last executing test programs: 4.473422848s ago: executing program 3 (id=1078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x68, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xff, 0x9, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d", 0x2}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) close(r6) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r6) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4004743b, &(0x7f0000001200)) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x13, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x38000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x4d0a99ed24615e86}}}, 0x0, 0x3, 0x64, &(0x7f0000000ac0)=""/100, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0xb, 0x4, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001a00)=[0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001a40)=[{0x5, 0x2, 0xc, 0x8}, {0x5, 0x4, 0xc, 0x7}, {0x1, 0x1, 0xe}, {0x1, 0x3, 0x4}, {0x4, 0x2, 0x5, 0xb}], 0x10, 0xffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1b, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x7, 0x7, 0x4, 0x100, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000007c0)='GPL\x00', 0xffffbea8, 0xf5, &(0x7f0000000800)=""/245, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x2, 0xe, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0xffffffffffffffff], &(0x7f00000009c0)=[{0x5, 0x2, 0xc, 0x3}], 0x10, 0x3ff}, 0x94) close(r9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="cf0000000000000000000000000000001c000000de91a34ccaf7ed335df7564733dd6501432926ddda39fafb69968fbdf9b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 4.364661021s ago: executing program 2 (id=1080): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf"], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.283869644s ago: executing program 1 (id=1081): socket$kcm(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108802, 0x7ff, 0x6, 0x0, 0x40, 0x2, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x1ff) 3.255824209s ago: executing program 0 (id=1082): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="bdc537e5f5fecbee057bb5d4253b90fa0358a6450447ed2823625864d31a99b56f6334a72cc8098574d2605f677ccdce9e79a44d910207468886cd15bf29148e75c4da9962d86793929d42387b748a16347cd509b9625ad7fe6fd050fc32732e067b41ed294ed48fed7e8837287daee182da2cc54b4ec43f3fff1449d550fd800f3ceeeadd140b7b5ffe8a8ca6d72af1e9", 0x91}, {&(0x7f00000002c0)="8d353157db0fb606cafe85eb8e52f827fc28d022c04bee328ad77ee9be88caebd4dededffc48732205ffb0d89ffdb91625751fe5ee37aeb3919dec323ab15bf600edd62a12f85d04bf0c45ed", 0x4c}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x48, 0x84}, 0x8020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.110115634s ago: executing program 1 (id=1083): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4c814) (fail_nth: 3) 3.035879587s ago: executing program 3 (id=1084): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88fbffff4000633a77fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) (fail_nth: 2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.95795665s ago: executing program 2 (id=1085): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x4, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0xa, 0x0, 0x9, 0x6, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000340)='syzkaller\x00', 0x28cb, 0xfe, &(0x7f0000000580)=""/254, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0xa, 0x40, 0x3}, 0x10, 0x19fd, r3, 0x7, &(0x7f00000007c0)=[r1, r1], &(0x7f0000000880)=[{0x2, 0x1, 0x2, 0x3}, {0x1, 0x1, 0x6, 0x7}, {0x4, 0x4, 0xe}, {0x5, 0x4, 0xf}, {0x2, 0x4, 0xf, 0x3}, {0x1, 0x2, 0xb, 0x3}, {0x4, 0x1, 0x3, 0xc}], 0x10, 0x9}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0xc0045878, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000dfff0000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000085000000070000009500000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x11}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.93262638s ago: executing program 0 (id=1086): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="bdc537e5f5fecbee057bb5d4253b90fa0358a6450447ed2823625864d31a99b56f6334a72cc8098574d2605f677ccdce9e79a44d910207468886cd15bf29148e75c4da9962d86793929d42387b748a16347cd509b9625ad7fe6fd050fc32732e067b41ed294ed48fed7e8837287daee182da2cc54b4ec43f3fff1449d550fd800f3ceeeadd140b7b5ffe8a8ca6d72af1e9", 0x91}, {&(0x7f00000002c0)="8d353157db0fb606cafe85eb8e52f827fc28d022c04bee328ad77ee9be88caebd4dededffc48732205ffb0d89ffdb91625751fe5ee37aeb3919dec323ab15bf600edd62a12f85d04bf0c45ed", 0x4c}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r0, r1]}}], 0x48, 0x84}, 0x8020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x10000}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.826324754s ago: executing program 1 (id=1087): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0xa, 0x9, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x6, 0x3, 0x23, 0x9}]}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000012c0)=""/215) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b15d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000", 0x2c}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x1, @perf_config_ext={0x400, 0x391ce2f7}, 0x1000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r6, 0x0, 0x3e8) r7 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000300", 0x4c}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x24, &(0x7f0000000200), 0x4) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) 2.480853306s ago: executing program 2 (id=1088): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x22, 0x1}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x401}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x82}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd, 0x0, &(0x7f00000001c0)="e02742e868000000f6e8090000", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff0100000000", @ANYRES32=0x1, @ANYBLOB="008000"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/16], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000001580)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0xc000}, 0x4b1c1a0c5af29ba2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) 2.402644888s ago: executing program 3 (id=1089): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)="1800000039000517d25a80648c63940d0324fc600b003540", 0x18}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1, 0x3}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f00000002c0), 0x2}, 0x100000, 0x0, 0x9, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfe4, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x4, @perf_bp={0x0, 0x2}, 0x420, 0x80000, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x4860, 0x0, 0xfffffffffffffffc}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 2.153882647s ago: executing program 0 (id=1090): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x36}, 0x4048010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400101, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x18, 0x8b, &(0x7f00000001c0)="e4eecbab56b3d8693fb5777d0609a208aee86bb4b659d5a5", &(0x7f0000000340)=""/139, 0xffff, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000240)="77a8f03c5f7aebb078f9797f596b8cc0ffd2bc1cf682facb2e70bbd617b659550a6011d2bb52a35bc058c66b6c0390df674682215df6c31ec6fd9e5faf9161defeb6ca9dda6dcf5db8c0711c5565ec255292c92f", 0x3, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x205, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9d, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xf95a, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'batadv0\x00', 0x800}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20a1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x0, 0xff}, 0x0, 0x7fffffff, 0x200002, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.891356796s ago: executing program 3 (id=1091): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x60040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.825966328s ago: executing program 1 (id=1092): socket$kcm(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108802, 0x7ff, 0x6, 0x0, 0x40, 0x2, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x1ff) 1.793295689s ago: executing program 2 (id=1093): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x68, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xff, 0x9, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d", 0x2}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) close(r6) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r6) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4004743b, &(0x7f0000001200)) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x13, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x38000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x4d0a99ed24615e86}}}, 0x0, 0x3, 0x64, &(0x7f0000000ac0)=""/100, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0xb, 0x4, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001a00)=[0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001a40)=[{0x5, 0x2, 0xc, 0x8}, {0x5, 0x4, 0xc, 0x7}, {0x1, 0x1, 0xe}, {0x1, 0x3, 0x4}, {0x4, 0x2, 0x5, 0xb}], 0x10, 0xffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1b, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x7, 0x7, 0x4, 0x100, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000007c0)='GPL\x00', 0xffffbea8, 0xf5, &(0x7f0000000800)=""/245, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x2, 0xe, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0xffffffffffffffff], &(0x7f00000009c0)=[{0x5, 0x2, 0xc, 0x3}], 0x10, 0x3ff}, 0x94) close(r9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="cf0000000000000000000000000000001c000000de91a34ccaf7ed335df7564733dd6501432926ddda39fafb69968fbdf9b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.684149143s ago: executing program 0 (id=1094): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="bdc537e5f5fecbee057bb5d4253b90fa0358a6450447ed2823625864d31a99b56f6334a72cc8098574d2605f677ccdce9e79a44d910207468886cd15bf29148e75c4da9962d86793929d42387b748a16347cd509b9625ad7fe6fd050fc32732e067b41ed294ed48fed7e8837287daee182da2cc54b4ec43f3fff1449d550fd800f3ceeeadd140b7b5ffe8a8ca6d72af1e9", 0x91}, {&(0x7f00000002c0)="8d353157db0fb606cafe85eb8e52f827fc28d022c04bee328ad77ee9be88caebd4dededffc48732205ffb0d89ffdb91625751fe5ee37aeb3919dec323ab15bf600edd62a12f85d04bf0c45ed", 0x4c}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x48, 0x84}, 0x8020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 715.242166ms ago: executing program 3 (id=1095): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf"], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 617.137719ms ago: executing program 1 (id=1096): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x4, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0xa, 0x0, 0x9, 0x6, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000340)='syzkaller\x00', 0x28cb, 0xfe, &(0x7f0000000580)=""/254, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0xa, 0x40, 0x3}, 0x10, 0x19fd, r3, 0x7, &(0x7f00000007c0)=[r1, r1], &(0x7f0000000880)=[{0x2, 0x1, 0x2, 0x3}, {0x1, 0x1, 0x6, 0x7}, {0x4, 0x4, 0xe}, {0x5, 0x4, 0xf}, {0x2, 0x4, 0xf, 0x3}, {0x1, 0x2, 0xb, 0x3}, {0x4, 0x1, 0x3, 0xc}], 0x10, 0x9}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0xc0045878, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000dfff0000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000085000000070000009500000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x11}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 573.548671ms ago: executing program 0 (id=1097): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 572.776351ms ago: executing program 2 (id=1098): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0x204, 0x0, 0x800}], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "327f"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000540)=""/145, 0x44, 0x91, 0x1}, 0x28) (fail_nth: 10) 189.757434ms ago: executing program 1 (id=1099): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)="1800000039000517d25a80648c63940d0324fc600b003540", 0x18}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1, 0x3}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f00000002c0), 0x2}, 0x100000, 0x0, 0x9, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfe4, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x4, @perf_bp={0x0, 0x2}, 0x420, 0x80000, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x4860, 0x0, 0xfffffffffffffffc}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 163.142235ms ago: executing program 2 (id=1100): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, 0x0) r4 = gettid() sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="bdc537e5f5fecbee057bb5d4253b90fa0358a6450447ed2823625864d31a99b56f6334a72cc8098574d2605f677ccdce9e79a44d910207468886cd15bf29148e75c4da9962d86793929d42387b748a16347cd509b9625ad7fe6fd050fc32732e067b41ed294ed48fed7e8837287daee182da2cc54b4ec43f3fff1449d550fd800f3ceeeadd140b7b5ffe8a8ca6d72af1e9", 0x91}, {&(0x7f00000002c0)="8d353157db0fb606cafe85eb8e52f827fc28d022c04bee328ad77ee9be88caebd4dededffc48732205ffb0d89ffdb91625751fe5ee37aeb3919dec323ab15bf600edd62a12f85d04bf0c45ed", 0x4c}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r0, r1]}}], 0x48, 0x84}, 0x8020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 70.708648ms ago: executing program 3 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x22, 0x1}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x401}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x82}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd, 0x0, &(0x7f00000001c0)="e02742e868000000f6e8090000", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff0100000000", @ANYRES32=0x1, @ANYBLOB="008000"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/16], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000001580)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0xc000}, 0x4b1c1a0c5af29ba2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) 0s ago: executing program 0 (id=1102): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4041, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x80, 0x7, 0x4, 0x57, 0x40, 0x0, 0x2, 0x16c1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x40, 0x7fffffffffffffff, 0x9, 0x2, 0x2, 0x401, 0x5, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000003c0)='\x92@`+\\}\x00') bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x43}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"}) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000080)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x20000274, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000000020", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x9, '\x00', r9, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) close(r8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 57.087641][ T5753] cgroup: Unknown subsys name 'net' [ 57.220055][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.557064][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.205140][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.221890][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.231317][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.231802][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.248074][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.248076][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.248905][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.255905][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.263147][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.270658][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.285119][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.292211][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.297812][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.306371][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.319452][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.319530][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.326758][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.334719][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.341580][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.364093][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.384528][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.402777][ T5769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.423606][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.423676][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.803207][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 60.860638][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 60.896880][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 60.929821][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 61.042904][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.052632][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.060094][ T5766] bridge_slave_0: entered allmulticast mode [ 61.067820][ T5766] bridge_slave_0: entered promiscuous mode [ 61.103301][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.110738][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.117961][ T5766] bridge_slave_1: entered allmulticast mode [ 61.125226][ T5766] bridge_slave_1: entered promiscuous mode [ 61.132054][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.139580][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.146937][ T5767] bridge_slave_0: entered allmulticast mode [ 61.153616][ T5767] bridge_slave_0: entered promiscuous mode [ 61.160668][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.167943][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.175685][ T5765] bridge_slave_0: entered allmulticast mode [ 61.182293][ T5765] bridge_slave_0: entered promiscuous mode [ 61.205830][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.212968][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.220343][ T5767] bridge_slave_1: entered allmulticast mode [ 61.226984][ T5767] bridge_slave_1: entered promiscuous mode [ 61.233661][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.243133][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.250382][ T5765] bridge_slave_1: entered allmulticast mode [ 61.257672][ T5765] bridge_slave_1: entered promiscuous mode [ 61.306138][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.313295][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.320795][ T5764] bridge_slave_0: entered allmulticast mode [ 61.328441][ T5764] bridge_slave_0: entered promiscuous mode [ 61.337825][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.350798][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.361891][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.375095][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.390516][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.398891][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.406207][ T5764] bridge_slave_1: entered allmulticast mode [ 61.412857][ T5764] bridge_slave_1: entered promiscuous mode [ 61.457200][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.469233][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.498215][ T5765] team0: Port device team_slave_0 added [ 61.517252][ T5765] team0: Port device team_slave_1 added [ 61.525238][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.537272][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.549038][ T5766] team0: Port device team_slave_0 added [ 61.575662][ T5767] team0: Port device team_slave_0 added [ 61.584398][ T5767] team0: Port device team_slave_1 added [ 61.600615][ T5766] team0: Port device team_slave_1 added [ 61.647363][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.656461][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.682598][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.697949][ T5764] team0: Port device team_slave_0 added [ 61.706496][ T5764] team0: Port device team_slave_1 added [ 61.712771][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.719928][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.746055][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.773467][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.781059][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.807038][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.828664][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.835766][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.861810][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.873729][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.880804][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.909681][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.927608][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.936644][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.962956][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.986257][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.993214][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.024226][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.045491][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.052445][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.079308][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.150182][ T5767] hsr_slave_0: entered promiscuous mode [ 62.157116][ T5767] hsr_slave_1: entered promiscuous mode [ 62.168224][ T5765] hsr_slave_0: entered promiscuous mode [ 62.177388][ T5765] hsr_slave_1: entered promiscuous mode [ 62.183521][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.191321][ T5765] Cannot create hsr debugfs directory [ 62.229522][ T5766] hsr_slave_0: entered promiscuous mode [ 62.235919][ T5766] hsr_slave_1: entered promiscuous mode [ 62.241890][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.249552][ T5766] Cannot create hsr debugfs directory [ 62.267717][ T5764] hsr_slave_0: entered promiscuous mode [ 62.274022][ T5764] hsr_slave_1: entered promiscuous mode [ 62.280176][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.288351][ T5764] Cannot create hsr debugfs directory [ 62.394789][ T5781] Bluetooth: hci3: command tx timeout [ 62.475570][ T5781] Bluetooth: hci1: command tx timeout [ 62.484372][ T5781] Bluetooth: hci0: command tx timeout [ 62.484387][ T51] Bluetooth: hci2: command tx timeout [ 62.654599][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.669493][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.679237][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.691302][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.746848][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.757890][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.768297][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.778672][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.847465][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.875926][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.887805][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.897123][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.980889][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.991650][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.001733][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.012980][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.099385][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.141558][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.156274][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.163525][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.187034][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.215454][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.222562][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.270377][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.282395][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.319850][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.349660][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.356811][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.368843][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.375957][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.398760][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.405936][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.421691][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.428954][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.448347][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.509956][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.532229][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.539440][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.592288][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.599462][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.714535][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.898674][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.938593][ T5765] veth0_vlan: entered promiscuous mode [ 63.973453][ T5765] veth1_vlan: entered promiscuous mode [ 64.061599][ T5764] veth0_vlan: entered promiscuous mode [ 64.091150][ T5764] veth1_vlan: entered promiscuous mode [ 64.113685][ T5765] veth0_macvtap: entered promiscuous mode [ 64.123012][ T5765] veth1_macvtap: entered promiscuous mode [ 64.138833][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.165933][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.210575][ T5764] veth0_macvtap: entered promiscuous mode [ 64.223218][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.252222][ T5766] veth0_vlan: entered promiscuous mode [ 64.260404][ T5764] veth1_macvtap: entered promiscuous mode [ 64.270220][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.297962][ T5766] veth1_vlan: entered promiscuous mode [ 64.308289][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.319572][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.330066][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.339113][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.360889][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.372261][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.387361][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.413976][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.426841][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.439530][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.457896][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.467712][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.477587][ T5781] Bluetooth: hci3: command tx timeout [ 64.483022][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.491821][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.518677][ T5767] veth0_vlan: entered promiscuous mode [ 64.555002][ T5781] Bluetooth: hci0: command tx timeout [ 64.555217][ T51] Bluetooth: hci1: command tx timeout [ 64.560562][ T5774] Bluetooth: hci2: command tx timeout [ 64.604663][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.614138][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.618262][ T5766] veth0_macvtap: entered promiscuous mode [ 64.635926][ T5767] veth1_vlan: entered promiscuous mode [ 64.690967][ T5766] veth1_macvtap: entered promiscuous mode [ 64.714713][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.722559][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.756975][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.769074][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.781729][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.782390][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.800236][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.812871][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.824865][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.860299][ T5767] veth0_macvtap: entered promiscuous mode [ 64.886898][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.899028][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.910982][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.921991][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.934653][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.955645][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.965840][ T5767] veth1_macvtap: entered promiscuous mode [ 64.973351][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.024750][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.033497][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.047951][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.058605][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.099540][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.113056][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.132172][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.142905][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.159522][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.171821][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.189376][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.193796][ C0] hrtimer: interrupt took 46007 ns [ 65.216471][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.235157][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.250043][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.292056][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.343508][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.394999][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.427208][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.535203][ T5829] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.579592][ T5829] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 65.626231][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639455][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.653612][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.667133][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.721508][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.744344][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.813077][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.854896][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.986156][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.017370][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.088120][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.119996][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.554922][ T5774] Bluetooth: hci3: command tx timeout [ 66.640131][ T5774] Bluetooth: hci1: command tx timeout [ 66.645763][ T5774] Bluetooth: hci2: command tx timeout [ 66.652044][ T5781] Bluetooth: hci0: command tx timeout [ 67.999367][ T42] wlan1: Trigger new scan to find an IBSS to join [ 68.607115][ T5859] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 68.634339][ T5781] Bluetooth: hci3: command tx timeout [ 68.715155][ T5774] Bluetooth: hci2: command tx timeout [ 68.720614][ T5781] Bluetooth: hci0: command tx timeout [ 68.726143][ T5774] Bluetooth: hci1: command tx timeout [ 68.820796][ T5876] netlink: set zone limit has 8 unknown bytes [ 68.891338][ T5876] macvlan1: entered promiscuous mode [ 69.894017][ T5898] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 70.050090][ T5900] netlink: set zone limit has 8 unknown bytes [ 70.161072][ T5900] macvlan1: entered promiscuous mode [ 70.958983][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 71.181492][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 71.546814][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.583699][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.004957][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 74.579648][ T5960] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 75.997805][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 76.721770][ T968] cfg80211: failed to load regulatory.db [ 77.015881][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 77.022525][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 77.207056][ T49] wlan1: Creating new IBSS network, BSSID a6:ce:8a:30:95:ce [ 77.609353][ T5999] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 78.085174][ T3509] wlan1: Creating new IBSS network, BSSID 8a:5b:c0:b5:3b:81 [ 79.562379][ T6021] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 80.013860][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 81.995085][ T276] wlan1: Trigger new scan to find an IBSS to join [ 82.003945][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 82.539486][ T6067] netlink: set zone limit has 8 unknown bytes [ 83.042260][ T276] wlan1: Creating new IBSS network, BSSID 02:f8:2b:04:84:43 [ 84.964702][ T49] wlan1: Trigger new scan to find an IBSS to join [ 85.031576][ T6099] netlink: set zone limit has 8 unknown bytes [ 85.100739][ T6099] macvlan1: entered promiscuous mode [ 85.641092][ T6107] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 85.801861][ T6109] netlink: set zone limit has 8 unknown bytes [ 85.938368][ T3555] wlan1: Creating new IBSS network, BSSID 92:b7:66:f7:a7:45 [ 85.943290][ T6113] netlink: set zone limit has 8 unknown bytes [ 86.016997][ T6113] macvlan1: entered promiscuous mode [ 86.284680][ T6123] netlink: set zone limit has 8 unknown bytes [ 87.035277][ T49] wlan1: Trigger new scan to find an IBSS to join [ 87.701358][ T6135] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 87.724722][ T6138] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 87.996606][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 88.040776][ T6154] netlink: set zone limit has 8 unknown bytes [ 88.087954][ T49] wlan1: Creating new IBSS network, BSSID 1e:3f:65:2a:5b:f1 [ 88.205884][ T6149] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 88.278557][ T6156] netlink: set zone limit has 8 unknown bytes [ 89.998543][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 90.005270][ T49] wlan1: Trigger new scan to find an IBSS to join [ 90.958748][ T6179] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 90.970146][ T6182] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.145002][ T6187] netlink: set zone limit has 8 unknown bytes [ 92.003041][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 92.963560][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 93.039996][ T3499] wlan1: Trigger new scan to find an IBSS to join [ 93.548189][ T6213] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 93.655228][ T6217] netlink: set zone limit has 8 unknown bytes [ 96.001955][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 96.012086][ T276] wlan1: Trigger new scan to find an IBSS to join [ 96.014936][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 96.025125][ T3499] wlan1: Trigger new scan to find an IBSS to join [ 96.071859][ T6249] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 96.957049][ T6257] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 96.976957][ T3468] wlan1: Creating new IBSS network, BSSID 16:bb:69:36:67:9e [ 96.976974][ T49] wlan1: Creating new IBSS network, BSSID da:69:a5:88:09:bb [ 97.095021][ T6261] netlink: set zone limit has 8 unknown bytes [ 98.889035][ T6294] netlink: set zone limit has 8 unknown bytes [ 98.954427][ T3468] wlan1: Creating new IBSS network, BSSID 42:69:ac:87:bf:e9 [ 99.397227][ T6303] netlink: set zone limit has 8 unknown bytes [ 100.955963][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 101.231215][ T6335] netlink: set zone limit has 8 unknown bytes [ 101.311770][ T6337] netlink: set zone limit has 8 unknown bytes [ 101.480713][ T6339] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 101.491229][ T6339] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 101.777983][ T6346] netlink: 'syz.2.172': attribute type 2 has an invalid length. [ 101.788815][ T6346] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 101.801869][ T6346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.062155][ T6357] netlink: set zone limit has 8 unknown bytes [ 102.372525][ T6362] netlink: set zone limit has 8 unknown bytes [ 103.649705][ T6375] FAULT_INJECTION: forcing a failure. [ 103.649705][ T6375] name failslab, interval 1, probability 0, space 0, times 1 [ 103.736435][ T6375] CPU: 0 PID: 6375 Comm: syz.3.184 Not tainted syzkaller #0 [ 103.743794][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.753902][ T6375] Call Trace: [ 103.757215][ T6375] [ 103.760165][ T6375] dump_stack_lvl+0x18c/0x250 [ 103.764892][ T6375] ? show_regs_print_info+0x20/0x20 [ 103.770136][ T6375] ? load_image+0x420/0x420 [ 103.774698][ T6375] ? __might_sleep+0xe0/0xe0 [ 103.779337][ T6375] ? __lock_acquire+0x7d40/0x7d40 [ 103.784438][ T6375] should_fail_ex+0x39d/0x4d0 [ 103.789180][ T6375] should_failslab+0x9/0x20 [ 103.793741][ T6375] slab_pre_alloc_hook+0x59/0x310 [ 103.798814][ T6375] ? __lock_acquire+0x7d40/0x7d40 [ 103.803991][ T6375] kmem_cache_alloc_node+0x60/0x320 [ 103.809237][ T6375] ? __alloc_skb+0x103/0x2c0 [ 103.813885][ T6375] __alloc_skb+0x103/0x2c0 [ 103.818374][ T6375] netlink_sendmsg+0x66a/0xbf0 [ 103.823184][ T6375] ? perf_trace_lock+0x304/0x3b0 [ 103.828182][ T6375] ? netlink_getsockopt+0x590/0x590 [ 103.833465][ T6375] ? aa_sock_msg_perm+0x94/0x150 [ 103.838478][ T6375] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 103.843885][ T6375] ? security_socket_sendmsg+0x80/0xa0 [ 103.849355][ T6375] ? netlink_getsockopt+0x590/0x590 [ 103.854726][ T6375] ____sys_sendmsg+0x5ba/0x960 [ 103.859613][ T6375] ? __asan_memset+0x22/0x40 [ 103.864304][ T6375] ? __sys_sendmsg_sock+0x30/0x30 [ 103.869341][ T6375] ? __import_iovec+0x5f2/0x850 [ 103.874228][ T6375] ? import_iovec+0x73/0xa0 [ 103.878750][ T6375] ___sys_sendmsg+0x2a6/0x360 [ 103.883447][ T6375] ? __sys_sendmsg+0x2a0/0x2a0 [ 103.888267][ T6375] ? __lock_acquire+0x7d40/0x7d40 [ 103.893367][ T6375] __se_sys_sendmsg+0x1c2/0x2b0 [ 103.898234][ T6375] ? __x64_sys_sendmsg+0x80/0x80 [ 103.903214][ T6375] ? lockdep_hardirqs_on+0x98/0x150 [ 103.908429][ T6375] do_syscall_64+0x55/0xa0 [ 103.912846][ T6375] ? clear_bhb_loop+0x40/0x90 [ 103.917556][ T6375] ? clear_bhb_loop+0x40/0x90 [ 103.922338][ T6375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.928248][ T6375] RIP: 0033:0x7f2c7799c819 [ 103.932683][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.952321][ T6375] RSP: 002b:00007f2c787cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.960764][ T6375] RAX: ffffffffffffffda RBX: 00007f2c77c15fa0 RCX: 00007f2c7799c819 [ 103.968750][ T6375] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 103.976732][ T6375] RBP: 00007f2c787cc090 R08: 0000000000000000 R09: 0000000000000000 [ 103.984718][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.992696][ T6375] R13: 00007f2c77c16038 R14: 00007f2c77c15fa0 R15: 00007ffcb66f3c98 [ 104.000713][ T6375] [ 104.008880][ T276] wlan1: Trigger new scan to find an IBSS to join [ 104.367025][ T6386] netlink: 144 bytes leftover after parsing attributes in process `syz.3.187'. [ 104.450386][ T6387] netlink: set zone limit has 8 unknown bytes [ 104.720326][ T6394] netlink: set zone limit has 8 unknown bytes [ 105.743527][ T6396] netlink: 144 bytes leftover after parsing attributes in process `syz.3.192'. [ 105.978542][ T3468] wlan1: Creating new IBSS network, BSSID 2e:af:5f:ed:63:94 [ 106.015783][ T6407] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 106.204242][ T6411] A@0Ù: renamed from bond_slave_1 (while UP) [ 106.381787][ T6414] IPv6: Can't replace route, no match found [ 106.435707][ T6414] netlink: 'syz.1.199': attribute type 25 has an invalid length. [ 106.443699][ T6414] netlink: 'syz.1.199': attribute type 29 has an invalid length. [ 106.497412][ T6422] netlink: set zone limit has 8 unknown bytes [ 106.526375][ T6414] netlink: 5 bytes leftover after parsing attributes in process `syz.1.199'. [ 106.571457][ T6426] FAULT_INJECTION: forcing a failure. [ 106.571457][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.587497][ T6426] CPU: 0 PID: 6426 Comm: syz.3.203 Not tainted syzkaller #0 [ 106.594790][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.604924][ T6426] Call Trace: [ 106.608195][ T6426] [ 106.611151][ T6426] dump_stack_lvl+0x18c/0x250 [ 106.615860][ T6426] ? show_regs_print_info+0x20/0x20 [ 106.621047][ T6426] ? load_image+0x420/0x420 [ 106.625544][ T6426] ? __might_fault+0xaa/0x120 [ 106.630207][ T6426] ? __lock_acquire+0x7d40/0x7d40 [ 106.635217][ T6426] should_fail_ex+0x39d/0x4d0 [ 106.639887][ T6426] _copy_from_user+0x2f/0xe0 [ 106.644479][ T6426] ___sys_sendmsg+0x1c7/0x360 [ 106.649168][ T6426] ? get_pid_task+0x20/0x1e0 [ 106.653774][ T6426] ? __sys_sendmsg+0x2a0/0x2a0 [ 106.658555][ T6426] ? __lock_acquire+0x7d40/0x7d40 [ 106.663598][ T6426] __se_sys_sendmsg+0x1c2/0x2b0 [ 106.668460][ T6426] ? __x64_sys_sendmsg+0x80/0x80 [ 106.673395][ T6426] ? lockdep_hardirqs_on+0x98/0x150 [ 106.678591][ T6426] do_syscall_64+0x55/0xa0 [ 106.682997][ T6426] ? clear_bhb_loop+0x40/0x90 [ 106.687668][ T6426] ? clear_bhb_loop+0x40/0x90 [ 106.692337][ T6426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.698223][ T6426] RIP: 0033:0x7f2c7799c819 [ 106.702630][ T6426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.722229][ T6426] RSP: 002b:00007f2c787cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.730629][ T6426] RAX: ffffffffffffffda RBX: 00007f2c77c15fa0 RCX: 00007f2c7799c819 [ 106.738588][ T6426] RDX: 000000002000481c RSI: 0000200000000040 RDI: 0000000000000004 [ 106.746553][ T6426] RBP: 00007f2c787cc090 R08: 0000000000000000 R09: 0000000000000000 [ 106.754509][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.762466][ T6426] R13: 00007f2c77c16038 R14: 00007f2c77c15fa0 R15: 00007ffcb66f3c98 [ 106.770429][ T6426] [ 107.772504][ T6437] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 107.995892][ T6444] @0Ù: renamed from bond_slave_1 (while UP) [ 108.347009][ T6449] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.211'. [ 108.440775][ T6458] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 108.448860][ T6458] netlink: 'syz.0.214': attribute type 4 has an invalid length. [ 108.458297][ T6458] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.214'. [ 108.514418][ T6460] netlink: set zone limit has 8 unknown bytes [ 108.848268][ T6466] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.966084][ T6468] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 108.987736][ T6468] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.219'. [ 109.053211][ T1131] tipc: Subscription rejected, illegal request [ 109.091338][ T6474] FAULT_INJECTION: forcing a failure. [ 109.091338][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.118160][ T6474] CPU: 0 PID: 6474 Comm: syz.1.220 Not tainted syzkaller #0 [ 109.125488][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.135534][ T6474] Call Trace: [ 109.138805][ T6474] [ 109.141724][ T6474] dump_stack_lvl+0x18c/0x250 [ 109.146408][ T6474] ? show_regs_print_info+0x20/0x20 [ 109.151601][ T6474] ? load_image+0x420/0x420 [ 109.156093][ T6474] ? __lock_acquire+0x7d40/0x7d40 [ 109.161100][ T6474] ? snprintf+0xe9/0x140 [ 109.165330][ T6474] should_fail_ex+0x39d/0x4d0 [ 109.170004][ T6474] _copy_to_user+0x2f/0xa0 [ 109.174410][ T6474] simple_read_from_buffer+0xe7/0x150 [ 109.179780][ T6474] proc_fail_nth_read+0x1e8/0x260 [ 109.184798][ T6474] ? proc_fault_inject_write+0x360/0x360 [ 109.190431][ T6474] ? fsnotify_perm+0x271/0x5e0 [ 109.195285][ T6474] ? proc_fault_inject_write+0x360/0x360 [ 109.200921][ T6474] vfs_read+0x28b/0x970 [ 109.205076][ T6474] ? kernel_read+0x1e0/0x1e0 [ 109.209674][ T6474] ? __fget_files+0x28/0x4b0 [ 109.214266][ T6474] ? __fget_files+0x28/0x4b0 [ 109.218854][ T6474] ? __fget_files+0x43d/0x4b0 [ 109.223529][ T6474] ? __fdget_pos+0x2a3/0x330 [ 109.228112][ T6474] ? ksys_read+0x75/0x260 [ 109.232435][ T6474] ksys_read+0x150/0x260 [ 109.236674][ T6474] ? vfs_write+0x990/0x990 [ 109.241088][ T6474] ? lockdep_hardirqs_on+0x98/0x150 [ 109.246281][ T6474] do_syscall_64+0x55/0xa0 [ 109.250686][ T6474] ? clear_bhb_loop+0x40/0x90 [ 109.255362][ T6474] ? clear_bhb_loop+0x40/0x90 [ 109.260037][ T6474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.265943][ T6474] RIP: 0033:0x7f14b475d04e [ 109.270366][ T6474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.289981][ T6474] RSP: 002b:00007f14b55c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.298384][ T6474] RAX: ffffffffffffffda RBX: 00007f14b55c26c0 RCX: 00007f14b475d04e [ 109.306351][ T6474] RDX: 000000000000000f RSI: 00007f14b55c20a0 RDI: 0000000000000004 [ 109.314327][ T6474] RBP: 00007f14b55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 109.322296][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.330255][ T6474] R13: 00007f14b4a16038 R14: 00007f14b4a15fa0 R15: 00007ffe0080ada8 [ 109.338229][ T6474] [ 109.566798][ T6486] netlink: set zone limit has 8 unknown bytes [ 109.610786][ T6488] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 109.634738][ T6488] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.224'. [ 109.670494][ T6484] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.224'. [ 109.704203][ T6484] openvswitch: netlink: Message has 5 unknown bytes. [ 110.011196][ T3499] wlan1: Trigger new scan to find an IBSS to join [ 110.023241][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 110.230638][ T6499] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 110.381904][ T6482] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.223'. [ 110.732981][ T6482] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 111.044025][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 112.073691][ T6516] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 112.755595][ T6519] netlink: set zone limit has 8 unknown bytes [ 114.006538][ T3499] wlan1: Trigger new scan to find an IBSS to join [ 114.013049][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 114.632603][ T6521] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 114.642307][ T6521] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.235'. [ 114.700689][ T6521] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.235'. [ 114.770464][ T6521] openvswitch: netlink: Message has 5 unknown bytes. [ 114.846289][ T6530] IPv6: Can't replace route, no match found [ 114.889283][ T6530] netlink: 'syz.3.239': attribute type 25 has an invalid length. [ 114.919534][ T6530] netlink: 'syz.3.239': attribute type 29 has an invalid length. [ 115.050251][ T49] wlan1: Trigger new scan to find an IBSS to join [ 115.523469][ T3555] wlan1: Creating new IBSS network, BSSID de:be:1e:b5:25:d5 [ 115.523520][ T1131] wlan1: Creating new IBSS network, BSSID 6e:af:4a:00:dc:df [ 115.539545][ T6534] netlink: 5 bytes leftover after parsing attributes in process `syz.3.239'. [ 115.552237][ T6540] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 115.960570][ T6554] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.245'. [ 115.981095][ T276] tipc: Subscription rejected, illegal request [ 115.983406][ T6556] netlink: set zone limit has 8 unknown bytes [ 116.063473][ T3509] wlan1: Creating new IBSS network, BSSID 12:1c:20:5c:0f:ae [ 116.650912][ T6565] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 117.048142][ T6572] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 117.425309][ T6578] IPv6: Can't replace route, no match found [ 117.444505][ T6578] netlink: 'syz.2.253': attribute type 25 has an invalid length. [ 117.452826][ T6578] netlink: 'syz.2.253': attribute type 29 has an invalid length. [ 117.469664][ T6578] netlink: 5 bytes leftover after parsing attributes in process `syz.2.253'. [ 117.629188][ T6583] netlink: set zone limit has 8 unknown bytes [ 117.826253][ T6593] FAULT_INJECTION: forcing a failure. [ 117.826253][ T6593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.848785][ T6593] CPU: 0 PID: 6593 Comm: syz.0.262 Not tainted syzkaller #0 [ 117.856108][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.866159][ T6593] Call Trace: [ 117.869438][ T6593] [ 117.872362][ T6593] dump_stack_lvl+0x18c/0x250 [ 117.877050][ T6593] ? show_regs_print_info+0x20/0x20 [ 117.882245][ T6593] ? load_image+0x420/0x420 [ 117.886750][ T6593] ? __lock_acquire+0x7d40/0x7d40 [ 117.891775][ T6593] ? snprintf+0xe9/0x140 [ 117.896190][ T6593] should_fail_ex+0x39d/0x4d0 [ 117.900945][ T6593] _copy_to_user+0x2f/0xa0 [ 117.905377][ T6593] simple_read_from_buffer+0xe7/0x150 [ 117.910759][ T6593] proc_fail_nth_read+0x1e8/0x260 [ 117.915787][ T6593] ? proc_fault_inject_write+0x360/0x360 [ 117.921420][ T6593] ? fsnotify_perm+0x271/0x5e0 [ 117.926182][ T6593] ? proc_fault_inject_write+0x360/0x360 [ 117.931814][ T6593] vfs_read+0x28b/0x970 [ 117.935975][ T6593] ? kernel_read+0x1e0/0x1e0 [ 117.940565][ T6593] ? __fget_files+0x28/0x4b0 [ 117.945149][ T6593] ? __fget_files+0x28/0x4b0 [ 117.949734][ T6593] ? __fget_files+0x43d/0x4b0 [ 117.954429][ T6593] ? __fdget_pos+0x2a3/0x330 [ 117.959014][ T6593] ? ksys_read+0x75/0x260 [ 117.963340][ T6593] ksys_read+0x150/0x260 [ 117.967579][ T6593] ? vfs_write+0x990/0x990 [ 117.971991][ T6593] ? lockdep_hardirqs_on+0x98/0x150 [ 117.977187][ T6593] do_syscall_64+0x55/0xa0 [ 117.981592][ T6593] ? clear_bhb_loop+0x40/0x90 [ 117.986261][ T6593] ? clear_bhb_loop+0x40/0x90 [ 117.990929][ T6593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.996819][ T6593] RIP: 0033:0x7fa637f5d04e [ 118.001225][ T6593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.020821][ T6593] RSP: 002b:00007fa638e11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.029232][ T6593] RAX: ffffffffffffffda RBX: 00007fa638e126c0 RCX: 00007fa637f5d04e [ 118.037193][ T6593] RDX: 000000000000000f RSI: 00007fa638e120a0 RDI: 0000000000000004 [ 118.045155][ T6593] RBP: 00007fa638e12090 R08: 0000000000000000 R09: 0000000000000000 [ 118.053119][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.061084][ T6593] R13: 00007fa638216038 R14: 00007fa638215fa0 R15: 00007ffecec53e38 [ 118.069061][ T6593] [ 118.075303][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 119.151977][ T6611] netlink: 5 bytes leftover after parsing attributes in process `syz.2.269'. [ 119.341240][ T6616] netlink: set zone limit has 8 unknown bytes [ 120.485009][ T6650] netlink: set zone limit has 8 unknown bytes [ 120.668090][ T6656] FAULT_INJECTION: forcing a failure. [ 120.668090][ T6656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.685729][ T6656] CPU: 1 PID: 6656 Comm: syz.1.285 Not tainted syzkaller #0 [ 120.693052][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.703122][ T6656] Call Trace: [ 120.706417][ T6656] [ 120.709369][ T6656] dump_stack_lvl+0x18c/0x250 [ 120.714089][ T6656] ? show_regs_print_info+0x20/0x20 [ 120.719310][ T6656] ? load_image+0x420/0x420 [ 120.723836][ T6656] ? __might_fault+0xaa/0x120 [ 120.728525][ T6656] ? __lock_acquire+0x7d40/0x7d40 [ 120.733573][ T6656] should_fail_ex+0x39d/0x4d0 [ 120.738275][ T6656] _copy_from_user+0x2f/0xe0 [ 120.742885][ T6656] __sys_bpf+0x23e/0x890 [ 120.747148][ T6656] ? bpf_link_show_fdinfo+0x390/0x390 [ 120.752550][ T6656] ? lock_chain_count+0x20/0x20 [ 120.757433][ T6656] __x64_sys_bpf+0x7c/0x90 [ 120.761864][ T6656] do_syscall_64+0x55/0xa0 [ 120.766288][ T6656] ? clear_bhb_loop+0x40/0x90 [ 120.770971][ T6656] ? clear_bhb_loop+0x40/0x90 [ 120.775656][ T6656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.781562][ T6656] RIP: 0033:0x7f14b479c819 [ 120.785997][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.805615][ T6656] RSP: 002b:00007f14b55c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.814043][ T6656] RAX: ffffffffffffffda RBX: 00007f14b4a15fa0 RCX: 00007f14b479c819 [ 120.822019][ T6656] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 120.830000][ T6656] RBP: 00007f14b55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 120.837976][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.846034][ T6656] R13: 00007f14b4a16038 R14: 00007f14b4a15fa0 R15: 00007ffe0080ada8 [ 120.854020][ T6656] [ 121.569359][ T6680] netlink: set zone limit has 8 unknown bytes [ 121.934174][ T6690] Zero length message leads to an empty skb [ 121.994020][ T276] wlan1: Trigger new scan to find an IBSS to join [ 122.258212][ T6697] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.270564][ T6697] sock: sock_timestamping_bind_phc: sock not bind to device [ 122.644414][ T6707] netlink: set zone limit has 8 unknown bytes [ 123.131875][ T3555] wlan1: Creating new IBSS network, BSSID 56:8a:a8:13:f7:83 [ 124.016750][ T6733] netlink: set zone limit has 8 unknown bytes [ 125.026694][ T6753] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.231876][ T6758] netlink: set zone limit has 8 unknown bytes [ 125.538129][ T6762] Illegal XDP return value 4294967274 on prog (id 309) dev N/A, expect packet loss! [ 128.734061][ T6775] netlink: 5 bytes leftover after parsing attributes in process `syz.1.329'. [ 129.038785][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 129.203283][ T6779] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 131.997753][ T3499] wlan1: Trigger new scan to find an IBSS to join [ 132.116713][ T6822] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 132.791668][ T6845] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 132.973803][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980576][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034851][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 134.101134][ T3499] wlan1: Creating new IBSS network, BSSID ce:10:6e:17:84:b3 [ 134.398260][ T6864] netlink: 5 bytes leftover after parsing attributes in process `syz.2.356'. [ 134.841582][ T6865] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 135.681932][ T6887] netlink: 'syz.3.365': attribute type 2 has an invalid length. [ 135.698626][ T6887] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.365'. [ 136.007528][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 137.034846][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 137.126811][ T3499] wlan1: Creating new IBSS network, BSSID 5e:87:07:8e:48:a2 [ 137.559470][ T6910] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 140.451930][ T6951] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 140.590442][ T6957] IPv6: Can't replace route, no match found [ 140.625546][ T6957] netlink: 5 bytes leftover after parsing attributes in process `syz.2.387'. [ 140.954218][ T276] wlan1: Trigger new scan to find an IBSS to join [ 141.172139][ T6960] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.388'. [ 141.523320][ T6974] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.392'. [ 143.216541][ T6988] IPv6: Can't replace route, no match found [ 143.309896][ T6984] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.395'. [ 143.994068][ T276] wlan1: Trigger new scan to find an IBSS to join [ 144.311042][ T6988] netlink: 5 bytes leftover after parsing attributes in process `syz.1.398'. [ 144.669251][ T6994] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.034867][ T276] wlan1: Trigger new scan to find an IBSS to join [ 146.089156][ T276] wlan1: Creating new IBSS network, BSSID de:bc:d9:36:9e:20 [ 147.034525][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 148.127718][ T42] wlan1: Trigger new scan to find an IBSS to join [ 148.416267][ T7024] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.408'. [ 148.428078][ T7024] bridge_slave_1: default FDB implementation only supports local addresses [ 148.665766][ T7026] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.406'. [ 148.709086][ T7026] bridge_slave_1: default FDB implementation only supports local addresses [ 148.918656][ T7034] IPv6: Can't replace route, no match found [ 148.950599][ T7034] netlink: 5 bytes leftover after parsing attributes in process `syz.1.417'. [ 149.043204][ T7040] IPv6: Can't replace route, no match found [ 149.180373][ T276] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 149.552762][ T7058] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.416'. [ 149.765921][ T7057] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.448943][ T7069] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.419'. [ 150.508660][ T7071] IPv6: Can't replace route, no match found [ 150.530031][ T7071] netlink: 5 bytes leftover after parsing attributes in process `syz.3.421'. [ 150.650952][ T7076] netlink: 'syz.2.423': attribute type 33 has an invalid length. [ 150.690709][ T7076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.423'. [ 150.764057][ T7074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.422'. [ 150.838655][ T7078] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.424'. [ 150.953974][ T49] wlan1: Trigger new scan to find an IBSS to join [ 151.065912][ T7084] netlink: 'syz.1.426': attribute type 3 has an invalid length. [ 151.082961][ T7084] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.426'. [ 151.141232][ T7086] IPv6: Can't replace route, no match found [ 151.691882][ T7093] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 152.056669][ T7101] IPv6: Can't replace route, no match found [ 152.098384][ T7101] netlink: 'syz.0.432': attribute type 25 has an invalid length. [ 152.113943][ T7101] netlink: 'syz.0.432': attribute type 29 has an invalid length. [ 152.516183][ T42] wlan1: Creating new IBSS network, BSSID fa:79:39:0f:a3:26 [ 153.336138][ T7125] FAULT_INJECTION: forcing a failure. [ 153.336138][ T7125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.387349][ T7125] CPU: 1 PID: 7125 Comm: syz.2.441 Not tainted syzkaller #0 [ 153.394712][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.404806][ T7125] Call Trace: [ 153.408128][ T7125] [ 153.411106][ T7125] dump_stack_lvl+0x18c/0x250 [ 153.415827][ T7125] ? show_regs_print_info+0x20/0x20 [ 153.421062][ T7125] ? load_image+0x420/0x420 [ 153.425601][ T7125] ? __lock_acquire+0x7d40/0x7d40 [ 153.430640][ T7125] ? aa_sk_perm+0x970/0x970 [ 153.435172][ T7125] should_fail_ex+0x39d/0x4d0 [ 153.439891][ T7125] _copy_from_user+0x2f/0xe0 [ 153.444502][ T7125] copy_from_sockptr+0x69/0x80 [ 153.449285][ T7125] packet_setsockopt+0xbff/0x1500 [ 153.454348][ T7125] ? packet_ioctl+0x340/0x340 [ 153.459077][ T7125] ? aa_sk_perm+0x83c/0x970 [ 153.463623][ T7125] ? __fget_files+0x28/0x4b0 [ 153.468267][ T7125] ? aa_af_perm+0x330/0x330 [ 153.472801][ T7125] ? __fget_files+0x28/0x4b0 [ 153.477402][ T7125] ? __fget_files+0x28/0x4b0 [ 153.482015][ T7125] ? aa_sock_opt_perm+0x74/0x100 [ 153.486991][ T7125] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 153.492556][ T7125] ? security_socket_setsockopt+0x7e/0xa0 [ 153.498291][ T7125] ? packet_ioctl+0x340/0x340 [ 153.503001][ T7125] do_sock_setsockopt+0x175/0x1a0 [ 153.508034][ T7125] ? __fdget+0x180/0x210 [ 153.512294][ T7125] __x64_sys_setsockopt+0x182/0x200 [ 153.517523][ T7125] do_syscall_64+0x55/0xa0 [ 153.521947][ T7125] ? clear_bhb_loop+0x40/0x90 [ 153.526637][ T7125] ? clear_bhb_loop+0x40/0x90 [ 153.531328][ T7125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.537233][ T7125] RIP: 0033:0x7fc8f8f9c819 [ 153.541662][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.561276][ T7125] RSP: 002b:00007fc8f9d90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.569707][ T7125] RAX: ffffffffffffffda RBX: 00007fc8f9215fa0 RCX: 00007fc8f8f9c819 [ 153.577708][ T7125] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005 [ 153.585695][ T7125] RBP: 00007fc8f9d90090 R08: 0000000000000004 R09: 0000000000000000 [ 153.593676][ T7125] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 153.601932][ T7125] R13: 00007fc8f9216038 R14: 00007fc8f9215fa0 R15: 00007fff66791508 [ 153.609961][ T7125] [ 153.747228][ T7129] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.995426][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 154.020277][ T7131] IPv6: Can't replace route, no match found [ 154.039084][ T7131] netlink: 'syz.1.444': attribute type 25 has an invalid length. [ 154.090061][ T7131] netlink: 'syz.1.444': attribute type 29 has an invalid length. [ 154.167807][ T7132] __nla_validate_parse: 4 callbacks suppressed [ 154.167823][ T7132] netlink: 5 bytes leftover after parsing attributes in process `syz.1.444'. [ 154.200388][ T7135] netlink: 12030 bytes leftover after parsing attributes in process `syz.2.445'. [ 154.228323][ T7135] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.445'. [ 154.413104][ T7147] syz.3.450 uses obsolete (PF_INET,SOCK_PACKET) [ 155.636859][ T7167] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.457'. [ 155.708656][ T7169] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.765915][ T7168] IPv6: Can't replace route, no match found [ 155.776995][ T7168] netlink: 'syz.1.456': attribute type 25 has an invalid length. [ 155.785557][ T7168] netlink: 'syz.1.456': attribute type 29 has an invalid length. [ 155.806872][ T7168] netlink: 5 bytes leftover after parsing attributes in process `syz.1.456'. [ 156.410521][ T7181] FAULT_INJECTION: forcing a failure. [ 156.410521][ T7181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.424717][ T7177] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 156.432891][ T7177] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 156.447032][ T7181] CPU: 0 PID: 7181 Comm: syz.2.462 Not tainted syzkaller #0 [ 156.454534][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.464604][ T7181] Call Trace: [ 156.467902][ T7181] [ 156.470839][ T7181] dump_stack_lvl+0x18c/0x250 [ 156.475542][ T7181] ? show_regs_print_info+0x20/0x20 [ 156.480764][ T7181] ? load_image+0x420/0x420 [ 156.485281][ T7181] ? __lock_acquire+0x7d40/0x7d40 [ 156.490314][ T7181] ? snprintf+0xe9/0x140 [ 156.494575][ T7181] should_fail_ex+0x39d/0x4d0 [ 156.499275][ T7181] _copy_to_user+0x2f/0xa0 [ 156.503799][ T7181] simple_read_from_buffer+0xe7/0x150 [ 156.509201][ T7181] proc_fail_nth_read+0x1e8/0x260 [ 156.514255][ T7181] ? proc_fault_inject_write+0x360/0x360 [ 156.519907][ T7181] ? fsnotify_perm+0x271/0x5e0 [ 156.524779][ T7181] ? proc_fault_inject_write+0x360/0x360 [ 156.530432][ T7181] vfs_read+0x28b/0x970 [ 156.534612][ T7181] ? kernel_read+0x1e0/0x1e0 [ 156.539253][ T7181] ? __fget_files+0x28/0x4b0 [ 156.543855][ T7181] ? __fget_files+0x28/0x4b0 [ 156.548457][ T7181] ? __fget_files+0x43d/0x4b0 [ 156.553152][ T7181] ? __fdget_pos+0x2a3/0x330 [ 156.557763][ T7181] ? ksys_read+0x75/0x260 [ 156.562111][ T7181] ksys_read+0x150/0x260 [ 156.566368][ T7181] ? vfs_write+0x990/0x990 [ 156.570805][ T7181] ? lockdep_hardirqs_on+0x98/0x150 [ 156.576021][ T7181] do_syscall_64+0x55/0xa0 [ 156.580445][ T7181] ? clear_bhb_loop+0x40/0x90 [ 156.585133][ T7181] ? clear_bhb_loop+0x40/0x90 [ 156.589821][ T7181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.595724][ T7181] RIP: 0033:0x7fc8f8f5d04e [ 156.600243][ T7181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.619867][ T7181] RSP: 002b:00007fc8f9d8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.628302][ T7181] RAX: ffffffffffffffda RBX: 00007fc8f9d906c0 RCX: 00007fc8f8f5d04e [ 156.636286][ T7181] RDX: 000000000000000f RSI: 00007fc8f9d900a0 RDI: 0000000000000003 [ 156.644269][ T7181] RBP: 00007fc8f9d90090 R08: 0000000000000000 R09: 0000000000000000 [ 156.652251][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.660236][ T7181] R13: 00007fc8f9216038 R14: 00007fc8f9215fa0 R15: 00007fff66791508 [ 156.668330][ T7181] [ 156.954039][ T49] wlan1: Trigger new scan to find an IBSS to join [ 157.810732][ T7200] netlink: 'syz.2.469': attribute type 25 has an invalid length. [ 157.839662][ T7200] netlink: 'syz.2.469': attribute type 29 has an invalid length. [ 157.858034][ T7205] netlink: 5 bytes leftover after parsing attributes in process `syz.2.469'. [ 158.251029][ T7215] netlink: 132 bytes leftover after parsing attributes in process `syz.2.472'. [ 159.206309][ T7229] delete_channel: no stack [ 159.454058][ T7237] netlink: 'syz.3.482': attribute type 25 has an invalid length. [ 159.463911][ T7237] netlink: 'syz.3.482': attribute type 29 has an invalid length. [ 159.484341][ T7237] netlink: 5 bytes leftover after parsing attributes in process `syz.3.482'. [ 159.996618][ T49] wlan1: Trigger new scan to find an IBSS to join [ 160.954692][ T7258] FAULT_INJECTION: forcing a failure. [ 160.954692][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 160.986697][ T7258] CPU: 0 PID: 7258 Comm: syz.3.489 Not tainted syzkaller #0 [ 160.994029][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.004102][ T7258] Call Trace: [ 161.007391][ T7258] [ 161.010336][ T7258] dump_stack_lvl+0x18c/0x250 [ 161.015045][ T7258] ? show_regs_print_info+0x20/0x20 [ 161.020267][ T7258] ? load_image+0x420/0x420 [ 161.024799][ T7258] ? __might_sleep+0xe0/0xe0 [ 161.029417][ T7258] ? __lock_acquire+0x7d40/0x7d40 [ 161.034475][ T7258] should_fail_ex+0x39d/0x4d0 [ 161.039193][ T7258] should_failslab+0x9/0x20 [ 161.043718][ T7258] slab_pre_alloc_hook+0x59/0x310 [ 161.048763][ T7258] ? __inet_diag_dump_start+0x8b/0x9f0 [ 161.054257][ T7258] __kmem_cache_alloc_node+0x53/0x250 [ 161.059631][ T7258] ? __inet_diag_dump_start+0x8b/0x9f0 [ 161.065095][ T7258] kmalloc_trace+0x2a/0xe0 [ 161.069508][ T7258] __inet_diag_dump_start+0x8b/0x9f0 [ 161.074787][ T7258] ? netlink_lookup+0x30/0x200 [ 161.079544][ T7258] ? netlink_lookup+0x30/0x200 [ 161.084311][ T7258] __netlink_dump_start+0x4a9/0x810 [ 161.089507][ T7258] inet_diag_rcv_msg_compat+0x215/0x440 [ 161.095052][ T7258] ? __inet_diag_dump+0x380/0x380 [ 161.100075][ T7258] ? sock_diag_rcv_msg+0xd1/0x600 [ 161.105091][ T7258] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 161.110805][ T7258] ? inet_diag_dump_start_compat+0x20/0x20 [ 161.116604][ T7258] ? inet_diag_dump+0x50/0x50 [ 161.121280][ T7258] ? __inet_diag_dump+0x380/0x380 [ 161.126297][ T7258] sock_diag_rcv_msg+0x3d8/0x600 [ 161.131229][ T7258] netlink_rcv_skb+0x241/0x4d0 [ 161.135988][ T7258] ? sock_diag_bind+0xb0/0xb0 [ 161.140657][ T7258] ? netlink_ack+0x1180/0x1180 [ 161.145423][ T7258] ? __lock_acquire+0x7d40/0x7d40 [ 161.150445][ T7258] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.155645][ T7258] sock_diag_rcv+0x2a/0x40 [ 161.160052][ T7258] netlink_unicast+0x751/0x8d0 [ 161.164824][ T7258] netlink_sendmsg+0x8d0/0xbf0 [ 161.169590][ T7258] ? netlink_getsockopt+0x590/0x590 [ 161.174782][ T7258] ? aa_sock_msg_perm+0x94/0x150 [ 161.179716][ T7258] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 161.184992][ T7258] ? security_socket_sendmsg+0x80/0xa0 [ 161.190441][ T7258] ? netlink_getsockopt+0x590/0x590 [ 161.195641][ T7258] ____sys_sendmsg+0x5ba/0x960 [ 161.200398][ T7258] ? __asan_memset+0x22/0x40 [ 161.204985][ T7258] ? __sys_sendmsg_sock+0x30/0x30 [ 161.209997][ T7258] ? __import_iovec+0x5f2/0x850 [ 161.214844][ T7258] ? import_iovec+0x73/0xa0 [ 161.219337][ T7258] ___sys_sendmsg+0x2a6/0x360 [ 161.224006][ T7258] ? __sys_sendmsg+0x2a0/0x2a0 [ 161.228774][ T7258] ? trace_call_bpf+0xc3/0x6c0 [ 161.233549][ T7258] __se_sys_sendmsg+0x1c2/0x2b0 [ 161.238393][ T7258] ? __x64_sys_sendmsg+0x80/0x80 [ 161.243330][ T7258] ? lockdep_hardirqs_on+0x98/0x150 [ 161.248522][ T7258] do_syscall_64+0x55/0xa0 [ 161.252930][ T7258] ? clear_bhb_loop+0x40/0x90 [ 161.257603][ T7258] ? clear_bhb_loop+0x40/0x90 [ 161.262272][ T7258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.268155][ T7258] RIP: 0033:0x7f2c7799c819 [ 161.272735][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.292334][ T7258] RSP: 002b:00007f2c787cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.300775][ T7258] RAX: ffffffffffffffda RBX: 00007f2c77c15fa0 RCX: 00007f2c7799c819 [ 161.308735][ T7258] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 161.316695][ T7258] RBP: 00007f2c787cc090 R08: 0000000000000000 R09: 0000000000000000 [ 161.324657][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.332615][ T7258] R13: 00007f2c77c16038 R14: 00007f2c77c15fa0 R15: 00007ffcb66f3c98 [ 161.340587][ T7258] [ 161.547770][ T49] wlan1: Creating new IBSS network, BSSID 5a:03:b8:95:19:bc [ 161.560433][ T7260] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.720356][ T7268] IPv6: Can't replace route, no match found [ 161.757142][ T7268] netlink: 5 bytes leftover after parsing attributes in process `syz.3.492'. [ 161.773455][ T7273] netlink: 'syz.2.493': attribute type 25 has an invalid length. [ 161.783466][ T7273] netlink: 'syz.2.493': attribute type 29 has an invalid length. [ 161.795028][ T7273] netlink: 5 bytes leftover after parsing attributes in process `syz.2.493'. [ 162.009420][ T7282] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.224989][ T7304] netlink: 'syz.2.505': attribute type 25 has an invalid length. [ 163.233051][ T7304] netlink: 'syz.2.505': attribute type 29 has an invalid length. [ 163.245383][ T7304] netlink: 5 bytes leftover after parsing attributes in process `syz.2.505'. [ 163.259886][ T7309] IPv6: Can't replace route, no match found [ 163.315239][ T7309] netlink: 5 bytes leftover after parsing attributes in process `syz.0.507'. [ 163.336211][ T7311] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.239578][ T7339] FAULT_INJECTION: forcing a failure. [ 165.239578][ T7339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.276687][ T7339] CPU: 0 PID: 7339 Comm: syz.2.518 Not tainted syzkaller #0 [ 165.284027][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.294099][ T7339] Call Trace: [ 165.297390][ T7339] [ 165.300350][ T7339] dump_stack_lvl+0x18c/0x250 [ 165.305052][ T7339] ? show_regs_print_info+0x20/0x20 [ 165.310269][ T7339] ? load_image+0x420/0x420 [ 165.314787][ T7339] ? __might_fault+0xaa/0x120 [ 165.319484][ T7339] ? __lock_acquire+0x7d40/0x7d40 [ 165.324535][ T7339] should_fail_ex+0x39d/0x4d0 [ 165.329228][ T7339] _copy_from_user+0x2f/0xe0 [ 165.333825][ T7339] __sys_bpf+0x23e/0x890 [ 165.338069][ T7339] ? bpf_link_show_fdinfo+0x390/0x390 [ 165.343445][ T7339] ? lock_chain_count+0x20/0x20 [ 165.348297][ T7339] __x64_sys_bpf+0x7c/0x90 [ 165.352710][ T7339] do_syscall_64+0x55/0xa0 [ 165.357124][ T7339] ? clear_bhb_loop+0x40/0x90 [ 165.361796][ T7339] ? clear_bhb_loop+0x40/0x90 [ 165.366477][ T7339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.372361][ T7339] RIP: 0033:0x7fc8f8f9c819 [ 165.376772][ T7339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.396369][ T7339] RSP: 002b:00007fc8f9d90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.404797][ T7339] RAX: ffffffffffffffda RBX: 00007fc8f9215fa0 RCX: 00007fc8f8f9c819 [ 165.412779][ T7339] RDX: 0000000000000012 RSI: 0000200000000340 RDI: 0000000000000014 [ 165.420750][ T7339] RBP: 00007fc8f9d90090 R08: 0000000000000000 R09: 0000000000000000 [ 165.428715][ T7339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.436682][ T7339] R13: 00007fc8f9216038 R14: 00007fc8f9215fa0 R15: 00007fff66791508 [ 165.444658][ T7339] [ 165.500874][ T7341] netlink: 'syz.1.517': attribute type 25 has an invalid length. [ 165.515660][ T7341] netlink: 'syz.1.517': attribute type 29 has an invalid length. [ 165.546181][ T7341] netlink: 5 bytes leftover after parsing attributes in process `syz.1.517'. [ 165.580174][ T7343] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.995303][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 167.490071][ T7377] netlink: 'syz.3.531': attribute type 25 has an invalid length. [ 167.498608][ T7377] netlink: 'syz.3.531': attribute type 29 has an invalid length. [ 167.522927][ T7377] netlink: 5 bytes leftover after parsing attributes in process `syz.3.531'. [ 167.549578][ T7376] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.142814][ T7405] netlink: 164 bytes leftover after parsing attributes in process `syz.2.541'. [ 168.756181][ T7414] FAULT_INJECTION: forcing a failure. [ 168.756181][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 168.773035][ T7414] CPU: 0 PID: 7414 Comm: syz.3.544 Not tainted syzkaller #0 [ 168.780372][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.790446][ T7414] Call Trace: [ 168.793741][ T7414] [ 168.796687][ T7414] dump_stack_lvl+0x18c/0x250 [ 168.801395][ T7414] ? show_regs_print_info+0x20/0x20 [ 168.806618][ T7414] ? load_image+0x420/0x420 [ 168.811158][ T7414] should_fail_ex+0x39d/0x4d0 [ 168.815865][ T7414] should_failslab+0x9/0x20 [ 168.820384][ T7414] slab_pre_alloc_hook+0x59/0x310 [ 168.825422][ T7414] kmem_cache_alloc+0x5a/0x2d0 [ 168.830208][ T7414] ? skb_clone+0x1eb/0x370 [ 168.834648][ T7414] skb_clone+0x1eb/0x370 [ 168.838910][ T7414] __netlink_deliver_tap+0x41c/0x830 [ 168.844224][ T7414] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.849445][ T7414] netlink_deliver_tap+0x19c/0x1b0 [ 168.854584][ T7414] netlink_dump+0x94b/0xe50 [ 168.859117][ T7414] ? netlink_lookup+0x200/0x200 [ 168.864009][ T7414] ? __kasan_kmalloc+0x8f/0xa0 [ 168.868780][ T7414] ? __inet_diag_dump_start+0x886/0x9f0 [ 168.874331][ T7414] ? netlink_lookup+0x30/0x200 [ 168.879110][ T7414] __netlink_dump_start+0x5f1/0x810 [ 168.884323][ T7414] inet_diag_handler_cmd+0x1e1/0x2c0 [ 168.889672][ T7414] ? inet_diag_unregister+0xb0/0xb0 [ 168.894864][ T7414] ? inet_diag_handler_get_info+0x7a0/0x7a0 [ 168.900753][ T7414] ? inet_diag_dump_start+0x20/0x20 [ 168.905944][ T7414] ? inet_diag_dump+0x50/0x50 [ 168.910617][ T7414] ? sock_diag_lock_handler+0x19/0x280 [ 168.916072][ T7414] ? sock_diag_lock_handler+0x19/0x280 [ 168.921528][ T7414] ? inet_diag_unregister+0xb0/0xb0 [ 168.926725][ T7414] sock_diag_rcv_msg+0x3d8/0x600 [ 168.931662][ T7414] netlink_rcv_skb+0x241/0x4d0 [ 168.936421][ T7414] ? sock_diag_bind+0xb0/0xb0 [ 168.941092][ T7414] ? netlink_ack+0x1180/0x1180 [ 168.945868][ T7414] ? __lock_acquire+0x7d40/0x7d40 [ 168.950894][ T7414] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.956092][ T7414] sock_diag_rcv+0x2a/0x40 [ 168.960512][ T7414] netlink_unicast+0x751/0x8d0 [ 168.965283][ T7414] netlink_sendmsg+0x8d0/0xbf0 [ 168.970047][ T7414] ? netlink_getsockopt+0x590/0x590 [ 168.975247][ T7414] ? aa_sock_msg_perm+0x94/0x150 [ 168.980181][ T7414] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 168.985460][ T7414] ? security_socket_sendmsg+0x80/0xa0 [ 168.990911][ T7414] ? netlink_getsockopt+0x590/0x590 [ 168.996393][ T7414] ____sys_sendmsg+0x5ba/0x960 [ 169.001156][ T7414] ? __asan_memset+0x22/0x40 [ 169.005764][ T7414] ? __sys_sendmsg_sock+0x30/0x30 [ 169.010775][ T7414] ? __import_iovec+0x5f2/0x850 [ 169.015620][ T7414] ? import_iovec+0x73/0xa0 [ 169.020116][ T7414] ___sys_sendmsg+0x2a6/0x360 [ 169.024790][ T7414] ? get_pid_task+0x20/0x1e0 [ 169.029551][ T7414] ? __sys_sendmsg+0x2a0/0x2a0 [ 169.034321][ T7414] ? __lock_acquire+0x7d40/0x7d40 [ 169.039354][ T7414] __se_sys_sendmsg+0x1c2/0x2b0 [ 169.044195][ T7414] ? __x64_sys_sendmsg+0x80/0x80 [ 169.049140][ T7414] ? lockdep_hardirqs_on+0x98/0x150 [ 169.054332][ T7414] do_syscall_64+0x55/0xa0 [ 169.058734][ T7414] ? clear_bhb_loop+0x40/0x90 [ 169.063401][ T7414] ? clear_bhb_loop+0x40/0x90 [ 169.068077][ T7414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.073968][ T7414] RIP: 0033:0x7f2c7799c819 [ 169.078373][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.098143][ T7414] RSP: 002b:00007f2c787cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.106546][ T7414] RAX: ffffffffffffffda RBX: 00007f2c77c15fa0 RCX: 00007f2c7799c819 [ 169.114517][ T7414] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.122488][ T7414] RBP: 00007f2c787cc090 R08: 0000000000000000 R09: 0000000000000000 [ 169.130449][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.138409][ T7414] R13: 00007f2c77c16038 R14: 00007f2c77c15fa0 R15: 00007ffcb66f3c98 [ 169.146385][ T7414] [ 169.190764][ T7417] IPv6: Can't replace route, no match found [ 169.222412][ T7417] netlink: 'syz.1.546': attribute type 25 has an invalid length. [ 169.236961][ T7417] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 169.261390][ T7418] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 169.303029][ T7417] netlink: 5 bytes leftover after parsing attributes in process `syz.1.546'. [ 169.995066][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 170.265124][ T7449] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.756392][ T7454] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.774871][ T7454] netlink: 1 bytes leftover after parsing attributes in process `syz.0.561'. [ 170.883546][ T7455] IPv6: Can't replace route, no match found [ 170.894565][ T7455] netlink: 'syz.2.559': attribute type 25 has an invalid length. [ 170.902555][ T7455] netlink: 'syz.2.559': attribute type 29 has an invalid length. [ 170.912698][ T7455] netlink: 5 bytes leftover after parsing attributes in process `syz.2.559'. [ 171.147918][ T7464] netlink: 'syz.2.565': attribute type 7 has an invalid length. [ 171.238045][ T7470] netlink: set zone limit has 8 unknown bytes [ 171.275540][ T7468] IPv6: Can't replace route, no match found [ 171.287995][ T7468] netlink: 'syz.3.567': attribute type 25 has an invalid length. [ 171.298204][ T7468] netlink: 'syz.3.567': attribute type 29 has an invalid length. [ 171.311756][ T7468] netlink: 5 bytes leftover after parsing attributes in process `syz.3.567'. [ 171.783111][ T7479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.570'. [ 171.846810][ T7482] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.571'. [ 171.997979][ T276] wlan1: Trigger new scan to find an IBSS to join [ 173.034537][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 174.032068][ T7495] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 174.177219][ T7499] IPv6: Can't replace route, no match found [ 174.189976][ T7499] netlink: 'syz.2.579': attribute type 25 has an invalid length. [ 174.198068][ T7499] netlink: 'syz.2.579': attribute type 29 has an invalid length. [ 174.200409][ T7502] netlink: set zone limit has 8 unknown bytes [ 174.224286][ T7499] netlink: 5 bytes leftover after parsing attributes in process `syz.2.579'. [ 176.014726][ T3468] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 176.486521][ T7527] netlink: set zone limit has 8 unknown bytes [ 176.736567][ T7529] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.755092][ T7531] IPv6: Can't replace route, no match found [ 176.765806][ T7531] netlink: 'syz.2.591': attribute type 25 has an invalid length. [ 176.774065][ T7531] netlink: 'syz.2.591': attribute type 29 has an invalid length. [ 176.783925][ T7531] netlink: 5 bytes leftover after parsing attributes in process `syz.2.591'. [ 177.502218][ T7554] netlink: set zone limit has 8 unknown bytes [ 177.994006][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 179.187421][ T7569] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 179.251524][ T7571] IPv6: Can't replace route, no match found [ 179.268523][ T7571] netlink: 'syz.1.604': attribute type 25 has an invalid length. [ 179.284525][ T7571] netlink: 'syz.1.604': attribute type 29 has an invalid length. [ 179.319990][ T7571] netlink: 5 bytes leftover after parsing attributes in process `syz.1.604'. [ 179.603482][ T7583] netlink: set zone limit has 8 unknown bytes [ 180.800385][ T7597] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.956593][ T7602] IPv6: Can't replace route, no match found [ 180.969359][ T7602] netlink: 'syz.1.616': attribute type 25 has an invalid length. [ 180.978035][ T7602] netlink: 'syz.1.616': attribute type 29 has an invalid length. [ 180.989510][ T7602] netlink: 5 bytes leftover after parsing attributes in process `syz.1.616'. [ 181.033962][ T49] wlan1: Trigger new scan to find an IBSS to join [ 181.035819][ T7605] IPv6: Can't replace route, no match found [ 181.148471][ T7611] netlink: 5 bytes leftover after parsing attributes in process `syz.3.617'. [ 181.157679][ T7605] netlink: 'syz.3.617': attribute type 25 has an invalid length. [ 181.174292][ T7605] netlink: 'syz.3.617': attribute type 29 has an invalid length. [ 181.346176][ T7617] netlink: set zone limit has 8 unknown bytes [ 181.681260][ T7625] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.994129][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 182.600676][ T276] wlan1: Creating new IBSS network, BSSID f2:16:0b:11:ae:51 [ 182.721396][ T7636] IPv6: Can't replace route, no match found [ 182.741521][ T7636] netlink: 'syz.3.630': attribute type 25 has an invalid length. [ 182.784017][ T7636] netlink: 'syz.3.630': attribute type 29 has an invalid length. [ 182.816409][ T7639] IPv6: Can't replace route, no match found [ 182.826676][ T7643] netlink: 5 bytes leftover after parsing attributes in process `syz.3.630'. [ 182.849422][ T7639] netlink: 'syz.2.629': attribute type 25 has an invalid length. [ 182.862009][ T7639] netlink: 'syz.2.629': attribute type 29 has an invalid length. [ 182.874648][ T7639] netlink: 5 bytes leftover after parsing attributes in process `syz.2.629'. [ 183.051047][ T7652] netlink: set zone limit has 8 unknown bytes [ 183.564956][ T7660] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.996592][ T7671] IPv6: Can't replace route, no match found [ 184.045308][ T7671] netlink: 5 bytes leftover after parsing attributes in process `syz.0.644'. [ 184.793355][ T7681] netlink: set zone limit has 8 unknown bytes [ 185.034981][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 185.215890][ T7692] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 185.512112][ T7698] IPv6: Can't replace route, no match found [ 185.527486][ T7698] validate_nla: 2 callbacks suppressed [ 185.527531][ T7698] netlink: 'syz.1.655': attribute type 25 has an invalid length. [ 185.544210][ T7698] netlink: 'syz.1.655': attribute type 29 has an invalid length. [ 185.553482][ T7698] netlink: 5 bytes leftover after parsing attributes in process `syz.1.655'. [ 185.705720][ T7705] netlink: set zone limit has 8 unknown bytes [ 186.239667][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 186.245798][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 186.252156][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 186.258696][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 186.641843][ T1131] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 187.278745][ T7722] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.497932][ T7736] netlink: set zone limit has 8 unknown bytes [ 187.635675][ T7738] IPv6: Can't replace route, no match found [ 187.721151][ T7738] netlink: 'syz.0.670': attribute type 25 has an invalid length. [ 187.761898][ T7738] netlink: 'syz.0.670': attribute type 29 has an invalid length. [ 187.789951][ T7743] netlink: 5 bytes leftover after parsing attributes in process `syz.0.670'. [ 189.219455][ T7769] netlink: set zone limit has 8 unknown bytes [ 189.231632][ T7771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.681'. [ 189.341274][ T7774] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.426380][ T7771] netlink: 164 bytes leftover after parsing attributes in process `syz.0.681'. [ 189.538046][ T7780] IPv6: Can't replace route, no match found [ 189.551291][ T7780] netlink: 'syz.1.683': attribute type 25 has an invalid length. [ 189.559884][ T7780] netlink: 'syz.1.683': attribute type 29 has an invalid length. [ 189.584417][ T7780] netlink: 5 bytes leftover after parsing attributes in process `syz.1.683'. [ 189.996235][ T276] wlan1: Trigger new scan to find an IBSS to join [ 190.605953][ T7804] netlink: set zone limit has 8 unknown bytes [ 191.499413][ T7805] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.699857][ T7814] IPv6: Can't replace route, no match found [ 191.744731][ T7814] netlink: 'syz.2.695': attribute type 25 has an invalid length. [ 191.776617][ T7814] netlink: 'syz.2.695': attribute type 29 has an invalid length. [ 191.863141][ T7821] netlink: 5 bytes leftover after parsing attributes in process `syz.2.695'. [ 192.235116][ T7832] netlink: set zone limit has 8 unknown bytes [ 192.438758][ T7835] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.412225][ T7856] IPv6: Can't replace route, no match found [ 193.438176][ T7856] netlink: 'syz.0.710': attribute type 25 has an invalid length. [ 193.446995][ T7856] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 193.457475][ T7856] netlink: 5 bytes leftover after parsing attributes in process `syz.0.710'. [ 193.683374][ T7864] netlink: set zone limit has 8 unknown bytes [ 193.999192][ T49] wlan1: Trigger new scan to find an IBSS to join [ 194.021824][ T7871] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.411177][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.417683][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.962226][ T7888] netlink: set zone limit has 8 unknown bytes [ 195.007095][ T7890] IPv6: Can't replace route, no match found [ 195.033385][ T7890] netlink: 'syz.0.721': attribute type 25 has an invalid length. [ 195.052823][ T7890] netlink: 'syz.0.721': attribute type 29 has an invalid length. [ 195.054585][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 195.100640][ T7890] netlink: 5 bytes leftover after parsing attributes in process `syz.0.721'. [ 195.715019][ T7905] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 197.234875][ T7911] netlink: 'syz.3.730': attribute type 10 has an invalid length. [ 197.257132][ T7911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.730'. [ 197.285200][ T7911] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 197.292368][ T7911] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.301635][ T7926] netlink: set zone limit has 8 unknown bytes [ 197.322728][ T7911] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 197.446529][ T7928] IPv6: Can't replace route, no match found [ 197.488895][ T7928] netlink: 'syz.2.735': attribute type 25 has an invalid length. [ 197.501033][ T7928] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 197.517789][ T7928] netlink: 5 bytes leftover after parsing attributes in process `syz.2.735'. [ 197.808410][ T7936] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.004418][ T49] wlan1: Trigger new scan to find an IBSS to join [ 198.189572][ T7951] netlink: set zone limit has 8 unknown bytes [ 198.955808][ T7960] IPv6: Can't replace route, no match found [ 198.985977][ T7960] netlink: 'syz.1.747': attribute type 25 has an invalid length. [ 198.994109][ T7960] netlink: 'syz.1.747': attribute type 29 has an invalid length. [ 199.002785][ T7960] netlink: 5 bytes leftover after parsing attributes in process `syz.1.747'. [ 199.296907][ T7968] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.993893][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 199.994118][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 200.029122][ T7984] netlink: set zone limit has 8 unknown bytes [ 200.958304][ T49] wlan1: Trigger new scan to find an IBSS to join [ 200.992188][ T42] wlan1: Creating new IBSS network, BSSID 42:8d:68:04:22:e1 [ 201.296435][ T7996] IPv6: Can't replace route, no match found [ 201.310831][ T7996] netlink: 'syz.1.761': attribute type 25 has an invalid length. [ 201.320770][ T7996] netlink: 'syz.1.761': attribute type 29 has an invalid length. [ 201.331771][ T7996] netlink: 5 bytes leftover after parsing attributes in process `syz.1.761'. [ 201.503643][ T7999] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 201.929517][ T1131] wlan1: Creating new IBSS network, BSSID 4e:19:b2:8e:b9:28 [ 201.950304][ T8012] netlink: set zone limit has 8 unknown bytes [ 202.504208][ T8026] IPv6: Can't replace route, no match found [ 202.514346][ T8026] netlink: 'syz.1.772': attribute type 25 has an invalid length. [ 202.522407][ T8026] netlink: 'syz.1.772': attribute type 29 has an invalid length. [ 202.532998][ T8026] netlink: 5 bytes leftover after parsing attributes in process `syz.1.772'. [ 203.637587][ T8030] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.928260][ T8044] netlink: set zone limit has 8 unknown bytes [ 204.436954][ T8050] IPv6: Can't replace route, no match found [ 204.443178][ T8054] netlink: 'syz.0.783': attribute type 25 has an invalid length. [ 204.461750][ T8054] netlink: 'syz.0.783': attribute type 29 has an invalid length. [ 204.509772][ T8055] netlink: 5 bytes leftover after parsing attributes in process `syz.0.783'. [ 204.955022][ T276] wlan1: Trigger new scan to find an IBSS to join [ 205.443549][ T8074] netlink: 'syz.1.785': attribute type 10 has an invalid length. [ 205.465232][ T8074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.785'. [ 205.488651][ T8074] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 205.506393][ T8074] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.551291][ T8074] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 205.732199][ T8080] netlink: set zone limit has 8 unknown bytes [ 205.752678][ T8076] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 205.923357][ T1131] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 205.998832][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 206.245030][ T8093] IPv6: Can't replace route, no match found [ 206.442717][ T8093] netlink: 'syz.0.796': attribute type 25 has an invalid length. [ 206.454699][ T8093] netlink: 'syz.0.796': attribute type 29 has an invalid length. [ 206.496775][ T8100] netlink: 5 bytes leftover after parsing attributes in process `syz.0.796'. [ 206.803577][ T8116] netlink: set zone limit has 8 unknown bytes [ 207.692303][ T8119] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.372411][ T8137] netlink: set zone limit has 8 unknown bytes [ 208.602912][ T8139] IPv6: Can't replace route, no match found [ 208.715108][ T8139] netlink: 'syz.1.812': attribute type 25 has an invalid length. [ 208.751546][ T8139] netlink: 'syz.1.812': attribute type 29 has an invalid length. [ 209.804181][ T8141] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.828158][ T8145] netlink: 5 bytes leftover after parsing attributes in process `syz.1.812'. [ 210.035194][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 210.682178][ T8166] netlink: set zone limit has 8 unknown bytes [ 211.114703][ T42] wlan1: Creating new IBSS network, BSSID d6:c6:d3:77:e5:1b [ 211.327931][ T8182] IPv6: Can't replace route, no match found [ 212.517879][ T8185] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.535920][ T8182] netlink: 'syz.2.827': attribute type 25 has an invalid length. [ 212.545679][ T8182] netlink: 'syz.2.827': attribute type 29 has an invalid length. [ 212.559465][ T8188] netlink: 5 bytes leftover after parsing attributes in process `syz.2.827'. [ 212.789045][ T8195] netlink: set zone limit has 8 unknown bytes [ 213.384782][ T8210] FAULT_INJECTION: forcing a failure. [ 213.384782][ T8210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.436220][ T8210] CPU: 0 PID: 8210 Comm: syz.0.836 Not tainted syzkaller #0 [ 213.443559][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.453615][ T8210] Call Trace: [ 213.456893][ T8210] [ 213.459836][ T8210] dump_stack_lvl+0x18c/0x250 [ 213.464536][ T8210] ? show_regs_print_info+0x20/0x20 [ 213.469750][ T8210] ? load_image+0x420/0x420 [ 213.474280][ T8210] ? __lock_acquire+0x7d40/0x7d40 [ 213.479319][ T8210] ? snprintf+0xe9/0x140 [ 213.483584][ T8210] should_fail_ex+0x39d/0x4d0 [ 213.488289][ T8210] _copy_to_user+0x2f/0xa0 [ 213.492723][ T8210] simple_read_from_buffer+0xe7/0x150 [ 213.498123][ T8210] proc_fail_nth_read+0x1e8/0x260 [ 213.503171][ T8210] ? proc_fault_inject_write+0x360/0x360 [ 213.508840][ T8210] ? fsnotify_perm+0x271/0x5e0 [ 213.513630][ T8210] ? proc_fault_inject_write+0x360/0x360 [ 213.519288][ T8210] vfs_read+0x28b/0x970 [ 213.523478][ T8210] ? kernel_read+0x1e0/0x1e0 [ 213.528090][ T8210] ? __fget_files+0x28/0x4b0 [ 213.532700][ T8210] ? __fget_files+0x28/0x4b0 [ 213.537405][ T8210] ? __fget_files+0x43d/0x4b0 [ 213.542104][ T8210] ? __fdget_pos+0x2a3/0x330 [ 213.546699][ T8210] ? ksys_read+0x75/0x260 [ 213.551037][ T8210] ksys_read+0x150/0x260 [ 213.555279][ T8210] ? vfs_write+0x990/0x990 [ 213.559694][ T8210] ? lockdep_hardirqs_on+0x98/0x150 [ 213.564902][ T8210] do_syscall_64+0x55/0xa0 [ 213.569317][ T8210] ? clear_bhb_loop+0x40/0x90 [ 213.573992][ T8210] ? clear_bhb_loop+0x40/0x90 [ 213.578660][ T8210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.584548][ T8210] RIP: 0033:0x7fa637f5d04e [ 213.588956][ T8210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.608559][ T8210] RSP: 002b:00007fa638e11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.617052][ T8210] RAX: ffffffffffffffda RBX: 00007fa638e126c0 RCX: 00007fa637f5d04e [ 213.625012][ T8210] RDX: 000000000000000f RSI: 00007fa638e120a0 RDI: 000000000000000b [ 213.632971][ T8210] RBP: 00007fa638e12090 R08: 0000000000000000 R09: 0000000000000000 [ 213.640939][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.648902][ T8210] R13: 00007fa638216038 R14: 00007fa638215fa0 R15: 00007ffecec53e38 [ 213.656879][ T8210] [ 213.742014][ T8213] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.849176][ T8215] IPv6: Can't replace route, no match found [ 213.988123][ T8215] netlink: 'syz.1.839': attribute type 25 has an invalid length. [ 214.029127][ T8215] netlink: 'syz.1.839': attribute type 29 has an invalid length. [ 214.055298][ T8219] netlink: 5 bytes leftover after parsing attributes in process `syz.1.839'. [ 214.965309][ T49] wlan1: Trigger new scan to find an IBSS to join [ 215.022465][ T8226] netlink: set zone limit has 8 unknown bytes [ 215.670128][ T8242] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 215.891197][ T8253] netlink: set zone limit has 8 unknown bytes [ 215.953367][ T8256] IPv6: Can't replace route, no match found [ 215.977426][ T8256] netlink: 'syz.2.854': attribute type 25 has an invalid length. [ 216.062915][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 216.063252][ T8256] netlink: 'syz.2.854': attribute type 29 has an invalid length. [ 216.090787][ T8258] netlink: 5 bytes leftover after parsing attributes in process `syz.2.854'. [ 217.615789][ T8279] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 217.678820][ T8281] netlink: set zone limit has 8 unknown bytes [ 217.999586][ T49] wlan1: Trigger new scan to find an IBSS to join [ 219.154610][ T8296] IPv6: Can't replace route, no match found [ 219.181194][ T8298] netlink: 'syz.1.870': attribute type 25 has an invalid length. [ 219.189574][ T8298] netlink: 'syz.1.870': attribute type 29 has an invalid length. [ 219.200556][ T8299] netlink: 5 bytes leftover after parsing attributes in process `syz.1.870'. [ 219.638261][ T8309] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 219.651997][ T8311] netlink: set zone limit has 8 unknown bytes [ 220.012126][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 220.783279][ T8326] IPv6: Can't replace route, no match found [ 220.801480][ T8329] netlink: 'syz.3.882': attribute type 25 has an invalid length. [ 220.879605][ T8329] netlink: 'syz.3.882': attribute type 29 has an invalid length. [ 220.894312][ T8330] netlink: 5 bytes leftover after parsing attributes in process `syz.3.882'. [ 221.220713][ T8339] netlink: set zone limit has 8 unknown bytes [ 221.397674][ T8341] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 222.009884][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 222.218489][ T8356] IPv6: Can't replace route, no match found [ 222.798432][ T8360] netlink: 'syz.3.893': attribute type 25 has an invalid length. [ 222.808811][ T8360] netlink: 'syz.3.893': attribute type 29 has an invalid length. [ 222.817348][ T8362] netlink: 5 bytes leftover after parsing attributes in process `syz.3.893'. [ 222.958154][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 223.098913][ T8371] netlink: set zone limit has 8 unknown bytes [ 223.756608][ T8380] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 224.119289][ T8390] IPv6: Can't replace route, no match found [ 224.179185][ T8390] netlink: 'syz.2.905': attribute type 25 has an invalid length. [ 224.191811][ T8390] netlink: 'syz.2.905': attribute type 29 has an invalid length. [ 224.247171][ T8390] netlink: 5 bytes leftover after parsing attributes in process `syz.2.905'. [ 225.042582][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 225.560291][ T8404] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.994627][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 226.001181][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 226.117708][ T8426] IPv6: Can't replace route, no match found [ 226.135571][ T8426] netlink: 'syz.0.917': attribute type 25 has an invalid length. [ 226.143541][ T8426] netlink: 'syz.0.917': attribute type 29 has an invalid length. [ 226.177063][ T8426] netlink: 5 bytes leftover after parsing attributes in process `syz.0.917'. [ 226.877185][ T8436] FAULT_INJECTION: forcing a failure. [ 226.877185][ T8436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.934309][ T8436] CPU: 0 PID: 8436 Comm: syz.0.921 Not tainted syzkaller #0 [ 226.941661][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.951740][ T8436] Call Trace: [ 226.955041][ T8436] [ 226.957987][ T8436] dump_stack_lvl+0x18c/0x250 [ 226.962694][ T8436] ? show_regs_print_info+0x20/0x20 [ 226.967921][ T8436] ? load_image+0x420/0x420 [ 226.972449][ T8436] ? __might_fault+0xaa/0x120 [ 226.977258][ T8436] ? __lock_acquire+0x7d40/0x7d40 [ 226.982308][ T8436] should_fail_ex+0x39d/0x4d0 [ 226.987100][ T8436] _copy_from_user+0x2f/0xe0 [ 226.991715][ T8436] __sys_bpf+0x23e/0x890 [ 226.995984][ T8436] ? bpf_link_show_fdinfo+0x390/0x390 [ 227.001391][ T8436] ? lock_chain_count+0x20/0x20 [ 227.006269][ T8436] __x64_sys_bpf+0x7c/0x90 [ 227.010703][ T8436] do_syscall_64+0x55/0xa0 [ 227.015133][ T8436] ? clear_bhb_loop+0x40/0x90 [ 227.019831][ T8436] ? clear_bhb_loop+0x40/0x90 [ 227.024524][ T8436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.030416][ T8436] RIP: 0033:0x7fa637f9c819 [ 227.034826][ T8436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.054425][ T8436] RSP: 002b:00007fa638e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.062828][ T8436] RAX: ffffffffffffffda RBX: 00007fa638215fa0 RCX: 00007fa637f9c819 [ 227.070786][ T8436] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000002 [ 227.078743][ T8436] RBP: 00007fa638e12090 R08: 0000000000000000 R09: 0000000000000000 [ 227.086705][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.094665][ T8436] R13: 00007fa638216038 R14: 00007fa638215fa0 R15: 00007ffecec53e38 [ 227.102633][ T8436] [ 227.123967][ T1131] wlan1: Creating new IBSS network, BSSID c2:ff:dd:ca:14:11 [ 227.382688][ T8445] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.839123][ T8459] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.928'. [ 229.717317][ T8468] IPv6: Can't replace route, no match found [ 229.723599][ T8472] netlink: 'syz.1.930': attribute type 25 has an invalid length. [ 229.731449][ T8472] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 229.744765][ T8476] netlink: 5 bytes leftover after parsing attributes in process `syz.1.930'. [ 229.906689][ T8482] netlink: 14 bytes leftover after parsing attributes in process `syz.3.934'. [ 229.994276][ T49] wlan1: Trigger new scan to find an IBSS to join [ 230.141497][ T8488] netlink: 184 bytes leftover after parsing attributes in process `syz.3.936'. [ 230.189217][ T8488] netlink: 'syz.3.936': attribute type 10 has an invalid length. [ 230.197955][ T8488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.936'. [ 230.208084][ T8488] batadv0: entered promiscuous mode [ 230.213481][ T8488] batadv0: entered allmulticast mode [ 230.236538][ T8488] bridge0: port 3(batadv0) entered blocking state [ 230.244516][ T8488] bridge0: port 3(batadv0) entered disabled state [ 230.278206][ T8488] bridge0: port 3(batadv0) entered blocking state [ 230.285269][ T8488] bridge0: port 3(batadv0) entered forwarding state [ 230.441565][ T8492] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 230.544711][ T8498] IPv6: Can't replace route, no match found [ 230.580629][ T8498] netlink: 'syz.0.941': attribute type 25 has an invalid length. [ 230.617053][ T8498] netlink: 'syz.0.941': attribute type 29 has an invalid length. [ 230.655586][ T8505] netlink: 5 bytes leftover after parsing attributes in process `syz.0.941'. [ 230.707636][ T3468] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 230.717654][ T3468] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 230.953824][ T276] wlan1: Trigger new scan to find an IBSS to join [ 232.624993][ T42] wlan1: Creating new IBSS network, BSSID d2:5f:45:b2:3a:f8 [ 232.863936][ T8528] -1: renamed from syzkaller0 [ 233.214549][ T8533] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 233.397283][ T8540] IPv6: Can't replace route, no match found [ 233.449008][ T8540] netlink: 'syz.0.953': attribute type 25 has an invalid length. [ 233.470028][ T8540] netlink: 'syz.0.953': attribute type 29 has an invalid length. [ 233.487834][ T8541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.954'. [ 233.508916][ T8540] netlink: 5 bytes leftover after parsing attributes in process `syz.0.953'. [ 233.522489][ T8541] netlink: 'syz.3.954': attribute type 39 has an invalid length. [ 233.995846][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 233.997908][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 235.505204][ T8572] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.649102][ T8575] IPv6: Can't replace route, no match found [ 235.682880][ T8575] netlink: 'syz.3.965': attribute type 25 has an invalid length. [ 235.703888][ T8575] netlink: 'syz.3.965': attribute type 29 has an invalid length. [ 235.725262][ T8575] netlink: 5 bytes leftover after parsing attributes in process `syz.3.965'. [ 237.036993][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 237.996724][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 238.003357][ T49] wlan1: Trigger new scan to find an IBSS to join [ 238.539180][ T8606] -1: renamed from syzkaller0 [ 238.549977][ T8611] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 238.739525][ T8617] IPv6: Can't replace route, no match found [ 238.756982][ T8617] netlink: 'syz.3.978': attribute type 25 has an invalid length. [ 238.766658][ T8617] netlink: 'syz.3.978': attribute type 29 has an invalid length. [ 238.782629][ T8617] netlink: 5 bytes leftover after parsing attributes in process `syz.3.978'. [ 238.984957][ T3509] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 239.756648][ T8639] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.986'. [ 239.816075][ T8639] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.986'. [ 239.852329][ T8639] tc_dump_action: action bad kind [ 240.586563][ T8648] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.988'. [ 240.597846][ T8648] bridge_slave_1: default FDB implementation only supports local addresses [ 240.689443][ T8649] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 240.810997][ T8653] IPv6: Can't replace route, no match found [ 240.841633][ T8653] netlink: 'syz.3.990': attribute type 25 has an invalid length. [ 240.851472][ T8653] netlink: 'syz.3.990': attribute type 29 has an invalid length. [ 240.870887][ T8653] netlink: 5 bytes leftover after parsing attributes in process `syz.3.990'. [ 240.961728][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 241.456613][ T8672] FAULT_INJECTION: forcing a failure. [ 241.456613][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 241.473139][ T8672] CPU: 0 PID: 8672 Comm: syz.1.997 Not tainted syzkaller #0 [ 241.480472][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.490558][ T8672] Call Trace: [ 241.493864][ T8672] [ 241.496820][ T8672] dump_stack_lvl+0x18c/0x250 [ 241.501536][ T8672] ? show_regs_print_info+0x20/0x20 [ 241.506772][ T8672] ? load_image+0x420/0x420 [ 241.511319][ T8672] ? __might_sleep+0xe0/0xe0 [ 241.515943][ T8672] ? __lock_acquire+0x7d40/0x7d40 [ 241.521007][ T8672] should_fail_ex+0x39d/0x4d0 [ 241.525727][ T8672] should_failslab+0x9/0x20 [ 241.530256][ T8672] slab_pre_alloc_hook+0x59/0x310 [ 241.535293][ T8672] ? __get_vm_area_node+0x125/0x370 [ 241.540493][ T8672] __kmem_cache_alloc_node+0x53/0x250 [ 241.545870][ T8672] ? __get_vm_area_node+0x125/0x370 [ 241.551071][ T8672] kmalloc_node_trace+0x26/0xe0 [ 241.555933][ T8672] __get_vm_area_node+0x125/0x370 [ 241.560971][ T8672] __vmalloc_node_range+0x36e/0x1330 [ 241.566267][ T8672] ? netlink_sendmsg+0x602/0xbf0 [ 241.571206][ T8672] ? netlink_insert+0x109f/0x13a0 [ 241.576257][ T8672] ? netlink_data_ready+0x10/0x10 [ 241.581286][ T8672] ? free_vm_area+0x50/0x50 [ 241.585807][ T8672] ? netlink_sendmsg+0x602/0xbf0 [ 241.590746][ T8672] vmalloc+0x79/0x90 [ 241.594646][ T8672] ? netlink_sendmsg+0x602/0xbf0 [ 241.599583][ T8672] netlink_sendmsg+0x602/0xbf0 [ 241.604348][ T8672] ? perf_trace_lock+0x304/0x3b0 [ 241.609293][ T8672] ? netlink_getsockopt+0x590/0x590 [ 241.614501][ T8672] ? aa_sock_msg_perm+0x94/0x150 [ 241.619439][ T8672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.624722][ T8672] ? security_socket_sendmsg+0x80/0xa0 [ 241.630179][ T8672] ? netlink_getsockopt+0x590/0x590 [ 241.635386][ T8672] ____sys_sendmsg+0x5ba/0x960 [ 241.640158][ T8672] ? __asan_memset+0x22/0x40 [ 241.644751][ T8672] ? __sys_sendmsg_sock+0x30/0x30 [ 241.649769][ T8672] ? __import_iovec+0x5f2/0x850 [ 241.654630][ T8672] ? import_iovec+0x73/0xa0 [ 241.659134][ T8672] ___sys_sendmsg+0x2a6/0x360 [ 241.663817][ T8672] ? __sys_sendmsg+0x2a0/0x2a0 [ 241.668606][ T8672] ? __lock_acquire+0x7d40/0x7d40 [ 241.673666][ T8672] __se_sys_sendmsg+0x1c2/0x2b0 [ 241.678529][ T8672] ? __x64_sys_sendmsg+0x80/0x80 [ 241.683484][ T8672] ? lockdep_hardirqs_on+0x98/0x150 [ 241.688694][ T8672] do_syscall_64+0x55/0xa0 [ 241.693107][ T8672] ? clear_bhb_loop+0x40/0x90 [ 241.697804][ T8672] ? clear_bhb_loop+0x40/0x90 [ 241.702491][ T8672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.708382][ T8672] RIP: 0033:0x7f14b479c819 [ 241.712793][ T8672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.732396][ T8672] RSP: 002b:00007f14b55c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.740812][ T8672] RAX: ffffffffffffffda RBX: 00007f14b4a15fa0 RCX: 00007f14b479c819 [ 241.748784][ T8672] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 241.756751][ T8672] RBP: 00007f14b55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 241.764728][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.772693][ T8672] R13: 00007f14b4a16038 R14: 00007f14b4a15fa0 R15: 00007ffe0080ada8 [ 241.780687][ T8672] [ 241.797521][ T8672] syz.1.997: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 241.817040][ T8672] CPU: 0 PID: 8672 Comm: syz.1.997 Not tainted syzkaller #0 [ 241.824385][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.834473][ T8672] Call Trace: [ 241.837785][ T8672] [ 241.840750][ T8672] dump_stack_lvl+0x18c/0x250 [ 241.845470][ T8672] ? show_regs_print_info+0x20/0x20 [ 241.850714][ T8672] ? load_image+0x420/0x420 [ 241.855261][ T8672] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.861711][ T8672] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 241.868247][ T8672] warn_alloc+0x246/0x340 [ 241.872610][ T8672] ? __get_vm_area_node+0x125/0x370 [ 241.877847][ T8672] ? zone_watermark_ok_safe+0x230/0x230 [ 241.883403][ T8672] ? rcu_is_watching+0x15/0xb0 [ 241.888184][ T8672] ? __get_vm_area_node+0x356/0x370 [ 241.893397][ T8672] __vmalloc_node_range+0x393/0x1330 [ 241.898680][ T8672] ? netlink_insert+0x109f/0x13a0 [ 241.903737][ T8672] ? netlink_data_ready+0x10/0x10 [ 241.908765][ T8672] ? free_vm_area+0x50/0x50 [ 241.913282][ T8672] ? netlink_sendmsg+0x602/0xbf0 [ 241.918219][ T8672] vmalloc+0x79/0x90 [ 241.922113][ T8672] ? netlink_sendmsg+0x602/0xbf0 [ 241.927053][ T8672] netlink_sendmsg+0x602/0xbf0 [ 241.931826][ T8672] ? perf_trace_lock+0x304/0x3b0 [ 241.936772][ T8672] ? netlink_getsockopt+0x590/0x590 [ 241.941973][ T8672] ? aa_sock_msg_perm+0x94/0x150 [ 241.946913][ T8672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.952283][ T8672] ? security_socket_sendmsg+0x80/0xa0 [ 241.957737][ T8672] ? netlink_getsockopt+0x590/0x590 [ 241.962941][ T8672] ____sys_sendmsg+0x5ba/0x960 [ 241.967712][ T8672] ? __asan_memset+0x22/0x40 [ 241.972299][ T8672] ? __sys_sendmsg_sock+0x30/0x30 [ 241.977316][ T8672] ? __import_iovec+0x5f2/0x850 [ 241.982176][ T8672] ? import_iovec+0x73/0xa0 [ 241.986686][ T8672] ___sys_sendmsg+0x2a6/0x360 [ 241.991368][ T8672] ? __sys_sendmsg+0x2a0/0x2a0 [ 241.996161][ T8672] ? __lock_acquire+0x7d40/0x7d40 [ 242.001219][ T8672] __se_sys_sendmsg+0x1c2/0x2b0 [ 242.006081][ T8672] ? __x64_sys_sendmsg+0x80/0x80 [ 242.011040][ T8672] ? lockdep_hardirqs_on+0x98/0x150 [ 242.016242][ T8672] do_syscall_64+0x55/0xa0 [ 242.020652][ T8672] ? clear_bhb_loop+0x40/0x90 [ 242.025327][ T8672] ? clear_bhb_loop+0x40/0x90 [ 242.030007][ T8672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.035897][ T8672] RIP: 0033:0x7f14b479c819 [ 242.040309][ T8672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.059915][ T8672] RSP: 002b:00007f14b55c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.068330][ T8672] RAX: ffffffffffffffda RBX: 00007f14b4a15fa0 RCX: 00007f14b479c819 [ 242.076301][ T8672] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 242.084267][ T8672] RBP: 00007f14b55c2090 R08: 0000000000000000 R09: 0000000000000000 [ 242.092239][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.100208][ T8672] R13: 00007f14b4a16038 R14: 00007f14b4a15fa0 R15: 00007ffe0080ada8 [ 242.108202][ T8672] [ 242.122699][ T8672] Mem-Info: [ 242.130882][ T8672] active_anon:5627 inactive_anon:0 isolated_anon:0 [ 242.130882][ T8672] active_file:11852 inactive_file:39997 isolated_file:0 [ 242.130882][ T8672] unevictable:768 dirty:25 writeback:0 [ 242.130882][ T8672] slab_reclaimable:10131 slab_unreclaimable:93080 [ 242.130882][ T8672] mapped:25115 shmem:1361 pagetables:602 [ 242.130882][ T8672] sec_pagetables:0 bounce:0 [ 242.130882][ T8672] kernel_misc_reclaimable:0 [ 242.130882][ T8672] free:1353323 free_pcp:9677 free_cma:0 [ 242.186158][ T8672] Node 0 active_anon:22540kB inactive_anon:0kB active_file:47408kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100528kB dirty:92kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10588kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no [ 242.226968][ T8672] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 242.263074][ T8672] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.322536][ T8672] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 242.330953][ T8672] Node 0 DMA32 free:1508216kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22404kB inactive_anon:0kB active_file:47408kB inactive_file:158956kB unevictable:1536kB writepending:92kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:18504kB local_pcp:7296kB free_cma:0kB [ 242.366580][ T8672] lowmem_reserve[]: 0 0 0 0 0 [ 242.383963][ T8672] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.430151][ T8672] lowmem_reserve[]: 0 0 0 0 0 [ 242.435234][ T8672] Node 1 Normal free:3889712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21056kB local_pcp:11200kB free_cma:0kB [ 242.482855][ T8672] lowmem_reserve[]: 0 0 0 0 0 [ 242.488200][ T8672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.505494][ T8672] Node 0 DMA32: 790*4kB (UME) 724*8kB (UME) 738*16kB (UME) 741*32kB (UME) 389*64kB (UME) 11*128kB (UM) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UM) 5*2048kB (UME) 347*4096kB (M) = 1508216kB [ 242.524675][ T8672] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 242.538333][ T8672] Node 1 Normal: 208*4kB (UME) 40*8kB (UME) 31*16kB (UME) 72*32kB (UME) 29*64kB (UME) 9*128kB (UME) 3*256kB (UME) 0*512kB 1*1024kB (E) 1*2048kB (E) 947*4096kB (UM) = 3889712kB [ 242.561369][ T8672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.573031][ T8672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.587093][ T8672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.601051][ T8672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.615220][ T8672] 53210 total pagecache pages [ 242.620168][ T8672] 0 pages in swap cache [ 242.628073][ T8672] Free swap = 124996kB [ 242.632349][ T8672] Total swap = 124996kB [ 242.638407][ T8672] 2097051 pages RAM [ 242.642332][ T8672] 0 pages HighMem/MovableOnly [ 242.650742][ T8672] 416926 pages reserved [ 242.656413][ T8672] 0 pages cma reserved [ 242.953850][ T42] wlan1: Trigger new scan to find an IBSS to join [ 243.047835][ T42] wlan1: Trigger new scan to find an IBSS to join [ 243.921387][ T8684] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 243.988187][ T49] wlan1: Creating new IBSS network, BSSID ee:d7:02:0f:a4:71 [ 244.056854][ T8696] IPv6: Can't replace route, no match found [ 244.088389][ T8696] netlink: 'syz.0.1004': attribute type 25 has an invalid length. [ 244.096740][ T8696] netlink: 'syz.0.1004': attribute type 29 has an invalid length. [ 244.124019][ T8696] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1004'. [ 244.370429][ T8705] hsr_slave_0: left promiscuous mode [ 244.381154][ T8705] hsr_slave_1: left promiscuous mode [ 244.525455][ T8711] FAULT_INJECTION: forcing a failure. [ 244.525455][ T8711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.573555][ T8711] CPU: 1 PID: 8711 Comm: syz.1.1010 Not tainted syzkaller #0 [ 244.581003][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.591178][ T8711] Call Trace: [ 244.594492][ T8711] [ 244.597450][ T8711] dump_stack_lvl+0x18c/0x250 [ 244.602179][ T8711] ? show_regs_print_info+0x20/0x20 [ 244.607421][ T8711] ? load_image+0x420/0x420 [ 244.611970][ T8711] ? __lock_acquire+0x7d40/0x7d40 [ 244.617027][ T8711] ? aa_sk_perm+0x970/0x970 [ 244.621582][ T8711] should_fail_ex+0x39d/0x4d0 [ 244.626315][ T8711] _copy_from_user+0x2f/0xe0 [ 244.630946][ T8711] copy_from_sockptr+0x69/0x80 [ 244.635753][ T8711] packet_setsockopt+0xbff/0x1500 [ 244.640827][ T8711] ? packet_ioctl+0x340/0x340 [ 244.645576][ T8711] ? aa_sk_perm+0x83c/0x970 [ 244.650129][ T8711] ? __fget_files+0x28/0x4b0 [ 244.654781][ T8711] ? aa_af_perm+0x330/0x330 [ 244.659356][ T8711] ? __fget_files+0x28/0x4b0 [ 244.663973][ T8711] ? __fget_files+0x28/0x4b0 [ 244.668600][ T8711] ? aa_sock_opt_perm+0x74/0x100 [ 244.673681][ T8711] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 244.679247][ T8711] ? security_socket_setsockopt+0x7e/0xa0 [ 244.684976][ T8711] ? packet_ioctl+0x340/0x340 [ 244.689673][ T8711] do_sock_setsockopt+0x175/0x1a0 [ 244.694714][ T8711] ? __fdget+0x180/0x210 [ 244.698973][ T8711] __x64_sys_setsockopt+0x182/0x200 [ 244.704275][ T8711] do_syscall_64+0x55/0xa0 [ 244.708693][ T8711] ? clear_bhb_loop+0x40/0x90 [ 244.713546][ T8711] ? clear_bhb_loop+0x40/0x90 [ 244.718234][ T8711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.724136][ T8711] RIP: 0033:0x7f14b479c819 [ 244.728558][ T8711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.748166][ T8711] RSP: 002b:00007f14b55c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 244.756593][ T8711] RAX: ffffffffffffffda RBX: 00007f14b4a15fa0 RCX: 00007f14b479c819 [ 244.764573][ T8711] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005 [ 244.772605][ T8711] RBP: 00007f14b55c2090 R08: 0000000000000004 R09: 0000000000000000 [ 244.780759][ T8711] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 244.788737][ T8711] R13: 00007f14b4a16038 R14: 00007f14b4a15fa0 R15: 00007ffe0080ada8 [ 244.796756][ T8711] [ 245.871899][ T8727] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 245.997645][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 246.006673][ T49] wlan1: Trigger new scan to find an IBSS to join [ 246.404961][ T8739] IPv6: Can't replace route, no match found [ 246.452059][ T8739] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1019'. [ 247.019844][ T42] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 248.080174][ T276] wlan1: Trigger new scan to find an IBSS to join [ 249.081849][ T276] wlan1: Trigger new scan to find an IBSS to join [ 250.049430][ T3509] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 250.318194][ T8769] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.409016][ T8777] IPv6: Can't replace route, no match found [ 250.481913][ T8781] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1031'. [ 252.409296][ T8809] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.430035][ T8818] IPv6: Can't replace route, no match found [ 252.460389][ T8820] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1042'. [ 252.743821][ T8828] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1047'. [ 253.034445][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 253.994637][ T42] wlan1: Trigger new scan to find an IBSS to join [ 254.229845][ T8854] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 254.348318][ T8859] IPv6: Can't replace route, no match found [ 254.398782][ T8859] netlink: 'syz.2.1055': attribute type 25 has an invalid length. [ 254.407763][ T8859] netlink: 'syz.2.1055': attribute type 29 has an invalid length. [ 254.510246][ T8867] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.1057'. [ 255.041340][ T276] wlan1: Trigger new scan to find an IBSS to join [ 255.849268][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855659][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.342919][ T8890] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 258.361588][ T8895] IPv6: Can't replace route, no match found [ 258.371885][ T8898] netlink: 'syz.2.1067': attribute type 25 has an invalid length. [ 258.380622][ T8898] netlink: 'syz.2.1067': attribute type 29 has an invalid length. [ 258.667069][ T8910] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1071'. [ 258.760817][ T8910] netlink: 'syz.3.1071': attribute type 10 has an invalid length. [ 258.771265][ T8910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1071'. [ 259.038515][ T3468] wlan1: Trigger new scan to find an IBSS to join [ 259.045176][ T42] wlan1: Trigger new scan to find an IBSS to join [ 259.601206][ T8923] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 260.798949][ T3555] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 260.829192][ T8936] IPv6: Can't replace route, no match found [ 260.894934][ T8942] netlink: 'syz.2.1080': attribute type 25 has an invalid length. [ 260.908875][ T8942] netlink: 'syz.2.1080': attribute type 29 has an invalid length. [ 261.259148][ T8951] FAULT_INJECTION: forcing a failure. [ 261.259148][ T8951] name failslab, interval 1, probability 0, space 0, times 0 [ 261.354171][ T8951] CPU: 1 PID: 8951 Comm: syz.3.1084 Not tainted syzkaller #0 [ 261.361591][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.371668][ T8951] Call Trace: [ 261.374961][ T8951] [ 261.377910][ T8951] dump_stack_lvl+0x18c/0x250 [ 261.382609][ T8951] ? show_regs_print_info+0x20/0x20 [ 261.387833][ T8951] ? load_image+0x420/0x420 [ 261.392370][ T8951] ? __might_sleep+0xe0/0xe0 [ 261.396983][ T8951] ? __lock_acquire+0x7d40/0x7d40 [ 261.402040][ T8951] should_fail_ex+0x39d/0x4d0 [ 261.406745][ T8951] should_failslab+0x9/0x20 [ 261.411272][ T8951] slab_pre_alloc_hook+0x59/0x310 [ 261.416322][ T8951] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 261.421881][ T8951] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 261.427443][ T8951] __kmem_cache_alloc_node+0x53/0x250 [ 261.432844][ T8951] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 261.438404][ T8951] __kmalloc+0xa4/0x230 [ 261.442579][ T8951] bpf_prog_test_run_skb+0x238/0x12b0 [ 261.447965][ T8951] ? __fget_files+0x28/0x4b0 [ 261.452574][ T8951] ? __fget_files+0x28/0x4b0 [ 261.457261][ T8951] ? __fget_files+0x43d/0x4b0 [ 261.461949][ T8951] ? cpu_online+0x60/0x60 [ 261.466273][ T8951] bpf_prog_test_run+0x321/0x390 [ 261.471205][ T8951] __sys_bpf+0x49d/0x890 [ 261.475440][ T8951] ? bpf_link_show_fdinfo+0x390/0x390 [ 261.480812][ T8951] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.487313][ T8951] __x64_sys_bpf+0x7c/0x90 [ 261.491809][ T8951] do_syscall_64+0x55/0xa0 [ 261.496216][ T8951] ? clear_bhb_loop+0x40/0x90 [ 261.500883][ T8951] ? clear_bhb_loop+0x40/0x90 [ 261.505553][ T8951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.511438][ T8951] RIP: 0033:0x7f2c7799c819 [ 261.516018][ T8951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.535618][ T8951] RSP: 002b:00007f2c787cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.544024][ T8951] RAX: ffffffffffffffda RBX: 00007f2c77c15fa0 RCX: 00007f2c7799c819 [ 261.551983][ T8951] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 261.559977][ T8951] RBP: 00007f2c787cc090 R08: 0000000000000000 R09: 0000000000000000 [ 261.568036][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.575995][ T8951] R13: 00007f2c77c16038 R14: 00007f2c77c15fa0 R15: 00007ffcb66f3c98 [ 261.583970][ T8951] [ 261.854084][ T8963] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 261.993947][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 262.054320][ T8966] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 262.969944][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 263.601614][ T8987] IPv6: Can't replace route, no match found [ 263.609511][ T8992] FAULT_INJECTION: forcing a failure. [ 263.609511][ T8992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.620885][ T8987] netlink: 'syz.3.1095': attribute type 25 has an invalid length. [ 263.627905][ T8992] CPU: 1 PID: 8992 Comm: syz.2.1098 Not tainted syzkaller #0 [ 263.637802][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.645637][ T8987] netlink: 'syz.3.1095': attribute type 29 has an invalid length. [ 263.647852][ T8992] Call Trace: [ 263.647863][ T8992] [ 263.647870][ T8992] dump_stack_lvl+0x18c/0x250 [ 263.647903][ T8992] ? show_regs_print_info+0x20/0x20 [ 263.647926][ T8992] ? load_image+0x420/0x420 [ 263.676224][ T8992] ? __might_fault+0xaa/0x120 [ 263.680915][ T8992] ? __lock_acquire+0x7d40/0x7d40 [ 263.685934][ T8992] should_fail_ex+0x39d/0x4d0 [ 263.690614][ T8992] _copy_to_user+0x2f/0xa0 [ 263.695026][ T8992] bpf_verifier_vlog+0x2fa/0x870 [ 263.699968][ T8992] __btf_verifier_log+0xe3/0x140 [ 263.704901][ T8992] ? btf_check_sec_info+0x350/0x350 [ 263.710091][ T8992] ? __lock_acquire+0x7d40/0x7d40 [ 263.715106][ T8992] ? btf_parse_hdr+0x1f5/0x710 [ 263.719860][ T8992] btf_parse_hdr+0x35c/0x710 [ 263.724444][ T8992] btf_new_fd+0x397/0x9f0 [ 263.728772][ T8992] ? bpf_btf_show_fdinfo+0x80/0x80 [ 263.733875][ T8992] ? capable+0x88/0xe0 [ 263.737940][ T8992] __sys_bpf+0x670/0x890 [ 263.742173][ T8992] ? bpf_link_show_fdinfo+0x390/0x390 [ 263.747545][ T8992] ? lock_chain_count+0x20/0x20 [ 263.752390][ T8992] __x64_sys_bpf+0x7c/0x90 [ 263.756796][ T8992] do_syscall_64+0x55/0xa0 [ 263.761199][ T8992] ? clear_bhb_loop+0x40/0x90 [ 263.765864][ T8992] ? clear_bhb_loop+0x40/0x90 [ 263.770532][ T8992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.776439][ T8992] RIP: 0033:0x7fc8f8f9c819 [ 263.780844][ T8992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.800440][ T8992] RSP: 002b:00007fc8f9d90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.808844][ T8992] RAX: ffffffffffffffda RBX: 00007fc8f9215fa0 RCX: 00007fc8f8f9c819 [ 263.816805][ T8992] RDX: 0000000000000028 RSI: 0000200000000600 RDI: 0000000000000012 [ 263.824799][ T8992] RBP: 00007fc8f9d90090 R08: 0000000000000000 R09: 0000000000000000 [ 263.832771][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.840755][ T8992] R13: 00007fc8f9216038 R14: 00007fc8f9215fa0 R15: 00007fff66791508 [ 263.848748][ T8992] [ 263.885288][ T8987] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1095'. [ 264.155022][ T3509] wlan1: Creating new IBSS network, BSSID 72:d6:c0:73:10:55 [ 264.364450][ T8997] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.374235][ T3509] ------------[ cut here ]------------ [ 264.380066][ T3509] WARNING: CPU: 1 PID: 3509 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 264.390381][ T3509] Modules linked in: [ 264.394448][ T3509] CPU: 1 PID: 3509 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 264.402107][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.412396][ T3509] Workqueue: cfg80211 cfg80211_event_work [ 264.418326][ T3509] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 264.424649][ T3509] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 d6 a0 f7 0f 0b eb bb e8 0e d6 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 00 d6 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 264.444325][ T3509] RSP: 0018:ffffc9000dc37a20 EFLAGS: 00010293 [ 264.450410][ T3509] RAX: ffffffff89e64bc2 RBX: dffffc0000000000 RCX: ffff88802e431e00 [ 264.458502][ T3509] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 264.466685][ T3509] RBP: ffffc9000dc37af8 R08: ffffffff911c456f R09: 1ffffffff22388ad [ 264.474826][ T3509] R10: dffffc0000000000 R11: fffffbfff22388ae R12: ffff88805ca9cc90 [ 264.482813][ T3509] R13: 1ffff92001b86f4c R14: ffff88805cae35b8 R15: 000000000000001f [ 264.490909][ T3509] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 264.499881][ T3509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.506514][ T3509] CR2: 0000200000001200 CR3: 000000002ddca000 CR4: 00000000003506e0 [ 264.514557][ T3509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.522548][ T3509] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 264.530589][ T3509] Call Trace: [ 264.533921][ T3509] [ 264.536867][ T3509] ? mutex_lock_nested+0x20/0x20 [ 264.541822][ T3509] ? trace_rdev_return_void+0x1c0/0x1c0 [ 264.547428][ T3509] cfg80211_process_wdev_events+0x3bc/0x550 [ 264.553341][ T3509] cfg80211_process_rdev_events+0xa1/0x110 [ 264.559255][ T3509] cfg80211_event_work+0x2f/0x40 [ 264.564273][ T3509] ? process_scheduled_works+0x96f/0x15d0 [ 264.570017][ T3509] process_scheduled_works+0xa5d/0x15d0 [ 264.575649][ T3509] ? worker_attach_to_pool+0x380/0x380 [ 264.581133][ T3509] ? assign_work+0x3d2/0x5d0 [ 264.585812][ T3509] worker_thread+0xa55/0xfc0 [ 264.590567][ T3509] kthread+0x2fa/0x390 [ 264.594687][ T3509] ? pr_cont_work+0x560/0x560 [ 264.599378][ T3509] ? kthread_blkcg+0xd0/0xd0 [ 264.604047][ T3509] ret_from_fork+0x48/0x80 [ 264.608475][ T3509] ? kthread_blkcg+0xd0/0xd0 [ 264.613058][ T3509] ret_from_fork_asm+0x11/0x20 [ 264.617874][ T3509] [ 264.620906][ T3509] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.628176][ T3509] CPU: 1 PID: 3509 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 264.635800][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.645864][ T3509] Workqueue: cfg80211 cfg80211_event_work [ 264.651581][ T3509] Call Trace: [ 264.654857][ T3509] [ 264.657787][ T3509] dump_stack_lvl+0x18c/0x250 [ 264.662468][ T3509] ? show_regs_print_info+0x20/0x20 [ 264.667674][ T3509] ? load_image+0x420/0x420 [ 264.672185][ T3509] panic+0x2dc/0x730 [ 264.676090][ T3509] ? bpf_jit_dump+0xd0/0xd0 [ 264.680604][ T3509] ? ret_from_fork_asm+0x11/0x20 [ 264.685546][ T3509] __warn+0x2e0/0x470 [ 264.689530][ T3509] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 264.695084][ T3509] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 264.700626][ T3509] report_bug+0x2be/0x4f0 [ 264.704946][ T3509] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 264.710488][ T3509] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 264.716023][ T3509] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 264.721557][ T3509] handle_bug+0xcf/0x120 [ 264.725878][ T3509] exc_invalid_op+0x1a/0x50 [ 264.730370][ T3509] asm_exc_invalid_op+0x1a/0x20 [ 264.735208][ T3509] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 264.741353][ T3509] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 d6 a0 f7 0f 0b eb bb e8 0e d6 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 00 d6 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 264.760954][ T3509] RSP: 0018:ffffc9000dc37a20 EFLAGS: 00010293 [ 264.767011][ T3509] RAX: ffffffff89e64bc2 RBX: dffffc0000000000 RCX: ffff88802e431e00 [ 264.774982][ T3509] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 264.782948][ T3509] RBP: ffffc9000dc37af8 R08: ffffffff911c456f R09: 1ffffffff22388ad [ 264.790907][ T3509] R10: dffffc0000000000 R11: fffffbfff22388ae R12: ffff88805ca9cc90 [ 264.798874][ T3509] R13: 1ffff92001b86f4c R14: ffff88805cae35b8 R15: 000000000000001f [ 264.806843][ T3509] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 264.812385][ T3509] ? mutex_lock_nested+0x20/0x20 [ 264.817323][ T3509] ? trace_rdev_return_void+0x1c0/0x1c0 [ 264.822865][ T3509] cfg80211_process_wdev_events+0x3bc/0x550 [ 264.828755][ T3509] cfg80211_process_rdev_events+0xa1/0x110 [ 264.834551][ T3509] cfg80211_event_work+0x2f/0x40 [ 264.839472][ T3509] ? process_scheduled_works+0x96f/0x15d0 [ 264.845180][ T3509] process_scheduled_works+0xa5d/0x15d0 [ 264.850819][ T3509] ? worker_attach_to_pool+0x380/0x380 [ 264.856269][ T3509] ? assign_work+0x3d2/0x5d0 [ 264.860850][ T3509] worker_thread+0xa55/0xfc0 [ 264.865448][ T3509] kthread+0x2fa/0x390 [ 264.869502][ T3509] ? pr_cont_work+0x560/0x560 [ 264.874166][ T3509] ? kthread_blkcg+0xd0/0xd0 [ 264.878740][ T3509] ret_from_fork+0x48/0x80 [ 264.883145][ T3509] ? kthread_blkcg+0xd0/0xd0 [ 264.887721][ T3509] ret_from_fork_asm+0x11/0x20 [ 264.892485][ T3509] [ 264.895809][ T3509] Kernel Offset: disabled [ 264.900184][ T3509] Rebooting in 86400 seconds..