449996][T14181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.510643][T14181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.523182][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 709.566292][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 709.613769][T14181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.651123][T14181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.692937][T14181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.725238][T14181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.756385][T14181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.784332][T14181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.830213][T14181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.857191][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 709.887507][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 709.947337][T14181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.959246][T14181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.970265][T14181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.988220][T14181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.110944][T14445] netlink: 'syz.0.3217': attribute type 11 has an invalid length. [ 710.177453][T14445] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3217'. [ 710.238648][T14444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.324401][ T5165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.363639][ T5165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.412222][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 710.427657][ T5159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.437908][ T5159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.450906][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 710.795466][T14463] sock: sock_timestamping_bind_phc: sock not bind to device [ 711.353911][T14476] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 711.459564][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 711.514072][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 711.834159][T14482] netlink: 'syz.1.3228': attribute type 10 has an invalid length. [ 711.870616][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.878342][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.980121][T14482] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.987540][T14482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.996314][T14482] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.004224][T14482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.343157][ T4293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 712.358942][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 712.367200][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 712.378754][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 712.387261][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 712.395609][ T4293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 712.437736][T14482] team0: Port device bridge0 added [ 712.463735][T14484] netlink: 'syz.0.3230': attribute type 33 has an invalid length. [ 712.474065][T14484] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3230'. [ 712.491307][T14490] netlink: 'syz.2.3220': attribute type 2 has an invalid length. [ 712.519127][T14490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3220'. [ 712.541894][T14488] netlink: 'syz.0.3230': attribute type 33 has an invalid length. [ 712.554339][T14488] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3230'. [ 713.293498][T14513] sock: sock_timestamping_bind_phc: sock not bind to device [ 713.356834][T14498] chnl_net:caif_netlink_parms(): no params data found [ 713.569862][T14498] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.577298][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.585794][T14498] device bridge_slave_0 entered promiscuous mode [ 713.595630][T14498] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.603141][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.611505][T14498] device bridge_slave_1 entered promiscuous mode [ 713.640755][T14498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.661811][T14498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.730368][T14498] team0: Port device team_slave_0 added [ 713.761885][T14498] team0: Port device team_slave_1 added [ 713.776335][T14523] netlink: 'syz.0.3237': attribute type 10 has an invalid length. [ 713.813522][T14523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3237'. [ 713.832208][T14498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.850905][T14498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.918239][T14498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.966577][T14498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.980115][T14498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.037621][T14498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.078007][T14523] netlink: 'syz.0.3237': attribute type 10 has an invalid length. [ 714.096314][T14523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3237'. [ 714.204773][T14524] netlink: 'syz.0.3237': attribute type 10 has an invalid length. [ 714.224899][T14524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3237'. [ 714.437940][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 715.251655][T14498] device hsr_slave_0 entered promiscuous mode [ 715.315601][T14498] device hsr_slave_1 entered promiscuous mode [ 715.325050][T14498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.333387][ T4279] Bluetooth: hci3: Malformed LE Event: 0x1b [ 715.341480][T14498] Cannot create hsr debugfs directory [ 715.595923][T14532] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 715.605836][ T5175] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 715.631060][ T5175] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 715.651854][T14536] netlink: 'syz.2.3241': attribute type 10 has an invalid length. [ 715.700115][T14536] device macvlan0 entered promiscuous mode [ 715.820551][T14536] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 716.049553][T14498] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.089625][T14542] netlink: 'syz.1.3243': attribute type 2 has an invalid length. [ 716.118411][T14542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3243'. [ 716.160339][ T5162] device .*! left promiscuous mode [ 716.413970][T14498] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.508484][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 716.591415][ T5162] tipc: Left network mode [ 717.808935][T14570] netlink: 'syz.1.3252': attribute type 10 has an invalid length. [ 717.824031][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3252'. [ 718.588300][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 719.117293][T14498] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.139527][T14559] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3249'. [ 719.229192][T14570] netlink: 'syz.1.3252': attribute type 10 has an invalid length. [ 719.237118][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3252'. [ 719.314685][T14580] netlink: 'syz.3.3254': attribute type 10 has an invalid length. [ 719.427488][T14580] team0: Device gre0 is of different type [ 719.435006][T14584] TCP: TCP_TX_DELAY enabled [ 719.642015][T14498] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.721085][T14582] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 719.730896][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 719.739591][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 720.005151][T14498] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 720.067444][T14498] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 720.076908][T14600] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3260'. [ 720.091808][T14498] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 720.100174][T14600] netlink: zone id is out of range [ 720.105723][T14600] netlink: zone id is out of range [ 720.122056][T14600] netlink: zone id is out of range [ 720.127633][T14600] netlink: zone id is out of range [ 720.136649][T14600] netlink: zone id is out of range [ 720.147685][T14600] netlink: zone id is out of range [ 720.156368][T14600] netlink: get zone limit has 8 unknown bytes [ 720.219890][T14498] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 720.413986][T14608] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3263'. [ 720.428522][T14608] netlink: zone id is out of range [ 720.434283][T14608] netlink: zone id is out of range [ 720.457438][T14608] netlink: zone id is out of range [ 720.677561][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 720.725540][T14612] netlink: 'syz.0.3274': attribute type 2 has an invalid length. [ 721.363241][T14612] device 0 entered promiscuous mode [ 721.450472][T14498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.771547][T14623] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.3268'. [ 723.972638][T14628] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 723.982473][ T5159] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 724.006657][ T5159] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 724.098497][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 724.106398][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.122679][T14498] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.134178][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 724.179717][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 724.196230][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.203418][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.255960][T14637] netlink: 'syz.3.3271': attribute type 10 has an invalid length. [ 724.266166][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 724.269230][T14637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3271'. [ 724.287318][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 724.297950][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.311640][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.318871][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.327705][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 724.359933][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.375372][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 724.388914][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 724.397720][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 724.407225][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 724.417868][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.435326][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.521271][T14498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.539791][T14498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 724.561940][T14637] netlink: 'syz.3.3271': attribute type 10 has an invalid length. [ 724.584947][T14637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3271'. [ 724.629152][T14645] netlink: 'syz.3.3271': attribute type 10 has an invalid length. [ 724.646185][T14645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3271'. [ 724.660884][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 724.677619][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.697639][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.965526][ T5162] device hsr_slave_0 left promiscuous mode [ 724.987930][ T5162] device hsr_slave_1 left promiscuous mode [ 725.025285][ T5162] device bridge_slave_0 left promiscuous mode [ 725.044930][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.104869][ T5162] device veth0_macvtap left promiscuous mode [ 725.130980][ T5162] device veth0_vlan left promiscuous mode [ 726.901451][ T5162] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 727.177801][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 727.217691][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 727.257619][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.328210][ T5162] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 727.512829][ T5162] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 727.563405][ T5162] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 727.573029][ T5162] bond0 (unregistering): Released all slaves [ 727.622157][T14659] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 727.631453][ T5168] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 727.643152][ T5168] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 727.883453][T14679] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3287'. [ 728.274030][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 728.281840][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 728.290011][T14688] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3288'. [ 728.353810][T14498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.506441][T14699] netlink: 'syz.2.3292': attribute type 10 has an invalid length. [ 728.568584][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3292'. [ 728.669541][T14699] netlink: 'syz.2.3292': attribute type 10 has an invalid length. [ 728.677667][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3292'. [ 728.743920][T14703] netlink: 'syz.2.3292': attribute type 10 has an invalid length. [ 728.787060][T14703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3292'. [ 728.925448][T14713] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 728.945569][ T5168] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 728.984513][ T5168] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 729.666883][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 729.694675][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 729.764656][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 729.856220][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 729.940151][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 729.952567][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 729.971698][T14498] device veth0_vlan entered promiscuous mode [ 730.063296][T14498] device veth1_vlan entered promiscuous mode [ 730.254917][T14740] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3305'. [ 730.479493][T14740] device hsr_slave_0 left promiscuous mode [ 730.565437][T14740] device hsr_slave_1 left promiscuous mode [ 730.701873][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 730.719361][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 730.739839][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 730.762938][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.784970][T14498] device veth0_macvtap entered promiscuous mode [ 730.809103][T14753] netlink: 'syz.0.3307': attribute type 10 has an invalid length. [ 730.827636][T14753] device macvlan0 entered promiscuous mode [ 730.891471][T14753] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 730.915080][T14498] device veth1_macvtap entered promiscuous mode [ 730.939269][T14759] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.962236][ T5168] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 730.978711][ T5168] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 731.010180][T14498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.040958][T14498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.069356][T14498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.089133][T14498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.102024][T14498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.136930][T14498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.157255][T14498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.168391][T14498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.180740][T14498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.205936][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 731.217485][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 731.227871][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 731.250686][T14498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.265337][T14498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.275927][T14498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.287202][T14498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.297408][T14498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.315801][T14498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.326012][T14498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.341027][T14498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.354388][T14498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.369424][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 731.385181][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 731.402379][T14498] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.423922][T14498] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.447521][T14498] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.463973][T14498] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.697906][ T5165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.731858][ T5165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.798021][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 731.829428][ T5165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.837312][ T5165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.857971][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 732.364411][T14792] net_ratelimit: 1 callbacks suppressed [ 732.364431][T14792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 732.376973][T14792] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 733.528909][T14801] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 733.548070][ T5168] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 733.607416][ T5168] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 733.654006][T14810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3324'. [ 733.828232][T14817] netlink: 'syz.3.3326': attribute type 29 has an invalid length. [ 733.849080][T14818] netlink: 'syz.3.3326': attribute type 29 has an invalid length. [ 733.861730][T14820] netlink: 'syz.2.3327': attribute type 10 has an invalid length. [ 733.870488][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 733.893135][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 734.166122][T14820] team0: Device gre0 is of different type [ 735.051659][T14817] netlink: 'syz.3.3326': attribute type 29 has an invalid length. [ 735.065361][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 735.103339][T14827] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3329'. [ 735.125713][T14829] netlink: 'syz.1.3330': attribute type 2 has an invalid length. [ 735.154913][T14829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3330'. [ 736.204549][T14847] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 736.222142][ T4320] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 736.234363][ T4320] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 736.492397][T14856] netlink: 'syz.0.3340': attribute type 25 has an invalid length. [ 736.543325][T14856] netlink: 'syz.0.3340': attribute type 29 has an invalid length. [ 737.187866][T14881] netlink: 'syz.0.3346': attribute type 2 has an invalid length. [ 737.234473][T14881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3346'. [ 737.314381][T14884] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3347'. [ 738.578887][T14900] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 738.636886][ T5162] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 738.663629][ T5162] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 738.900049][T14919] netlink: 'syz.0.3356': attribute type 46 has an invalid length. [ 738.930962][T14919] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3356'. [ 739.100602][T14924] netlink: 'syz.4.3358': attribute type 2 has an invalid length. [ 739.116739][T14924] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3358'. [ 739.171084][T14926] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3360'. [ 741.314262][T14952] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 741.320337][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 741.334452][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 741.633220][T14959] netlink: 'syz.4.3372': attribute type 2 has an invalid length. [ 741.664512][T14959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3372'. [ 741.870936][T14969] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 742.766099][ T5162] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 742.776528][T14998] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 742.787192][ T5162] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 743.036393][T15007] netlink: 'syz.1.3386': attribute type 2 has an invalid length. [ 743.058266][T15007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3386'. [ 743.293952][T15013] netlink: 'syz.3.3389': attribute type 10 has an invalid length. [ 743.349971][T15014] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3389'. [ 744.028319][ T4293] Bluetooth: hci5: command 0x0406 tx timeout [ 744.606102][T15013] team0: Port device geneve1 added [ 745.039668][T15039] netlink: 'syz.2.3396': attribute type 10 has an invalid length. [ 745.203174][T15039] team0: Device gre0 is of different type [ 745.844957][T15046] netlink: 'syz.1.3398': attribute type 25 has an invalid length. [ 745.863654][T15046] netlink: 'syz.1.3398': attribute type 29 has an invalid length. [ 746.144563][T15051] netlink: 'syz.4.3399': attribute type 3 has an invalid length. [ 746.170502][T15051] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3399'. [ 746.220393][T15053] netlink: 'syz.4.3399': attribute type 3 has an invalid length. [ 746.267917][T15053] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3399'. [ 746.303144][T15060] netlink: 'syz.2.3401': attribute type 2 has an invalid length. [ 746.324015][T15051] netlink: 'syz.4.3399': attribute type 3 has an invalid length. [ 746.348454][T15060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3401'. [ 746.366436][T15051] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3399'. [ 746.451349][T15065] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 746.467638][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 746.505091][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 746.933120][T15092] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3412'. [ 747.097423][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.103937][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.946929][T15110] netlink: 'syz.4.3417': attribute type 2 has an invalid length. [ 748.958445][T15110] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3417'. [ 748.994385][T15112] netlink: 'syz.2.3418': attribute type 3 has an invalid length. [ 749.010517][T15112] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3418'. [ 749.039376][T15115] netlink: 'syz.2.3418': attribute type 3 has an invalid length. [ 749.062518][T15115] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3418'. [ 749.152026][T15112] netlink: 'syz.2.3418': attribute type 3 has an invalid length. [ 749.201514][T15112] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3418'. [ 749.399586][T15123] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 749.422603][T15124] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 749.429215][ T4320] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 749.451030][ T4320] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 749.572993][T15131] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3424'. [ 749.625565][T15134] netlink: 'syz.0.3426': attribute type 3 has an invalid length. [ 749.634614][T15134] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3426'. [ 750.062261][T15140] netlink: 'syz.0.3428': attribute type 46 has an invalid length. [ 750.076992][T15140] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3428'. [ 750.515754][T15142] netlink: 'syz.2.3430': attribute type 2 has an invalid length. [ 750.541934][T15142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3430'. [ 750.957584][T15162] netlink: 'syz.0.3435': attribute type 3 has an invalid length. [ 750.977927][T15162] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3435'. [ 751.016716][T15162] netlink: 'syz.0.3435': attribute type 3 has an invalid length. [ 751.032742][T15162] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3435'. [ 751.069582][T15162] netlink: 'syz.0.3435': attribute type 3 has an invalid length. [ 751.539982][T15182] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 751.559709][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 751.567595][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 755.474280][T15223] __nla_validate_parse: 4 callbacks suppressed [ 755.474295][T15223] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3455'. [ 755.616681][T15226] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 755.628277][ T5145] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 755.628302][ T5145] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 755.700225][T15229] FAULT_INJECTION: forcing a failure. [ 755.700225][T15229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.748786][T15229] CPU: 0 PID: 15229 Comm: syz.3.3458 Not tainted syzkaller #0 [ 755.756330][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 755.766424][T15229] Call Trace: [ 755.769743][T15229] [ 755.772729][T15229] dump_stack_lvl+0x188/0x24e [ 755.777470][T15229] ? show_regs_print_info+0x12/0x12 [ 755.782715][T15229] ? load_image+0x410/0x410 [ 755.787274][T15229] ? __lock_acquire+0x7ea0/0x7ea0 [ 755.792349][T15229] ? lockdep_hardirqs_on+0x94/0x140 [ 755.797601][T15229] should_fail_ex+0x390/0x4c0 [ 755.802343][T15229] strncpy_from_user+0x32/0x340 [ 755.807351][T15229] bpf_prog_load+0x200/0x1530 [ 755.812089][T15229] ? map_freeze+0x390/0x390 [ 755.816646][T15229] ? __might_fault+0xa6/0x120 [ 755.821405][T15229] ? __might_fault+0xa6/0x120 [ 755.826125][T15229] ? __might_fault+0xc2/0x120 [ 755.830854][T15229] ? __might_fault+0xa6/0x120 [ 755.835570][T15229] ? bpf_lsm_bpf+0x5/0x10 [ 755.839937][T15229] ? security_bpf+0x7a/0xa0 [ 755.844479][T15229] __sys_bpf+0x5b8/0x780 [ 755.848788][T15229] ? bpf_link_show_fdinfo+0x380/0x380 [ 755.854219][T15229] ? lock_chain_count+0x20/0x20 [ 755.859128][T15229] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 755.865170][T15229] __x64_sys_bpf+0x78/0x90 [ 755.869666][T15229] do_syscall_64+0x4c/0xa0 [ 755.874123][T15229] ? clear_bhb_loop+0x60/0xb0 [ 755.878851][T15229] ? clear_bhb_loop+0x60/0xb0 [ 755.883579][T15229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.889520][T15229] RIP: 0033:0x7fbf0af9e199 [ 755.893978][T15229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.913659][T15229] RSP: 002b:00007fbf0bde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 755.922129][T15229] RAX: ffffffffffffffda RBX: 00007fbf0b225fa0 RCX: 00007fbf0af9e199 [ 755.930156][T15229] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 755.938172][T15229] RBP: 00007fbf0bde6090 R08: 0000000000000000 R09: 0000000000000000 [ 755.946184][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.954194][T15229] R13: 00007fbf0b226038 R14: 00007fbf0b225fa0 R15: 00007fff2cbc16a8 [ 755.962221][T15229] [ 756.458871][T15250] validate_nla: 2 callbacks suppressed [ 756.458920][T15250] netlink: 'syz.0.3465': attribute type 2 has an invalid length. [ 756.483433][T15250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3465'. [ 756.860759][T15265] netlink: 'syz.3.3470': attribute type 10 has an invalid length. [ 757.051677][T15265] team0: Device gre0 is of different type [ 759.870965][T15280] sock: sock_timestamping_bind_phc: sock not bind to device [ 760.201609][T15292] netlink: 'syz.3.3478': attribute type 2 has an invalid length. [ 760.217000][T15292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3478'. [ 760.235728][T15294] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 760.245885][T15294] netlink: 'syz.2.3479': attribute type 4 has an invalid length. [ 760.257123][T15294] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3479'. [ 760.275970][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3479'. [ 760.314267][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3479'. [ 760.526570][T15299] netlink: 'syz.1.3490': attribute type 2 has an invalid length. [ 760.556083][T15299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3490'. [ 760.590095][T15294] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 760.619640][T15294] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 760.645559][T15295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3479'. [ 760.677165][T15294] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3479'. [ 760.755651][T15308] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3483'. [ 761.091987][T15313] sock: sock_timestamping_bind_phc: sock not bind to device [ 761.405747][T15324] sock: sock_timestamping_bind_phc: sock not bind to device [ 761.762737][T15336] netlink: 'syz.2.3494': attribute type 46 has an invalid length. [ 761.780080][T15336] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3494'. [ 761.802248][T15340] netlink: 'syz.1.3495': attribute type 21 has an invalid length. [ 761.829002][T15340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3495'. [ 761.858887][T15340] netlink: 'syz.1.3495': attribute type 1 has an invalid length. [ 761.904786][T15344] netlink: 'syz.0.3498': attribute type 12 has an invalid length. [ 761.924784][T15344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3498'. [ 761.973075][T15344] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3498'. [ 762.176679][T15344] can: request_module (can-proto-0) failed. [ 762.398436][T15357] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3504'. [ 762.486024][T15360] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.495790][T15360] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.676542][T15362] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.683847][T15362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.691406][T15362] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.698600][T15362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.785692][T15362] device bridge0 entered promiscuous mode [ 762.895494][T15360] netlink: 'syz.0.3505': attribute type 2 has an invalid length. [ 763.959627][T15386] netlink: 'syz.0.3511': attribute type 12 has an invalid length. [ 763.988703][T15386] netlink: 'syz.0.3511': attribute type 15 has an invalid length. [ 764.023374][T15391] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3511'. [ 764.510559][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 764.586146][T15410] netlink: 'syz.4.3520': attribute type 10 has an invalid length. [ 764.757025][T15420] netlink: 'syz.4.3520': attribute type 3 has an invalid length. [ 764.871314][T15410] team0: Device vxcan1 is of different type [ 765.024192][T15413] netlink: 'syz.3.3523': attribute type 2 has an invalid length. [ 765.789119][T15445] sock: sock_timestamping_bind_phc: sock not bind to device [ 765.861648][T15443] team0: Device vxcan1 is of different type [ 765.970423][T15447] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 765.978793][ T5159] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 765.987389][ T5159] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 766.261066][T15456] __nla_validate_parse: 4 callbacks suppressed [ 766.261106][T15456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3538'. [ 766.804422][T15476] FAULT_INJECTION: forcing a failure. [ 766.804422][T15476] name failslab, interval 1, probability 0, space 0, times 0 [ 766.851670][T15476] CPU: 1 PID: 15476 Comm: syz.2.3545 Not tainted syzkaller #0 [ 766.859213][T15476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 766.869404][T15476] Call Trace: [ 766.872711][T15476] [ 766.875665][T15476] dump_stack_lvl+0x188/0x24e [ 766.880374][T15476] ? show_regs_print_info+0x12/0x12 [ 766.885598][T15476] ? load_image+0x410/0x410 [ 766.890140][T15476] ? __might_sleep+0xd0/0xd0 [ 766.894821][T15476] ? __lock_acquire+0x7ea0/0x7ea0 [ 766.899879][T15476] ? perf_trace_preemptirq_template+0x268/0x320 [ 766.906151][T15476] should_fail_ex+0x390/0x4c0 [ 766.910873][T15476] should_failslab+0x5/0x20 [ 766.915397][T15476] slab_pre_alloc_hook+0x59/0x300 [ 766.920444][T15476] ? lock_chain_count+0x20/0x20 [ 766.925324][T15476] ? __get_vm_area_node+0x122/0x330 [ 766.930557][T15476] __kmem_cache_alloc_node+0x4f/0x270 [ 766.935952][T15476] ? __get_vm_area_node+0x122/0x330 [ 766.941171][T15476] kmalloc_node_trace+0x22/0xe0 [ 766.946046][T15476] __get_vm_area_node+0x122/0x330 [ 766.951094][T15476] ? __vmalloc_node_range+0x182/0x1380 [ 766.956577][T15476] __vmalloc_node_range+0x357/0x1380 [ 766.961891][T15476] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 766.967494][T15476] ? lock_chain_count+0x20/0x20 [ 766.972379][T15476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 766.978562][T15476] ? aa_get_newest_label+0xf9/0x5b0 [ 766.983792][T15476] ? free_vm_area+0x50/0x50 [ 766.988320][T15476] ? end_current_label_crit_section+0x170/0x170 [ 766.994612][T15476] ? check_stack_object+0x10/0xa0 [ 766.999668][T15476] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 767.005245][T15476] __vmalloc+0x76/0x80 [ 767.009345][T15476] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 767.014922][T15476] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 767.020325][T15476] ? bpf_prog_alloc+0x13/0x1b0 [ 767.025133][T15476] bpf_prog_alloc+0x1c/0x1b0 [ 767.029755][T15476] bpf_prog_load+0x7d4/0x1530 [ 767.034465][T15476] ? map_freeze+0x390/0x390 [ 767.038997][T15476] ? __might_fault+0xa6/0x120 [ 767.043703][T15476] ? __might_fault+0xa6/0x120 [ 767.048403][T15476] ? __might_fault+0xc2/0x120 [ 767.053102][T15476] ? __might_fault+0xa6/0x120 [ 767.057831][T15476] ? bpf_lsm_bpf+0x5/0x10 [ 767.062199][T15476] ? security_bpf+0x7a/0xa0 [ 767.067170][T15476] __sys_bpf+0x5b8/0x780 [ 767.071448][T15476] ? bpf_link_show_fdinfo+0x380/0x380 [ 767.076866][T15476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.083090][T15476] __x64_sys_bpf+0x78/0x90 [ 767.087543][T15476] do_syscall_64+0x4c/0xa0 [ 767.091996][T15476] ? clear_bhb_loop+0x60/0xb0 [ 767.096704][T15476] ? clear_bhb_loop+0x60/0xb0 [ 767.101409][T15476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.107326][T15476] RIP: 0033:0x7fb16d39e199 [ 767.111769][T15476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.131393][T15476] RSP: 002b:00007fb16e2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 767.139832][T15476] RAX: ffffffffffffffda RBX: 00007fb16d625fa0 RCX: 00007fb16d39e199 [ 767.147827][T15476] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 767.155816][T15476] RBP: 00007fb16e2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 767.163824][T15476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.171830][T15476] R13: 00007fb16d626038 R14: 00007fb16d625fa0 R15: 00007ffc367b8f08 [ 767.179850][T15476] [ 767.266955][T15469] device macvlan0 entered promiscuous mode [ 767.307725][T15469] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 767.414073][T15477] validate_nla: 5 callbacks suppressed [ 767.414092][T15477] netlink: 'syz.4.3543': attribute type 39 has an invalid length. [ 767.690986][T15476] syz.2.3545: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 767.741066][T15476] CPU: 0 PID: 15476 Comm: syz.2.3545 Not tainted syzkaller #0 [ 767.748638][T15476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 767.758730][T15476] Call Trace: [ 767.762029][T15476] [ 767.765024][T15476] dump_stack_lvl+0x188/0x24e [ 767.769731][T15476] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 767.776247][T15476] ? show_regs_print_info+0x12/0x12 [ 767.781498][T15476] ? load_image+0x410/0x410 [ 767.786037][T15476] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 767.792472][T15476] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 767.799028][T15476] warn_alloc+0x242/0x330 [ 767.803427][T15476] ? __get_vm_area_node+0x122/0x330 [ 767.808657][T15476] ? zone_watermark_ok_safe+0x270/0x270 [ 767.814234][T15476] ? rcu_is_watching+0x11/0xa0 [ 767.819036][T15476] ? __get_vm_area_node+0x318/0x330 [ 767.824266][T15476] ? __vmalloc_node_range+0x182/0x1380 [ 767.829764][T15476] __vmalloc_node_range+0x37c/0x1380 [ 767.835086][T15476] ? lock_chain_count+0x20/0x20 [ 767.839968][T15476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.846152][T15476] ? aa_get_newest_label+0xf9/0x5b0 [ 767.851397][T15476] ? free_vm_area+0x50/0x50 [ 767.855933][T15476] ? end_current_label_crit_section+0x170/0x170 [ 767.862210][T15476] ? check_stack_object+0x10/0xa0 [ 767.867273][T15476] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 767.872851][T15476] __vmalloc+0x76/0x80 [ 767.876949][T15476] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 767.882532][T15476] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 767.887936][T15476] ? bpf_prog_alloc+0x13/0x1b0 [ 767.892739][T15476] bpf_prog_alloc+0x1c/0x1b0 [ 767.897366][T15476] bpf_prog_load+0x7d4/0x1530 [ 767.902081][T15476] ? map_freeze+0x390/0x390 [ 767.906623][T15476] ? __might_fault+0xa6/0x120 [ 767.911331][T15476] ? __might_fault+0xa6/0x120 [ 767.916033][T15476] ? __might_fault+0xc2/0x120 [ 767.920732][T15476] ? __might_fault+0xa6/0x120 [ 767.925435][T15476] ? bpf_lsm_bpf+0x5/0x10 [ 767.929788][T15476] ? security_bpf+0x7a/0xa0 [ 767.934332][T15476] __sys_bpf+0x5b8/0x780 [ 767.938605][T15476] ? bpf_link_show_fdinfo+0x380/0x380 [ 767.944019][T15476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.950210][T15476] __x64_sys_bpf+0x78/0x90 [ 767.954745][T15476] do_syscall_64+0x4c/0xa0 [ 767.959187][T15476] ? clear_bhb_loop+0x60/0xb0 [ 767.963895][T15476] ? clear_bhb_loop+0x60/0xb0 [ 767.968601][T15476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.974521][T15476] RIP: 0033:0x7fb16d39e199 [ 767.978960][T15476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.998588][T15476] RSP: 002b:00007fb16e2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.007043][T15476] RAX: ffffffffffffffda RBX: 00007fb16d625fa0 RCX: 00007fb16d39e199 [ 768.015036][T15476] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 768.023034][T15476] RBP: 00007fb16e2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 768.031037][T15476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.039029][T15476] R13: 00007fb16d626038 R14: 00007fb16d625fa0 R15: 00007ffc367b8f08 [ 768.047051][T15476] [ 768.152220][T15476] Mem-Info: [ 768.158259][T15476] active_anon:28095 inactive_anon:0 isolated_anon:0 [ 768.158259][T15476] active_file:19161 inactive_file:40234 isolated_file:0 [ 768.158259][T15476] unevictable:768 dirty:193 writeback:0 [ 768.158259][T15476] slab_reclaimable:21500 slab_unreclaimable:95255 [ 768.158259][T15476] mapped:39648 shmem:23794 pagetables:684 [ 768.158259][T15476] sec_pagetables:0 bounce:0 [ 768.158259][T15476] kernel_misc_reclaimable:0 [ 768.158259][T15476] free:1299290 free_pcp:9060 free_cma:0 [ 768.297535][T15476] Node 0 active_anon:118080kB inactive_anon:0kB active_file:76644kB inactive_file:160736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158492kB dirty:772kB writeback:0kB shmem:99440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10568kB pagetables:2736kB sec_pagetables:0kB all_unreclaimable? no [ 768.412957][T15496] sock: sock_timestamping_bind_phc: sock not bind to device [ 768.447367][T15476] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 768.545375][T15476] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 768.601493][ T5159] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 768.601825][T15501] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 768.618441][ T5159] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 768.638631][T15476] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 768.655278][T15504] netlink: 'syz.3.3550': attribute type 10 has an invalid length. [ 768.664920][T15476] Node 0 DMA32 free:1281720kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:122880kB inactive_anon:0kB active_file:76644kB inactive_file:160736kB unevictable:1536kB writepending:772kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:14040kB local_pcp:8016kB free_cma:0kB [ 768.727177][T15476] lowmem_reserve[]: 0 0 1 1 1 [ 768.737620][T15476] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 768.789481][T15504] team0: Device gre0 is of different type [ 768.798784][T15476] lowmem_reserve[]: 0 0 0 0 0 [ 768.804664][T15476] Node 1 Normal free:3889732kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22192kB local_pcp:5472kB free_cma:0kB [ 768.888257][T15476] lowmem_reserve[]: 0 0 0 0 0 [ 768.893507][T15476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 768.950189][T15476] Node 0 DMA32: 1060*4kB (U) 401*8kB (UM) 93*16kB (UE) 1876*32kB (UE) 985*64kB (UME) 423*128kB (UE) 206*256kB (UME) 117*512kB (UME) 31*1024kB (UME) 5*2048kB (UM) 228*4096kB (UM) = 1274664kB [ 768.975222][T15503] nr0: port 1(hsr0) entered blocking state [ 768.988224][T15503] nr0: port 1(hsr0) entered disabled state [ 769.028002][T15503] device hsr0 entered promiscuous mode [ 769.038724][T15499] nr0: port 1(hsr0) entered blocking state [ 769.045470][T15499] nr0: port 1(hsr0) entered forwarding state [ 769.058271][T15476] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 769.138396][T15509] netlink: 'syz.4.3552': attribute type 2 has an invalid length. [ 769.188114][T15476] Node 1 Normal: 253*4kB (UME) 24*8kB (UME) 35*16kB (UE) 53*32kB (UME) 17*64kB (UME) 7*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889732kB [ 769.251771][T15509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3552'. [ 769.286390][T15476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 769.318886][T15476] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 769.378140][T15476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 769.387770][T15476] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 769.518372][T15476] 89306 total pagecache pages [ 769.526830][T15476] 0 pages in swap cache [ 769.543548][T15476] Free swap = 124996kB [ 769.547767][T15476] Total swap = 124996kB [ 769.568417][T15513] netlink: 'syz.1.3554': attribute type 12 has an invalid length. [ 769.578787][T15476] 2097051 pages RAM [ 769.582669][T15476] 0 pages HighMem/MovableOnly [ 769.588251][T15513] netlink: 'syz.1.3554': attribute type 15 has an invalid length. [ 769.618023][T15476] 415230 pages reserved [ 769.638239][T15476] 0 pages cma reserved [ 769.638514][T15513] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3554'. [ 769.677166][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.686857][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.850694][T15517] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.858301][T15517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.866702][T15517] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.874501][T15517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.915328][T15517] device bridge0 entered promiscuous mode [ 770.055539][T15529] netlink: 'syz.3.3556': attribute type 2 has an invalid length. [ 773.591728][T15546] netlink: 'syz.1.3563': attribute type 10 has an invalid length. [ 774.073765][T15546] team0: Device vxcan1 is of different type [ 775.254798][T15563] netlink: 'syz.2.3568': attribute type 10 has an invalid length. [ 775.563374][T15563] team0: Port device virt_wifi0 added [ 776.092448][T15566] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3569'. [ 776.450129][T15574] netlink: 'syz.2.3573': attribute type 46 has an invalid length. [ 776.458041][T15574] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3573'. [ 776.532872][T15579] netlink: 'syz.1.3574': attribute type 2 has an invalid length. [ 776.553230][T15579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3574'. [ 777.747623][T15603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3582'. [ 777.982285][T15605] netlink: 'syz.1.3583': attribute type 12 has an invalid length. [ 777.993775][T15605] netlink: 'syz.1.3583': attribute type 15 has an invalid length. [ 778.077194][T15605] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3583'. [ 778.401212][T15614] netlink: 'syz.0.3585': attribute type 10 has an invalid length. [ 778.882613][T15621] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 778.901563][T15621] netlink: 'syz.3.3586': attribute type 3 has an invalid length. [ 778.922866][T15621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3586'. [ 779.557005][T15625] netlink: 'syz.0.3588': attribute type 2 has an invalid length. [ 779.588588][T15625] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3588'. [ 784.790639][T15677] netlink: 'syz.3.3597': attribute type 12 has an invalid length. [ 784.832667][T15677] netlink: 'syz.3.3597': attribute type 15 has an invalid length. [ 784.980477][T15677] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3597'. [ 785.394862][T15691] netlink: 'syz.1.3601': attribute type 2 has an invalid length. [ 785.415311][T15691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3601'. [ 785.674059][T15702] netlink: 'syz.3.3605': attribute type 12 has an invalid length. [ 785.708331][T15702] netlink: 'syz.3.3605': attribute type 15 has an invalid length. [ 785.754297][T15696] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3605'. [ 785.789066][T15700] netlink: 'syz.4.3606': attribute type 12 has an invalid length. [ 785.801268][T15700] netlink: 'syz.4.3606': attribute type 15 has an invalid length. [ 785.839989][T15700] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3606'. [ 788.836430][T15733] delete_channel: no stack [ 788.912304][T15733] delete_channel: no stack [ 789.023181][T15735] netlink: 'syz.4.3617': attribute type 2 has an invalid length. [ 789.133406][T15735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3617'. [ 789.418318][T15745] netlink: 'syz.0.3619': attribute type 10 has an invalid length. [ 789.821021][T15745] team0: Device gre0 is of different type [ 790.108283][ T4293] Bluetooth: hci1: command 0x0406 tx timeout [ 790.307320][T15748] netlink: 'syz.2.3620': attribute type 12 has an invalid length. [ 790.693798][T15748] netlink: 'syz.2.3620': attribute type 15 has an invalid length. [ 790.765521][T15749] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3620'. [ 791.148770][T15742] delete_channel: no stack [ 791.153476][T15742] delete_channel: no stack [ 791.761052][T15766] netlink: 'syz.3.3627': attribute type 3 has an invalid length. [ 791.773263][T15769] ¥: port 1(team0) entered blocking state [ 791.780969][T15770] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3624'. [ 791.814396][T15766] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3627'. [ 791.852199][T15769] ¥: port 1(team0) entered disabled state [ 791.963636][T15769] device team0 entered promiscuous mode [ 791.998621][T15769] device team_slave_0 entered promiscuous mode [ 792.046336][T15769] device team_slave_1 entered promiscuous mode [ 792.455140][T15779] netlink: 'syz.2.3631': attribute type 2 has an invalid length. [ 792.496655][T15779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3631'. [ 793.339191][T15784] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3632'. [ 793.784695][T15790] netlink: 'syz.1.3634': attribute type 10 has an invalid length. [ 794.222314][T15790] team0: Device gre0 is of different type [ 794.665005][T15793] netlink: 'syz.4.3636': attribute type 12 has an invalid length. [ 794.689949][T15793] netlink: 'syz.4.3636': attribute type 15 has an invalid length. [ 794.733545][T15797] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3636'. [ 794.750001][T15795] netlink: 'syz.0.3645': attribute type 46 has an invalid length. [ 794.758059][T15795] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3645'. [ 795.375661][T15812] netlink: 'syz.4.3638': attribute type 2 has an invalid length. [ 795.691943][T15812] device .*! entered promiscuous mode [ 795.948589][T15820] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3640'. [ 796.207691][T15829] netlink: 'syz.2.3643': attribute type 2 has an invalid length. [ 796.247154][T15829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3643'. [ 796.271137][T15833] netlink: 'syz.0.3647': attribute type 10 has an invalid length. [ 796.386628][T15833] team0: Device gre0 is of different type [ 797.403455][T15835] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 797.418105][T15657] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 797.426078][T15657] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 797.475141][T15847] netlink: 'syz.3.3649': attribute type 12 has an invalid length. [ 797.493493][T15847] netlink: 'syz.3.3649': attribute type 15 has an invalid length. [ 797.523958][T15848] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3649'. [ 800.319290][T15882] netlink: 'syz.3.3661': attribute type 46 has an invalid length. [ 800.418770][T15882] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3661'. [ 800.529321][T15880] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.3663'. [ 802.371228][T15892] FAULT_INJECTION: forcing a failure. [ 802.371228][T15892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.429346][T15892] CPU: 0 PID: 15892 Comm: syz.2.3664 Not tainted syzkaller #0 [ 802.436914][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 802.447062][T15892] Call Trace: [ 802.450397][T15892] [ 802.453387][T15892] dump_stack_lvl+0x188/0x24e [ 802.458150][T15892] ? show_regs_print_info+0x12/0x12 [ 802.463425][T15892] ? load_image+0x410/0x410 [ 802.468021][T15892] ? __lock_acquire+0x7ea0/0x7ea0 [ 802.473130][T15892] ? __local_bh_enable_ip+0x136/0x1c0 [ 802.478586][T15892] should_fail_ex+0x390/0x4c0 [ 802.483359][T15892] _copy_from_user+0x2c/0x170 [ 802.488104][T15892] copy_from_sockptr+0x69/0x80 [ 802.493027][T15892] packet_setsockopt+0x97c/0x1230 [ 802.498133][T15892] ? packet_ioctl+0x240/0x240 [ 802.502884][T15892] ? __fget_files+0x28/0x460 [ 802.507585][T15892] ? aa_sk_perm+0x81f/0x950 [ 802.512247][T15892] ? aa_af_perm+0x340/0x340 [ 802.516829][T15892] ? __fget_files+0x3fc/0x460 [ 802.521602][T15892] ? aa_sock_opt_perm+0x74/0x100 [ 802.526644][T15892] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 802.532246][T15892] ? security_socket_setsockopt+0x7a/0xa0 [ 802.538040][T15892] ? packet_ioctl+0x240/0x240 [ 802.542793][T15892] __sys_setsockopt+0x2bf/0x3d0 [ 802.547717][T15892] __x64_sys_setsockopt+0xb1/0xc0 [ 802.552812][T15892] do_syscall_64+0x4c/0xa0 [ 802.557288][T15892] ? clear_bhb_loop+0x60/0xb0 [ 802.562068][T15892] ? clear_bhb_loop+0x60/0xb0 [ 802.566828][T15892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.572780][T15892] RIP: 0033:0x7fb16d39e199 [ 802.577259][T15892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.596948][T15892] RSP: 002b:00007fb16e2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 802.605433][T15892] RAX: ffffffffffffffda RBX: 00007fb16d625fa0 RCX: 00007fb16d39e199 [ 802.613469][T15892] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 802.621500][T15892] RBP: 00007fb16e2e8090 R08: 000000000000004f R09: 0000000000000000 [ 802.629543][T15892] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 802.637608][T15892] R13: 00007fb16d626038 R14: 00007fb16d625fa0 R15: 00007ffc367b8f08 [ 802.645697][T15892] [ 803.074777][T15897] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3669'. [ 803.354255][T15903] netlink: 'syz.0.3670': attribute type 12 has an invalid length. [ 803.378620][T15903] netlink: 'syz.0.3670': attribute type 15 has an invalid length. [ 803.456884][T15903] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3670'. [ 803.586951][T15915] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 803.589026][ T5159] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 803.628157][ T5159] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 803.724528][T15917] netlink: 'syz.1.3675': attribute type 29 has an invalid length. [ 803.772305][T15917] netlink: 'syz.1.3675': attribute type 29 has an invalid length. [ 803.808324][T15919] netlink: 'syz.1.3675': attribute type 29 has an invalid length. [ 803.830985][T15917] netlink: 'syz.1.3675': attribute type 29 has an invalid length. [ 803.996110][T15931] netlink: 'syz.2.3679': attribute type 10 has an invalid length. [ 804.042118][T15931] team0: Device gre0 is of different type [ 804.392403][T15939] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 804.402968][T15939] syzkaller0: linktype set to 804 [ 804.607615][T15936] device syzkaller0 entered promiscuous mode [ 808.514742][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.526850][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.626763][T15958] netlink: 'syz.1.3688': attribute type 12 has an invalid length. [ 809.635005][T15958] netlink: 'syz.1.3688': attribute type 15 has an invalid length. [ 809.643761][T15960] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3688'. [ 809.655034][T15979] netlink: 'syz.2.3695': attribute type 2 has an invalid length. [ 809.678569][T15979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3695'. [ 809.904939][T15988] netlink: 'syz.2.3699': attribute type 9 has an invalid length. [ 810.496595][T16005] FAULT_INJECTION: forcing a failure. [ 810.496595][T16005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.541327][T16005] CPU: 0 PID: 16005 Comm: syz.3.3704 Not tainted syzkaller #0 [ 810.548865][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 810.558967][T16005] Call Trace: [ 810.562281][T16005] [ 810.565246][T16005] dump_stack_lvl+0x188/0x24e [ 810.569982][T16005] ? show_regs_print_info+0x12/0x12 [ 810.575229][T16005] ? load_image+0x410/0x410 [ 810.577039][T16008] netlink: 'syz.1.3705': attribute type 21 has an invalid length. [ 810.579773][T16005] ? __lock_acquire+0x7ea0/0x7ea0 [ 810.579845][T16005] ? snprintf+0xe5/0x140 [ 810.596961][T16005] should_fail_ex+0x390/0x4c0 [ 810.601696][T16005] _copy_to_user+0x2c/0x130 [ 810.605533][T16008] netlink: 'syz.1.3705': attribute type 1 has an invalid length. [ 810.606229][T16005] simple_read_from_buffer+0xe3/0x150 [ 810.619366][T16005] proc_fail_nth_read+0x1a6/0x220 [ 810.624435][T16005] ? proc_fault_inject_write+0x310/0x310 [ 810.630117][T16005] ? fsnotify_perm+0x248/0x550 [ 810.634921][T16005] ? proc_fault_inject_write+0x310/0x310 [ 810.640601][T16005] vfs_read+0x2db/0x960 [ 810.644831][T16005] ? kernel_read+0x1e0/0x1e0 [ 810.649476][T16005] ? __fget_files+0x28/0x460 [ 810.654117][T16005] ? __fget_files+0x3fc/0x460 [ 810.658856][T16005] ? __fdget_pos+0x2ae/0x360 [ 810.663496][T16005] ? ksys_read+0x70/0x260 [ 810.667874][T16005] ksys_read+0x14d/0x260 [ 810.672171][T16005] ? vfs_write+0x9a0/0x9a0 [ 810.676648][T16005] ? lockdep_hardirqs_on+0x94/0x140 [ 810.681904][T16005] do_syscall_64+0x4c/0xa0 [ 810.686361][T16005] ? clear_bhb_loop+0x60/0xb0 [ 810.691087][T16005] ? clear_bhb_loop+0x60/0xb0 [ 810.695817][T16005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.701749][T16005] RIP: 0033:0x7fbf0af5e9ce [ 810.706206][T16005] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 810.725847][T16005] RSP: 002b:00007fbf0bde5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 810.734307][T16005] RAX: ffffffffffffffda RBX: 00007fbf0bde66c0 RCX: 00007fbf0af5e9ce [ 810.742325][T16005] RDX: 000000000000000f RSI: 00007fbf0bde60a0 RDI: 0000000000000005 [ 810.750334][T16005] RBP: 00007fbf0bde6090 R08: 0000000000000000 R09: 0000000000000000 [ 810.758341][T16005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.766348][T16005] R13: 00007fbf0b226038 R14: 00007fbf0b225fa0 R15: 00007fff2cbc16a8 [ 810.774372][T16005] [ 810.814420][T16013] netlink: 'syz.0.3706': attribute type 29 has an invalid length. [ 810.838440][T16013] netlink: 'syz.0.3706': attribute type 29 has an invalid length. [ 810.944813][T16013] tun0: tun_chr_ioctl cmd 1074812117 [ 811.038290][T16020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3718'. [ 811.113162][T16020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3718'. [ 811.201345][T16028] netlink: 'syz.1.3708': attribute type 12 has an invalid length. [ 811.220481][T16028] netlink: 'syz.1.3708': attribute type 15 has an invalid length. [ 811.230506][T16021] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3718'. [ 811.261635][T16027] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 811.270356][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 811.290113][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 811.307666][T16018] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3708'. [ 812.860632][T16061] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3717'. [ 815.182986][T16080] validate_nla: 1 callbacks suppressed [ 815.183067][T16080] netlink: 'syz.1.3724': attribute type 12 has an invalid length. [ 815.239720][T16080] netlink: 'syz.1.3724': attribute type 15 has an invalid length. [ 815.268250][T16087] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3724'. [ 815.551454][T16093] netlink: 'syz.1.3729': attribute type 10 has an invalid length. [ 815.602605][T16093] team0: Device gre0 is of different type [ 815.814528][T16097] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 815.870496][ T5052] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 815.900364][ T5052] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 815.922157][T16102] netlink: 'syz.3.3731': attribute type 2 has an invalid length. [ 815.958445][T16102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3731'. [ 816.193177][T16106] netlink: 'syz.1.3732': attribute type 46 has an invalid length. [ 816.258343][T16106] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3732'. [ 816.509568][T16119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3736'. [ 816.809712][T16128] netlink: 'syz.4.3739': attribute type 22 has an invalid length. [ 816.831033][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3739'. [ 817.051201][T16133] netlink: 'syz.3.3740': attribute type 12 has an invalid length. [ 817.076336][T16133] netlink: 'syz.3.3740': attribute type 15 has an invalid length. [ 817.130069][T16134] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3740'. [ 817.168237][ T4293] Bluetooth: hci3: ISO packet for unknown connection handle 9 [ 817.406922][T16141] netlink: 'syz.2.3743': attribute type 2 has an invalid length. [ 817.429744][T16141] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3743'. [ 817.685288][T16148] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 817.695411][T15657] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 817.708388][T15657] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 818.294555][T16167] mac80211_hwsim hwsim34 ªªªªª@: renamed from wlan0 [ 818.344294][T16166] netlink: 'syz.1.3754': attribute type 12 has an invalid length. [ 818.384748][T16164] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3753'. [ 818.420007][T16166] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3754'. [ 818.791014][T16185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3759'. [ 819.695868][T16194] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 819.708441][ T5177] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 819.708463][ T5177] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 819.864876][T16201] sock: sock_timestamping_bind_phc: sock not bind to device [ 820.741236][T16214] validate_nla: 8 callbacks suppressed [ 820.741373][T16214] netlink: 'syz.2.3769': attribute type 12 has an invalid length. [ 820.768438][T16214] netlink: 'syz.2.3769': attribute type 15 has an invalid length. [ 820.815914][T16214] __nla_validate_parse: 2 callbacks suppressed [ 820.816028][T16214] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3769'. [ 820.838855][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 821.191181][T16227] netlink: 'syz.0.3772': attribute type 2 has an invalid length. [ 821.248525][T16227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3772'. [ 821.528991][T16234] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 821.543739][ T5177] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 821.578178][ T5177] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 821.729627][T16236] sock: sock_timestamping_bind_phc: sock not bind to device [ 823.242243][T16266] netlink: 'syz.4.3784': attribute type 12 has an invalid length. [ 823.296559][T16266] netlink: 'syz.4.3784': attribute type 15 has an invalid length. [ 823.341217][T16268] netlink: 'syz.3.3783': attribute type 12 has an invalid length. [ 823.370794][T16268] netlink: 'syz.3.3783': attribute type 15 has an invalid length. [ 823.434451][T16271] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3783'. [ 823.484924][T16272] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3784'. [ 823.588565][T16270] netlink: 'syz.0.3785': attribute type 49 has an invalid length. [ 825.323429][T16276] bond0: (slave macvlan0): Releasing backup interface [ 825.339508][T16294] sock: sock_timestamping_bind_phc: sock not bind to device [ 825.727324][T16284] netlink: 'syz.3.3787': attribute type 2 has an invalid length. [ 825.784166][T16284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3787'. [ 825.919647][T16287] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 825.938491][ T5159] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 825.959779][ T5159] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 826.480193][T16296] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.3791'. [ 827.535040][T16321] netlink: 'syz.3.3797': attribute type 12 has an invalid length. [ 827.569201][T16321] netlink: 'syz.3.3797': attribute type 15 has an invalid length. [ 827.581311][T16326] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3797'. [ 829.251206][T16348] netlink: 'syz.4.3804': attribute type 21 has an invalid length. [ 829.267262][T16348] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3804'. [ 829.314695][T16348] netlink: 'syz.4.3804': attribute type 5 has an invalid length. [ 829.810228][T16358] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3807'. [ 831.373912][T16375] netlink: 'syz.2.3811': attribute type 12 has an invalid length. [ 831.392855][T16375] netlink: 'syz.2.3811': attribute type 15 has an invalid length. [ 831.415488][T16371] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3811'. [ 832.489720][T16396] netlink: 'syz.4.3816': attribute type 10 has an invalid length. [ 832.529299][T16396] device macvlan0 entered promiscuous mode [ 832.582796][T16396] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 832.665002][T16401] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 832.668006][T15657] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 832.738436][T15657] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 833.577199][T16419] netlink: 'syz.1.3824': attribute type 2 has an invalid length. [ 833.666007][T16419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3824'. [ 836.188856][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 838.589945][T16453] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 838.599294][ T76] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 838.607143][ T76] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 838.615604][T16459] netlink: 'syz.2.3835': attribute type 12 has an invalid length. [ 838.624167][T16459] netlink: 'syz.2.3835': attribute type 15 has an invalid length. [ 838.648322][T16464] netlink: 'syz.3.3837': attribute type 2 has an invalid length. [ 838.656143][T16464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3837'. [ 839.017089][T16470] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3839'. [ 839.140090][T16470] netlink: 'syz.1.3839': attribute type 21 has an invalid length. [ 839.632626][T16496] netlink: 'syz.3.3847': attribute type 10 has an invalid length. [ 839.797775][T16496] team0: Device gre0 is of different type [ 840.228430][T16501] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 840.242374][ T5052] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 840.258930][ T5052] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 840.278604][T16504] netlink: 'syz.4.3851': attribute type 2 has an invalid length. [ 840.300073][T16504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3851'. [ 840.456666][T16508] sock: sock_timestamping_bind_phc: sock not bind to device [ 840.609209][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.616509][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.638576][T16512] device bridge0 left promiscuous mode [ 840.744482][T16512] device bridge_slave_1 left promiscuous mode [ 840.775623][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.794758][T16512] device bridge_slave_0 left promiscuous mode [ 840.805413][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.088358][T16552] netlink: 'syz.1.3863': attribute type 2 has an invalid length. [ 844.148236][T16552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3863'. [ 844.278569][T16553] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 844.322102][T16558] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3865'. [ 844.331381][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 844.349363][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 844.393682][T16551] netlink: 'syz.4.3865': attribute type 12 has an invalid length. [ 844.418488][T16551] netlink: 'syz.4.3865': attribute type 15 has an invalid length. [ 844.427881][T16555] sock: sock_timestamping_bind_phc: sock not bind to device [ 844.642679][T16563] netlink: 'syz.2.3868': attribute type 46 has an invalid length. [ 844.652467][T16563] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3868'. [ 844.711947][T16571] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3871'. [ 847.359695][T16566] delete_channel: no stack [ 847.685239][T16586] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.695179][T16586] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.352725][T16590] device bridge_slave_1 left promiscuous mode [ 848.367293][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.388000][T16590] device bridge_slave_0 left promiscuous mode [ 848.394381][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.455627][T16592] netlink: 'syz.0.3877': attribute type 2 has an invalid length. [ 848.468412][T16592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3877'. [ 848.706004][T16598] sock: sock_timestamping_bind_phc: sock not bind to device [ 848.758131][T16600] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 848.787039][ T5175] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 848.796094][ T5175] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 849.114857][T16607] netlink: 'syz.4.3882': attribute type 12 has an invalid length. [ 849.124729][T16607] netlink: 'syz.4.3882': attribute type 15 has an invalid length. [ 849.212936][T16607] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3882'. [ 849.422955][T16612] netlink: 'syz.0.3884': attribute type 3 has an invalid length. [ 849.440155][T16612] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3884'. [ 849.459706][T16616] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3884'. [ 849.613722][T16618] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3884'. [ 850.619036][T16632] netlink: 'syz.0.3891': attribute type 2 has an invalid length. [ 850.638542][T16632] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3891'. [ 850.792944][T16639] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.800284][T16639] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.845447][T16639] device bridge0 left promiscuous mode [ 851.183493][T16643] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 851.194505][ T5175] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 851.223014][ T5175] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 851.241018][T16645] netlink: 'syz.2.3896': attribute type 12 has an invalid length. [ 851.271065][T16645] netlink: 'syz.2.3896': attribute type 15 has an invalid length. [ 851.294278][T16649] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3896'. [ 851.658997][T16654] netlink: 'syz.3.3897': attribute type 2 has an invalid length. [ 851.693868][T16654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3897'. [ 852.358554][T16687] netlink: 'syz.4.3906': attribute type 21 has an invalid length. [ 852.366502][T16687] netlink: 'syz.4.3906': attribute type 2 has an invalid length. [ 852.432698][T16687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3906'. [ 852.583138][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.590666][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.726782][T16690] device bridge_slave_1 left promiscuous mode [ 852.737287][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.021507][T16690] device bridge_slave_0 left promiscuous mode [ 853.041323][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.153078][T16700] sock: sock_timestamping_bind_phc: sock not bind to device [ 853.451494][T16703] netlink: 'syz.0.3912': attribute type 12 has an invalid length. [ 853.466881][T16701] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3912'. [ 854.160702][T16726] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.3920'. [ 854.941452][T16725] validate_nla: 1 callbacks suppressed [ 854.941471][T16725] netlink: 'syz.4.3920': attribute type 6 has an invalid length. [ 854.984134][T16725] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3920'. [ 855.034124][T16731] netlink: 'syz.0.3919': attribute type 46 has an invalid length. [ 855.078247][T16731] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3919'. [ 855.345277][T16736] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3923'. [ 855.578858][T16744] sock: sock_timestamping_bind_phc: sock not bind to device [ 856.070403][T16753] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 856.084909][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 856.124594][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 856.227827][T16758] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3929'. [ 857.619349][T16785] sock: sock_timestamping_bind_phc: sock not bind to device [ 858.728361][T16802] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3943'. [ 859.124950][T16805] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 859.142526][T15657] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 859.186636][T15657] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 859.901079][T16819] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.3947'. [ 860.624547][T16835] sock: sock_timestamping_bind_phc: sock not bind to device [ 860.667327][T16819] device syzkaller0 entered promiscuous mode [ 861.506232][T16843] sock: sock_timestamping_bind_phc: sock not bind to device [ 865.018982][T16849] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3956'. [ 865.236710][T16856] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 865.249735][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 865.257600][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 865.493384][T16861] netlink: 'syz.3.3961': attribute type 2 has an invalid length. [ 865.519428][T16861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3961'. [ 865.700586][T16866] sock: sock_timestamping_bind_phc: sock not bind to device [ 865.777984][T16868] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3967'. [ 866.014768][T16879] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3969'. [ 866.689448][ T5159] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 866.697391][ T5159] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 866.705124][T16893] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 867.939475][T16912] netlink: 'syz.0.3978': attribute type 2 has an invalid length. [ 868.068164][T16912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3978'. [ 868.095722][T16917] netlink: 'syz.2.3981': attribute type 16 has an invalid length. [ 868.171576][T16917] netlink: 'syz.2.3981': attribute type 4 has an invalid length. [ 868.247976][T16917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3981'. [ 868.296085][T16915] sock: sock_timestamping_bind_phc: sock not bind to device [ 868.664866][T16931] netlink: 'syz.1.3985': attribute type 21 has an invalid length. [ 868.703967][T16931] netlink: 'syz.1.3985': attribute type 1 has an invalid length. [ 868.725701][T16931] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3985'. [ 868.754793][T16927] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3984'. [ 868.785372][T16935] netlink: 'syz.0.3986': attribute type 10 has an invalid length. [ 868.969915][T16944] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4000'. [ 869.032795][T16943] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 869.034024][ T5052] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 869.085175][ T5052] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 869.766594][T16960] sock: sock_timestamping_bind_phc: sock not bind to device [ 870.130744][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.137210][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.467392][T16980] netlink: 'syz.1.3999': attribute type 3 has an invalid length. [ 870.549461][T16980] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.3999'. [ 871.059510][T16967] netlink: 'syz.2.3995': attribute type 2 has an invalid length. [ 871.067346][T16967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3995'. [ 871.354008][T16992] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 871.366212][ T5052] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 871.502972][ T5052] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 871.562515][T16994] netlink: 'syz.0.4008': attribute type 12 has an invalid length. [ 871.584948][T16995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4008'. [ 871.736569][T16997] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4006'. [ 871.840871][T17003] sock: sock_timestamping_bind_phc: sock not bind to device [ 872.384413][T17008] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4011'. [ 872.455437][T17016] netlink: 'syz.1.4015': attribute type 2 has an invalid length. [ 872.473117][T17016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4015'. [ 873.035164][T17028] netlink: 'syz.0.4017': attribute type 46 has an invalid length. [ 873.054305][T17028] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4017'. [ 873.188438][T17041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4022'. [ 873.244244][T17042] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 873.244274][ T5177] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 873.288499][ T5177] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 873.449649][T17044] sock: sock_timestamping_bind_phc: sock not bind to device [ 873.553131][T17048] netlink: 'syz.2.4026': attribute type 2 has an invalid length. [ 873.568548][T17048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4026'. [ 873.879029][T17052] netlink: 'syz.1.4028': attribute type 12 has an invalid length. [ 873.890837][T17052] netlink: 'syz.1.4028': attribute type 15 has an invalid length. [ 873.969987][T17056] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4028'. [ 874.891351][T17065] device syzkaller0 entered promiscuous mode [ 874.931160][T17064] netlink: 'syz.3.4032': attribute type 10 has an invalid length. [ 875.118539][T17064] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 875.704751][T17087] sock: sock_timestamping_bind_phc: sock not bind to device [ 878.456234][T17086] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 878.456609][ T5052] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 878.480621][ T5052] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 878.498798][T17101] __nla_validate_parse: 2 callbacks suppressed [ 878.498815][T17101] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4042'. [ 878.797767][T17106] netlink: 'syz.2.4044': attribute type 12 has an invalid length. [ 878.823872][T17106] netlink: 'syz.2.4044': attribute type 15 has an invalid length. [ 878.861762][T17115] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4044'. [ 879.343363][T17128] sock: sock_timestamping_bind_phc: sock not bind to device [ 879.379066][T17126] netlink: 'syz.2.4051': attribute type 2 has an invalid length. [ 879.431519][T17126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4051'. [ 879.582296][T17130] netlink: 'syz.4.4052': attribute type 3 has an invalid length. [ 879.598480][T17130] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.4052'. [ 879.779322][T17136] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.4055'. [ 879.796493][T17132] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.4053'. [ 879.843190][T17138] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 879.843216][ T5177] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 879.868967][ T5177] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 880.043185][T17141] device syzkaller0 entered promiscuous mode [ 880.592338][T17163] sock: sock_timestamping_bind_phc: sock not bind to device [ 882.496587][T17169] netlink: 'syz.1.4064': attribute type 2 has an invalid length. [ 882.513555][T17169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4064'. [ 882.773441][ T5052] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 882.781665][T17183] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 882.796442][ T5052] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 882.867663][T17184] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.4069'. [ 883.286821][T17192] sock: sock_timestamping_bind_phc: sock not bind to device [ 883.619056][T17203] netlink: 'syz.1.4078': attribute type 12 has an invalid length. [ 883.645859][T17203] netlink: 'syz.1.4078': attribute type 15 has an invalid length. [ 883.717403][T17203] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4078'. [ 883.762660][T17205] netlink: 'syz.2.4079': attribute type 12 has an invalid length. [ 883.790487][T17205] netlink: 'syz.2.4079': attribute type 15 has an invalid length. [ 883.865356][T17211] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4079'. [ 883.911721][T17208] netlink: 'syz.3.4080': attribute type 2 has an invalid length. [ 883.928315][T17208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4080'. [ 883.947329][T17216] netlink: 'syz.0.4091': attribute type 2 has an invalid length. [ 883.977551][T17216] netlink: 'syz.0.4091': attribute type 8 has an invalid length. [ 883.999736][T17216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4091'. [ 884.059112][T17213] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.4081'. [ 884.136888][T17210] netlink: 'syz.0.4091': attribute type 2 has an invalid length. [ 884.151626][T17210] netlink: 'syz.0.4091': attribute type 8 has an invalid length. [ 884.182014][T17210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4091'. [ 884.246787][T17230] netlink: 'syz.2.4094': attribute type 10 has an invalid length. [ 884.599577][T17233] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4084'. [ 884.663076][T17238] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 884.674682][ T5177] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 884.695283][ T5177] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 885.395938][T17251] netlink: 'syz.3.4088': attribute type 21 has an invalid length. [ 885.435447][T17251] IPv6: NLM_F_CREATE should be specified when creating new route [ 885.507842][T17251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.515671][T17251] IPv6: NLM_F_CREATE should be set when creating new route [ 885.523025][T17251] IPv6: NLM_F_CREATE should be set when creating new route [ 885.655774][T17253] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4088'. [ 885.723906][T17253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 885.855249][T17253] team0: Port device team_slave_0 removed [ 885.894929][T17253] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 886.054410][T17260] netlink: 'syz.1.4093': attribute type 12 has an invalid length. [ 886.088434][T17260] netlink: 'syz.1.4093': attribute type 15 has an invalid length. [ 886.128273][T17262] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4093'. [ 886.158552][T17266] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4096'. [ 886.198342][T17265] netlink: 'syz.4.4095': attribute type 2 has an invalid length. [ 886.569207][T17278] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 886.580102][ T5165] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 886.587962][ T5165] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 887.307837][T17294] sock: sock_timestamping_bind_phc: sock not bind to device [ 888.802653][T17329] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 888.911427][ T76] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 888.948096][ T76] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 889.073232][T17334] sock: sock_timestamping_bind_phc: sock not bind to device [ 889.301922][T17343] validate_nla: 5 callbacks suppressed [ 889.301975][T17343] netlink: 'syz.0.4123': attribute type 2 has an invalid length. [ 889.339387][T17343] __nla_validate_parse: 5 callbacks suppressed [ 889.339407][T17343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4123'. [ 889.622346][T17357] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4129'. [ 889.711516][T17361] netlink: 'syz.1.4129': attribute type 10 has an invalid length. [ 889.739295][T17361] device macvlan0 entered promiscuous mode [ 889.812171][T17361] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 889.852260][T17360] netlink: 'syz.0.4127': attribute type 12 has an invalid length. [ 889.880608][T17360] netlink: 'syz.0.4127': attribute type 15 has an invalid length. [ 889.930075][T17354] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4127'. [ 889.986364][ T5177] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 889.994691][T17368] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 890.004183][ T5177] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 890.255671][T17373] sock: sock_timestamping_bind_phc: sock not bind to device [ 890.312468][T17382] netlink: 'syz.3.4136': attribute type 10 has an invalid length. [ 890.471689][T17383] netlink: 'syz.2.4137': attribute type 10 has an invalid length. [ 890.485226][T17383] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4137'. [ 890.743975][T17386] netlink: 'syz.1.4138': attribute type 2 has an invalid length. [ 890.781320][T17386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4138'. [ 891.117072][T17390] netlink: 'syz.3.4140': attribute type 12 has an invalid length. [ 891.138820][T17390] netlink: 'syz.3.4140': attribute type 15 has an invalid length. [ 891.210842][T17390] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4140'. [ 891.279118][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4143'. [ 891.368352][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4143'. [ 891.497801][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4143'. [ 891.554388][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4143'. [ 892.035375][T17409] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 892.048847][T15640] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 892.056726][T15640] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 892.108806][T17415] netlink: 'syz.1.4146': attribute type 12 has an invalid length. [ 893.285514][T17459] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 893.296479][T15637] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 893.398176][T15637] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 894.823648][T17497] validate_nla: 4 callbacks suppressed [ 894.823701][T17497] netlink: 'syz.3.4174': attribute type 12 has an invalid length. [ 894.895212][T17497] netlink: 'syz.3.4174': attribute type 15 has an invalid length. [ 894.914562][T17504] __nla_validate_parse: 33 callbacks suppressed [ 894.914579][T17504] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4174'. [ 895.114845][T17499] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4173'. [ 895.160482][T17509] netlink: 'syz.4.4177': attribute type 2 has an invalid length. [ 895.201201][T17509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4177'. [ 895.267033][T17512] netlink: 'syz.3.4179': attribute type 2 has an invalid length. [ 895.287846][T17512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4179'. [ 895.708478][T15637] wlan1: Trigger new scan to find an IBSS to join [ 896.684141][T17546] netlink: 'syz.0.4191': attribute type 2 has an invalid length. [ 896.771120][T17546] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4191'. [ 898.265619][T17569] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4199'. [ 898.335295][T17569] netlink: zone id is out of range [ 898.368442][T17569] netlink: zone id is out of range [ 898.378911][T17579] netlink: 'syz.1.4204': attribute type 46 has an invalid length. [ 898.401079][T17579] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4204'. [ 898.497116][T17566] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4202'. [ 898.865904][T17582] netlink: 'syz.2.4205': attribute type 21 has an invalid length. [ 898.921746][T17582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4205'. [ 899.555859][T17590] netlink: 'syz.4.4207': attribute type 2 has an invalid length. [ 899.581384][T17590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4207'. [ 899.724596][T15637] wlan1: Trigger new scan to find an IBSS to join [ 899.962545][T17600] netlink: 763 bytes leftover after parsing attributes in process `syz.4.4211'. [ 900.681261][T17614] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4217'. [ 900.962661][T17622] netlink: 'syz.4.4221': attribute type 2 has an invalid length. [ 900.998277][T17622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4221'. [ 901.709784][T17424] wlan1: Creating new IBSS network, BSSID 8a:12:4c:e7:08:53 [ 902.325969][T17664] netlink: 'syz.4.4237': attribute type 12 has an invalid length. [ 902.373275][T17664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4237'. [ 902.431986][T17661] netlink: 'syz.2.4236': attribute type 2 has an invalid length. [ 902.449851][T17665] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4237'. [ 902.568190][T17661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4236'. [ 902.668891][ T5145] wlan1: Trigger new scan to find an IBSS to join [ 902.805122][T17423] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 902.813608][T17668] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 902.828195][T17423] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 902.842527][T17664] can: request_module (can-proto-0) failed. [ 903.194681][T17679] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.4242'. [ 904.317759][T17714] netlink: 'syz.2.4252': attribute type 10 has an invalid length. [ 904.391861][T17714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4252'. [ 904.505048][T17714] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 904.771617][T17711] netlink: 'syz.1.4251': attribute type 2 has an invalid length. [ 904.792950][T17711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4251'. [ 905.225233][T17726] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 905.225247][T17423] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 905.261266][T17423] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 905.578880][T17734] sock: sock_timestamping_bind_phc: sock not bind to device [ 906.125805][T17749] netlink: 'syz.0.4264': attribute type 2 has an invalid length. [ 906.148321][T17749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4264'. [ 906.670632][T17424] wlan1: Trigger new scan to find an IBSS to join [ 907.014841][T17423] wlan1: Creating new IBSS network, BSSID 2a:4d:5b:8f:5d:71 [ 907.043314][T15637] ------------[ cut here ]------------ [ 907.049586][T15637] WARNING: CPU: 1 PID: 15637 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 907.059697][T15637] Modules linked in: [ 907.063644][T15637] CPU: 1 PID: 15637 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 907.071384][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 907.071850][T17763] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 907.081493][T15637] Workqueue: cfg80211 cfg80211_event_work [ 907.096475][T15637] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 907.102737][T15637] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 ae e7 f7 0f 0b eb bf e8 37 ae e7 f7 <0f> 0b eb b6 e8 2e ae e7 f7 0f 0b e9 82 fd ff ff e8 22 ae e7 f7 0f [ 907.122433][T15637] RSP: 0018:ffffc90005587ac0 EFLAGS: 00010293 [ 907.128588][T15637] RAX: ffffffff899a9849 RBX: 1ffff92000ab0f5c RCX: ffff88802b903c00 [ 907.136637][T15637] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6de0 [ 907.144701][T15637] RBP: ffffc90005587b70 R08: ffffffff90b332af R09: 1ffffffff2166655 [ 907.152759][T15637] R10: dffffc0000000000 R11: fffffbfff2166656 R12: ffff88807cb535f8 [ 907.160843][T15637] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888053c84c90 [ 907.168897][T15637] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 907.177881][T15637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 907.184549][T15637] CR2: 00007f97443eb880 CR3: 000000003b1c5000 CR4: 00000000003506e0 [ 907.192601][T15637] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 907.200655][T15637] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 907.208739][T15637] Call Trace: [ 907.212062][T15637] [ 907.215052][T15637] ? trace_rdev_return_void+0x240/0x240 [ 907.220699][T15637] cfg80211_process_wdev_events+0x359/0x4d0 [ 907.226773][T15637] ? process_one_work+0x7b4/0x1160 [ 907.232053][T15637] cfg80211_process_rdev_events+0x9d/0x110 [ 907.237917][T15637] cfg80211_event_work+0x2b/0x40 [ 907.242946][T15637] process_one_work+0x8ab/0x1160 [ 907.247972][T15637] ? worker_detach_from_pool+0x240/0x240 [ 907.253721][T15637] ? _raw_spin_lock_irq+0xb7/0xf0 [ 907.258842][T15637] ? _raw_spin_lock_irqsave+0x100/0x100 [ 907.264446][T15637] ? wq_worker_running+0x97/0x190 [ 907.269573][T15637] worker_thread+0xaf5/0x12a0 [ 907.274352][T15637] kthread+0x29d/0x330 [ 907.278493][T15637] ? worker_clr_flags+0x1a0/0x1a0 [ 907.283583][T15637] ? kthread_blkcg+0xd0/0xd0 [ 907.288251][T15637] ret_from_fork+0x1f/0x30 [ 907.292768][T15637] [ 907.295836][T15637] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 907.303145][T15637] CPU: 1 PID: 15637 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 907.310813][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 907.320916][T15637] Workqueue: cfg80211 cfg80211_event_work [ 907.326814][T15637] Call Trace: [ 907.330130][T15637] [ 907.333129][T15637] dump_stack_lvl+0x188/0x24e [ 907.337864][T15637] ? memcpy+0x3c/0x60 [ 907.341912][T15637] ? show_regs_print_info+0x12/0x12 [ 907.347161][T15637] ? load_image+0x410/0x410 [ 907.351822][T15637] panic+0x2d3/0x710 [ 907.355775][T15637] ? bpf_jit_dump+0xd0/0xd0 [ 907.360336][T15637] ? ret_from_fork+0x1f/0x30 [ 907.364981][T15637] __warn+0x2f8/0x4f0 [ 907.369031][T15637] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 907.374630][T15637] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 907.380225][T15637] report_bug+0x2ba/0x4f0 [ 907.384631][T15637] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 907.390226][T15637] handle_bug+0x3a/0x70 [ 907.394425][T15637] exc_invalid_op+0x16/0x40 [ 907.398972][T15637] asm_exc_invalid_op+0x16/0x20 [ 907.403858][T15637] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 907.410055][T15637] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 ae e7 f7 0f 0b eb bf e8 37 ae e7 f7 <0f> 0b eb b6 e8 2e ae e7 f7 0f 0b e9 82 fd ff ff e8 22 ae e7 f7 0f [ 907.429700][T15637] RSP: 0018:ffffc90005587ac0 EFLAGS: 00010293 [ 907.435811][T15637] RAX: ffffffff899a9849 RBX: 1ffff92000ab0f5c RCX: ffff88802b903c00 [ 907.443811][T15637] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6de0 [ 907.451820][T15637] RBP: ffffc90005587b70 R08: ffffffff90b332af R09: 1ffffffff2166655 [ 907.459825][T15637] R10: dffffc0000000000 R11: fffffbfff2166656 R12: ffff88807cb535f8 [ 907.467834][T15637] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888053c84c90 [ 907.475853][T15637] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 907.481456][T15637] ? trace_rdev_return_void+0x240/0x240 [ 907.487064][T15637] cfg80211_process_wdev_events+0x359/0x4d0 [ 907.493033][T15637] ? process_one_work+0x7b4/0x1160 [ 907.498189][T15637] cfg80211_process_rdev_events+0x9d/0x110 [ 907.504043][T15637] cfg80211_event_work+0x2b/0x40 [ 907.509036][T15637] process_one_work+0x8ab/0x1160 [ 907.514037][T15637] ? worker_detach_from_pool+0x240/0x240 [ 907.519715][T15637] ? _raw_spin_lock_irq+0xb7/0xf0 [ 907.524794][T15637] ? _raw_spin_lock_irqsave+0x100/0x100 [ 907.530399][T15637] ? wq_worker_running+0x97/0x190 [ 907.535462][T15637] worker_thread+0xaf5/0x12a0 [ 907.540222][T15637] kthread+0x29d/0x330 [ 907.544326][T15637] ? worker_clr_flags+0x1a0/0x1a0 [ 907.549399][T15637] ? kthread_blkcg+0xd0/0xd0 [ 907.554033][T15637] ret_from_fork+0x1f/0x30 [ 907.558517][T15637] [ 907.562157][T15637] Kernel Offset: disabled [ 907.566560][T15637] Rebooting in 86400 seconds..