last executing test programs: 4.579293164s ago: executing program 3 (id=736): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000008000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000081b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.288477261s ago: executing program 3 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000002600)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000002740)=ANY=[@ANYBLOB="9400000000000000000000000700000094040100831f1e6401010200000000ac1e0101e0000002ffffffff7f0000010a010100441cea01e00002020000ffffac1414aa000000050000000000000010890fd40a0101017f000001b9af6533ffffffff01862300000000070e15665b8d97457661ad0531df020f95000000000d32fe66d235bd3a440c6c630a01010200000006019404010000000000001100000000000000290000000800000000000000000000001c0000000000000000000000080000002ad68ba3be59b3c8ef4c652665f7bba72e328d", @ANYRES32=0x0, @ANYBLOB="ffffffffac1414bb00000000"], 0xd0}, 0x8005) socket$kcm(0x11, 0x200000000000003, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0xb101, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000035c0)}, 0x20000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000025c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800, 0x402000a, 0x6, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(0x3) 4.048217786s ago: executing program 2 (id=739): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1, 0x0, 0x4000}, 0x0) 3.87934353s ago: executing program 2 (id=743): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x80, &(0x7f0000000840)=[{0x0, 0x55}, {&(0x7f0000000440)="495bb4d8379fd36a26b300088c007d9f97ce2a31951a49427754a4ca6d692b1d690154ecfbffc95adce65b9dda0ed4864a9b3af06f81c3e2a1927565625326d65e6dbe2ae1f3c5befac6b5bef16dd86ad140f1908b"}, {&(0x7f00000004c0)="26bb7c3986b4e1c1dc15cc4e93f79fe8402e127d168fecc13d872f2bd6c60af82748bd59487a3bae4f325e776b893e29030dcf1794fd7a399566daaeb988177b64a6d4ffa42eebce44690e01f429c89359475d6ef17f"}, {&(0x7f0000000540)="7bccc625b34f5db6e9ff8f54939db292ce4af60317fde51d40dd08fe7aab6669a8939dca89114dc7c4e7ec932acf4a87d3a6fdf27f07ad51b7f6"}, {&(0x7f0000000a80)="4ded0d2fcaf737dc6b1a84101660a7a6301eca15488366bf3dbf255d3979f1e9773c0f327e23de80e195ca15a28cdff44ac6a013baffe234595a2f748622ad7013e3448743eec8fb0983febecf12c5e0c0c531b1c081fd65eb5c4bbcc1a1b607bf7d0621f932a3351a9f062d44631dd4f745e84e8bfd69772ed876b890a6e7dac164007f956bd069f92835af21326946c492df50c6b9dc9ca80420e33b3c89f888c9002338cf4f3bcfb88bc6ab71d9db167058f323ce895da1a7d04f69"}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec76064bef2f000000fb71caef932f3889d1fdda5b57000000860f5878437ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110700000094412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8, 0x11000000}, 0xff00) 3.655358265s ago: executing program 2 (id=744): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000005c0)=""/96, 0x60, 0x0, &(0x7f0000000680)=""/147, 0x93}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, @perf_bp={0x0, 0x1}, 0x111319, 0x8, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, 0x0, 0x0) close(r3) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r5, @ANYBLOB], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.465376193s ago: executing program 3 (id=746): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x4, 0x0, 0x0, 0x66c47, 0xffffffffffffffff, 0xbb0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r6 = getpid() perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r7, 0x20, &(0x7f0000000700)={&(0x7f0000000480)=""/187, 0xbb, 0x0, &(0x7f0000000540)=""/124, 0x7c}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x2, 0x5, 0xee, 0x108c4, r8, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0xb0ff}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xfc, 0x6, 0x9, 0x10, 0x0, 0x881, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x8, 0x0, 0x9, 0x7fffffffffffffff, 0x8, 0x2, 0x0, 0x8, 0x0, 0x3}, r6, 0x5, 0xffffffffffffffff, 0x0) 2.446917644s ago: executing program 2 (id=748): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x6, 0x1, 0x7, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x9e, 0xfffffffffffffffb}, 0x8022, 0x10000, 0x43a1bd76, 0x2, 0x29, 0x1006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="5c00000012006b000040017ea608601602f36504000100080000000000020096e517c356a7b0251e616859ad3a78a76e807c857e21e82e6bd9ef71b9bea297bff4354c36f1b060503225cf01c937e786a6d0bd5d8c92a61927c791aa000009c5cc83b7ed9c232d786c3500", 0xca}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000841) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) socketpair(0x26, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2.278923987s ago: executing program 0 (id=749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000ffffff900000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.263242338s ago: executing program 1 (id=750): close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000001ac0)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000200), 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000"], 0x20}, 0x80) 2.103674012s ago: executing program 1 (id=751): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x20000000004, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610424000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 2.039278543s ago: executing program 0 (id=752): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000fc43ea8b46953b353249c6a5c1f4d4d7fd69f1e00950f680b68c1b3574c066f3ea7ccd40bd50786909854d07466a7f494c28f8b273b231b4de78ff2ec37cb58d163028225730303395f5ed680c57cbb10bd539e1500ea4d567b668ba9be9ad80fa529bae8d4a0070b997e7fba1b3a850f9476daa778afcf42eedf59854a9dc4b508df0657b213ca034", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xf}, 0x828, 0x0, 0xffffffff, 0x9, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg(r2, &(0x7f0000000a40)={&(0x7f0000000740)=@nl, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)="24b0b19f", 0x4}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1000000000c6afae0cef8a3989d23813d63ec26b2ed38535819aef9acfff9bd18d3afcd589524ceabaef0d4989fcee0c50349d0192b1fbe48ee67afb0fa5ca78926e7cdb474b8f8bf51bb9ead44b1c219925a695f661b92d68e222e66165719fa9fad420f0ecf809732e6b59befc9d4b648089577e98b39980154b1dc1c542d243dc393ba6dfed23177623a6228c902cdbe08b3b5e8038603a9800"], 0x10}, 0x40) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0x8cfffffffffffff9}, 0x3b35, 0xfffffffffffffffc, 0xfffffffe}, 0x0, 0x600, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0xd9, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x208, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x49, &(0x7f0000000100), 0x120) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080d87fa3a32240470a6595ede2b61f83202e7087b5ad44639d629848d167597186d0232240703d2429351507e1ec62ea935f26351ac14322f8ecbf70670f355c00612d48454443a98739a15260b08fe4d5c32663a82335e623f688bb192a5a388a626d2e1f66", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000186000000100000000000000080000009500000000001000"], &(0x7f0000000f80)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r9]}, 0x90) 1.941219775s ago: executing program 2 (id=753): socket$kcm(0x10, 0x2, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x4, 0x0, 0x0, 0x66c47, r1, 0xbb0, '\x00', 0x0, r1, 0x5, 0x4, 0x0, 0xc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000480)=""/187, 0xbb, 0x0, &(0x7f0000000540)=""/124, 0x7c}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x2, 0x5, 0xee, 0x108c4, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa00}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.555422944s ago: executing program 1 (id=754): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000006400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="5a124640d345dab1f9d6f93534ab1191f9b9f6c142f17d49539ad8ea9bcc136a3247c51a4fb44bb3a91d118110c52651e54cd2f2665a1cb1052a13d3ee292f832e25804afc92b46b70ec85d065d33d814d6c2f6b816c8e3a517b"], 0x31) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="79125e000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000020000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="2b68756765746c62202d646576696365737b17e11b202d70657266ff6576510179a45b4b2aa89bac3f031c22f20048efe2e9c64b5d4eb251006c5956de31a858062dcb256eab110110c7726e1d7ef47a585f0a0243423c4b76c861bea230661176b7b2964951f2606854ee78eea94e334202c0aefadd2b7a077954749a8d09875c541e401d54613a766a64af46053367f902d375765fe189b02dbbe98d50879f626b8b059b58365b832422228471f52ef60de3eb81b30a2d72941c518cdc0028"], 0x1e) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75'], 0xa) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x3, 0x2, 0x3, 0x0, 0x1c0000, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x400, 0x215, 0x5, 0x8, 0xfffffffffffffffd, 0x3, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000015e27000002000100"/28], 0x50) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r6 = getpid() r7 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x4, 0x9}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000007", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x38}, 0x20002800) write$cgroup_pid(r5, &(0x7f0000000240)=r6, 0x12) 1.067243175s ago: executing program 3 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000002600)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000002740)=ANY=[@ANYBLOB="9400000000000000000000000700000094040100831f1e6401010200000000ac1e0101e0000002ffffffff7f0000010a010100441cea01e00002020000ffffac1414aa000000050000000000000010890fd40a0101017f000001b9af6533ffffffff01862300000000070e15665b8d97457661ad0531df020f95000000000d32fe66d235bd3a440c6c630a01010200000006019404010000000000001100000000000000290000000800000000000000000000001c0000000000000000000000080000002ad68ba3be59b3c8ef4c652665f7bba72e328d", @ANYRES32=0x0, @ANYBLOB="ffffffffac1414bb00000000"], 0xd0}, 0x8005) socket$kcm(0x11, 0x200000000000003, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0xb101, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000035c0)}, 0x20000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000025c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800, 0x402000a, 0x6, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(0x3) 967.138418ms ago: executing program 1 (id=756): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='-4'], 0xc) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x80000) 877.85226ms ago: executing program 0 (id=757): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, 0x0}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$kcm(r6, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100f2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100008004000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 731.196023ms ago: executing program 2 (id=758): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000006000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803", 0x3d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 665.474654ms ago: executing program 3 (id=759): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 555.475517ms ago: executing program 1 (id=760): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x500}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 552.231787ms ago: executing program 0 (id=761): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000030000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 488.099769ms ago: executing program 3 (id=762): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000005c0)=""/96, 0x60, 0x0, &(0x7f0000000680)=""/147, 0x93}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, @perf_bp={0x0, 0x1}, 0x111319, 0x8, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, 0x0, 0x0) close(r3) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 393.174631ms ago: executing program 1 (id=763): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000005c0)=""/96, 0x60, 0x0, &(0x7f0000000680)=""/147, 0x93}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, @perf_bp={0x0, 0x1}, 0x111319, 0x8, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, 0x0, 0x0) close(r3) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 316.351323ms ago: executing program 0 (id=764): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000006400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="5a124640d345dab1f9d6f93534ab1191f9b9f6c142f17d49539ad8ea9bcc136a3247c51a4fb44bb3a91d118110c52651e54cd2f2665a1cb1052a13d3ee292f832e25804afc92b46b70ec85d065d33d814d6c2f6b816c8e3a517b"], 0x31) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="2b68756765746c62202d646576696365737b17e11b202d70657266ff6576510179a45b4b2aa89bac3f031c22f20048efe2e9c64b5d4eb251006c5956de31a858062dcb256eab110110c7726e1d7ef47a585f0a0243423c4b76c861bea230661176b7b2964951f2606854ee78eea94e334202c0aefadd2b7a077954749a8d09875c541e401d54613a766a64af46053367f902d375765fe189b02dbbe98d50879f626b8b059b58365b832422228471f52ef60de3eb81b30a2d72941c518cdc0028"], 0x1e) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75'], 0xa) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x3, 0x2, 0x3, 0x0, 0x1c0000, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x400, 0x215, 0x5, 0x8, 0xfffffffffffffffd, 0x3, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000015e27000002000100"/28], 0x50) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r6 = getpid() r7 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x4, 0x9}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000007", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x38}, 0x20002800) write$cgroup_pid(r5, &(0x7f0000000240)=r6, 0x12) 0s ago: executing program 0 (id=765): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'full', 0x20, 0xbd, 0x20, 0x7fff}, 0x2f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x20000) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000580)="0981b894107c9f76dab79cfb27990d033dc6a6062d79bb90653787f6a4ec4ccbe73d037276539332d1f573dbf6817b8e14e525e80e53e70e09bfd2fb9414b705b703a1df424d91edf94e36a36c8a37b132c4fde0e0dd0851be06a743a1538eb5db0d4109dfc7c3c934905dcce43d39acbc4ef4712f97f31aff46dcb255ac61060f4e9b2463a0c70fe38f582a1c9e5bc1df2e89c77dc8f0ce96405ce582b97a566e0c51e45e0f37f0e98d2aa30f65cc981ae701c8a0f4dc08d77ef4e2fd3dbe27a138a80042266ded70e636a43d30db2d78", &(0x7f0000000680)=""/27}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$kcm(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 80.036360][ T5760] cgroup: Unknown subsys name 'net' [ 80.170160][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.880372][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.578291][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.591833][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.610258][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.610504][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.622811][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.626546][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.634111][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.640336][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.649017][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.660945][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.661728][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.672245][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.679584][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.690948][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.691014][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.698960][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.712971][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.715496][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.721721][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.728649][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.737487][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.742531][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.749678][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.761918][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.218857][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.275417][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.374479][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.388771][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.415204][ T5774] bridge_slave_0: entered allmulticast mode [ 84.429650][ T5774] bridge_slave_0: entered promiscuous mode [ 84.467253][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.474649][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.482121][ T5774] bridge_slave_1: entered allmulticast mode [ 84.489542][ T5774] bridge_slave_1: entered promiscuous mode [ 84.508287][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 84.538665][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.596715][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.609569][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.678803][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.686158][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.694654][ T5773] bridge_slave_0: entered allmulticast mode [ 84.701778][ T5773] bridge_slave_0: entered promiscuous mode [ 84.747934][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.755177][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.762684][ T5773] bridge_slave_1: entered allmulticast mode [ 84.770136][ T5773] bridge_slave_1: entered promiscuous mode [ 84.780196][ T5774] team0: Port device team_slave_0 added [ 84.799140][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.806640][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.814299][ T5775] bridge_slave_0: entered allmulticast mode [ 84.821549][ T5775] bridge_slave_0: entered promiscuous mode [ 84.848081][ T5774] team0: Port device team_slave_1 added [ 84.864128][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.871295][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.878978][ T5775] bridge_slave_1: entered allmulticast mode [ 84.886492][ T5775] bridge_slave_1: entered promiscuous mode [ 84.926344][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.948605][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.955670][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.982078][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.007943][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.017803][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.043957][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.068142][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.081421][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.100193][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.107491][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.114909][ T5772] bridge_slave_0: entered allmulticast mode [ 85.122188][ T5772] bridge_slave_0: entered promiscuous mode [ 85.142771][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.173609][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.180959][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.188771][ T5772] bridge_slave_1: entered allmulticast mode [ 85.196369][ T5772] bridge_slave_1: entered promiscuous mode [ 85.222586][ T5775] team0: Port device team_slave_0 added [ 85.231096][ T5773] team0: Port device team_slave_0 added [ 85.239924][ T5773] team0: Port device team_slave_1 added [ 85.269821][ T5775] team0: Port device team_slave_1 added [ 85.319758][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.326875][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.352939][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.386097][ T5774] hsr_slave_0: entered promiscuous mode [ 85.394750][ T5774] hsr_slave_1: entered promiscuous mode [ 85.403979][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.416965][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.426799][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.436322][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.462592][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.515351][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.525808][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.554810][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.581888][ T5772] team0: Port device team_slave_0 added [ 85.590605][ T5772] team0: Port device team_slave_1 added [ 85.598076][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.605236][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.631487][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.719761][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.726905][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.753620][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.798089][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.805313][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.832807][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.852368][ T5778] Bluetooth: hci3: command tx timeout [ 85.858082][ T5778] Bluetooth: hci1: command tx timeout [ 85.864106][ T5083] Bluetooth: hci2: command tx timeout [ 85.864128][ T5786] Bluetooth: hci0: command tx timeout [ 85.884693][ T5773] hsr_slave_0: entered promiscuous mode [ 85.891102][ T5773] hsr_slave_1: entered promiscuous mode [ 85.897540][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.905491][ T5773] Cannot create hsr debugfs directory [ 85.945520][ T5775] hsr_slave_0: entered promiscuous mode [ 85.952217][ T5775] hsr_slave_1: entered promiscuous mode [ 85.958416][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.966193][ T5775] Cannot create hsr debugfs directory [ 86.096177][ T5772] hsr_slave_0: entered promiscuous mode [ 86.103015][ T5772] hsr_slave_1: entered promiscuous mode [ 86.109381][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.117800][ T5772] Cannot create hsr debugfs directory [ 86.344048][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.378802][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.409715][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.423144][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.534191][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.546159][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.557469][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.568561][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.648226][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.667480][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.679461][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.690127][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.794590][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.806074][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.843875][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.855289][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.932444][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.994326][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.026249][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.033621][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.058088][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.093683][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.100861][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.197095][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.226626][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.277092][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.284423][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.306661][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.327351][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.334673][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.404937][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.412168][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.427486][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.434703][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.548781][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.692962][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.749491][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.756778][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.801481][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.808714][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.941737][ T5786] Bluetooth: hci0: command tx timeout [ 87.941937][ T5778] Bluetooth: hci1: command tx timeout [ 87.947405][ T5786] Bluetooth: hci2: command tx timeout [ 87.954563][ T51] Bluetooth: hci3: command tx timeout [ 88.076721][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.173555][ T5774] veth0_vlan: entered promiscuous mode [ 88.208950][ T5774] veth1_vlan: entered promiscuous mode [ 88.307239][ T5774] veth0_macvtap: entered promiscuous mode [ 88.348416][ T5774] veth1_macvtap: entered promiscuous mode [ 88.368264][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.405195][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.427468][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.467471][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.496618][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.515648][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.526378][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.535895][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.645953][ T5773] veth0_vlan: entered promiscuous mode [ 88.669397][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.679793][ T5775] veth0_vlan: entered promiscuous mode [ 88.728947][ T5773] veth1_vlan: entered promiscuous mode [ 88.758992][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.775874][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.788710][ T5775] veth1_vlan: entered promiscuous mode [ 88.828826][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.849988][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.876004][ T5773] veth0_macvtap: entered promiscuous mode [ 88.908474][ T5773] veth1_macvtap: entered promiscuous mode [ 88.973589][ T5775] veth0_macvtap: entered promiscuous mode [ 88.981118][ T5772] veth0_vlan: entered promiscuous mode [ 88.997930][ T5775] veth1_macvtap: entered promiscuous mode [ 89.023591][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.052193][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.066616][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.098469][ T5772] veth1_vlan: entered promiscuous mode [ 89.110920][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.124345][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.136931][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.166207][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.168810][ C0] hrtimer: interrupt took 78527 ns [ 89.175315][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.194463][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.204010][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.243245][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.259858][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.272062][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.283657][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.299348][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.315144][ T5840] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.357225][ T5840] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 89.377243][ T5841] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 89.402158][ T5841] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.434278][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.447372][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.458656][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.469879][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.483215][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.499412][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.510217][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.520453][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.530236][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.553508][ T5772] veth0_macvtap: entered promiscuous mode [ 89.591121][ T5772] veth1_macvtap: entered promiscuous mode [ 89.757014][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.768417][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.783869][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.795179][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.807953][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.817999][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.830463][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.841113][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.851667][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.863574][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.876414][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.895799][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.907083][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.917229][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.931206][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.951769][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.968119][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.979881][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.011826][ T5778] Bluetooth: hci2: command tx timeout [ 90.017309][ T5778] Bluetooth: hci1: command tx timeout [ 90.023433][ T51] Bluetooth: hci3: command tx timeout [ 90.028872][ T51] Bluetooth: hci0: command tx timeout [ 90.049027][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.071022][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.080166][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.089300][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.134919][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.154291][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.208101][ T5847] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 90.259565][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.276583][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.293615][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.305851][ T5847] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.6'. [ 90.324561][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.457653][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.494100][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.430221][ T5868] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.495173][ T5874] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.539438][ T5873] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 91.574303][ T5873] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.11'. [ 91.861033][ T5884] netlink: 'syz.2.13': attribute type 3 has an invalid length. [ 91.884477][ T5884] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.13'. [ 91.902733][ T5879] netlink: 'syz.0.12': attribute type 3 has an invalid length. [ 91.932633][ T5879] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.12'. [ 92.092840][ T5778] Bluetooth: hci1: command tx timeout [ 92.092951][ T51] Bluetooth: hci0: command tx timeout [ 92.098307][ T5778] Bluetooth: hci2: command tx timeout [ 92.105226][ T51] Bluetooth: hci3: command tx timeout [ 92.121132][ T788] cfg80211: failed to load regulatory.db [ 92.529861][ T5889] netlink: 'syz.3.16': attribute type 3 has an invalid length. [ 92.552188][ T5889] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.16'. [ 92.571184][ T5899] Zero length message leads to an empty skb [ 92.582939][ T5892] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 92.620684][ T5896] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 92.645894][ T5899] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18'. [ 92.671678][ T5896] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.17'. [ 92.881824][ T5899] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 93.433372][ T5906] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 93.459743][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21'. [ 93.482778][ T5906] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 93.497548][ T5906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.628533][ T5910] netlink: 'syz.0.23': attribute type 9 has an invalid length. [ 94.939544][ T5921] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 95.207541][ T5921] syz_tun: entered promiscuous mode [ 95.222581][ T11] wlan1: Trigger new scan to find an IBSS to join [ 95.425807][ T5921] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 95.457550][ T5924] __nla_validate_parse: 1 callbacks suppressed [ 95.457570][ T5924] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.28'. [ 95.527607][ T5925] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 95.660255][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.688624][ T5925] team0: Port device bond0 added [ 95.801189][ T5932] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 95.814112][ T5921] syz.3.26 (5921) used greatest stack depth: 19944 bytes left [ 95.823503][ T5935] netlink: 'syz.1.29': attribute type 3 has an invalid length. [ 95.871858][ T5935] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.29'. [ 96.068729][ T5942] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.34'. [ 96.281407][ T5951] netlink: 156 bytes leftover after parsing attributes in process `syz.0.35'. [ 96.315346][ T5945] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 96.347101][ T5945] netlink: 'syz.1.33': attribute type 3 has an invalid length. [ 96.357682][ T5945] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.33'. [ 96.487084][ T5946] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 96.511901][ T5946] netlink: 2 bytes leftover after parsing attributes in process `syz.3.32'. [ 96.546375][ T5946] hsr0: entered promiscuous mode [ 96.570954][ T5946] bridge0: port 3(hsr0) entered blocking state [ 96.622380][ T5946] bridge0: port 3(hsr0) entered disabled state [ 96.630435][ T5946] hsr0: entered allmulticast mode [ 96.652279][ T5946] hsr_slave_0: entered allmulticast mode [ 96.661729][ T5946] hsr_slave_1: entered allmulticast mode [ 96.738356][ T5946] bridge0: port 3(hsr0) entered blocking state [ 96.746228][ T5946] bridge0: port 3(hsr0) entered forwarding state [ 96.949830][ T5963] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 96.976656][ T5963] netlink: 'syz.2.39': attribute type 3 has an invalid length. [ 96.995666][ T5963] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.39'. [ 97.549936][ T5973] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 97.645292][ T5973] netlink: 'syz.0.43': attribute type 3 has an invalid length. [ 97.674473][ T5973] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.43'. [ 97.713025][ T5976] netlink: 'syz.2.44': attribute type 10 has an invalid length. [ 97.837740][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.069784][ T5976] bridge_slave_1: left allmulticast mode [ 98.123673][ T5976] bridge_slave_1: left promiscuous mode [ 98.143086][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.216256][ T5976] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 98.252714][ T5978] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 98.279235][ T5982] netlink: 'syz.1.45': attribute type 3 has an invalid length. [ 98.311885][ T5982] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.45'. [ 98.332190][ T5984] netlink: 'syz.0.46': attribute type 6 has an invalid length. [ 98.341129][ T5984] netlink: 164 bytes leftover after parsing attributes in process `syz.0.46'. [ 98.709723][ T5976] syz.2.44 (5976) used greatest stack depth: 19784 bytes left [ 99.141139][ T11] wlan1: Trigger new scan to find an IBSS to join [ 100.166697][ T2948] wlan1: Trigger new scan to find an IBSS to join [ 100.282065][ T6016] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 100.667950][ T6023] netlink: 'syz.3.59': attribute type 3 has an invalid length. [ 100.701588][ T6023] __nla_validate_parse: 2 callbacks suppressed [ 100.701605][ T6023] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.59'. [ 100.742590][ T6021] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 100.957197][ T6032] netlink: 'syz.2.63': attribute type 6 has an invalid length. [ 100.985777][ T6032] netlink: 164 bytes leftover after parsing attributes in process `syz.2.63'. [ 101.345273][ T6034] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 101.357465][ T6036] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 101.389037][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.408629][ T6036] bridge_slave_1: left allmulticast mode [ 101.415732][ T6036] bridge_slave_1: left promiscuous mode [ 101.427258][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.450416][ T6036] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 101.460195][ T6038] netlink: 'syz.0.64': attribute type 3 has an invalid length. [ 101.471603][ T6038] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.64'. [ 101.490258][ T6041] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 101.503608][ T6044] netlink: 'syz.1.66': attribute type 3 has an invalid length. [ 101.511241][ T6044] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.66'. [ 101.597359][ T6036] syz.3.65 (6036) used greatest stack depth: 19400 bytes left [ 101.830294][ T6049] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 101.895662][ T6049] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.68'. [ 102.379402][ T6062] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.71'. [ 102.785274][ T6069] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 102.808033][ T6069] netlink: 'syz.1.74': attribute type 3 has an invalid length. [ 102.816483][ T6069] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.74'. [ 102.969891][ T6072] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 103.030091][ T6072] netlink: 'syz.3.76': attribute type 3 has an invalid length. [ 103.042876][ T6072] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.76'. [ 103.055272][ T34] wlan1: Trigger new scan to find an IBSS to join [ 103.258468][ T6076] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 103.328855][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.369895][ T6076] bridge_slave_1: left allmulticast mode [ 103.389194][ T6076] bridge_slave_1: left promiscuous mode [ 103.398004][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.429818][ T6076] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 103.457055][ T6078] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 103.469201][ T6084] netlink: 'syz.3.77': attribute type 3 has an invalid length. [ 103.491757][ T6084] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.77'. [ 103.650563][ T6087] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 103.704292][ T6087] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.80'. [ 104.154039][ T48] wlan1: Trigger new scan to find an IBSS to join [ 104.925129][ T6105] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 105.000650][ T6105] netlink: 'syz.0.87': attribute type 3 has an invalid length. [ 105.063472][ T48] wlan1: Trigger new scan to find an IBSS to join [ 105.825599][ T6125] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 105.867011][ T6125] __nla_validate_parse: 4 callbacks suppressed [ 105.867048][ T6125] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.96'. [ 106.091842][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 106.298859][ T6140] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.101'. [ 106.356061][ T6136] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.98'. [ 106.471057][ T6140] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 107.223122][ T6152] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.113'. [ 107.240769][ T6151] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 107.261001][ T6153] validate_nla: 1 callbacks suppressed [ 107.261015][ T6153] netlink: 'syz.3.104': attribute type 3 has an invalid length. [ 107.292178][ T6153] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.104'. [ 107.550372][ T6161] netlink: 'syz.3.105': attribute type 6 has an invalid length. [ 107.598299][ T6161] netlink: 164 bytes leftover after parsing attributes in process `syz.3.105'. [ 107.635074][ T6164] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.115'. [ 108.092317][ T48] wlan1: Trigger new scan to find an IBSS to join [ 108.100098][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 108.156976][ T6170] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.184802][ T6170] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.109'. [ 108.310932][ T6177] netlink: 156 bytes leftover after parsing attributes in process `syz.1.111'. [ 108.539743][ T6183] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.114'. [ 108.579340][ T6181] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.609358][ T6183] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 108.642454][ T6181] netlink: 'syz.3.117': attribute type 3 has an invalid length. [ 108.956005][ T6185] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 108.975991][ T6185] hsr0: entered promiscuous mode [ 108.985693][ T6185] bridge0: port 2(hsr0) entered blocking state [ 109.000855][ T6185] bridge0: port 2(hsr0) entered disabled state [ 109.026667][ T6185] hsr0: entered allmulticast mode [ 109.032493][ T6185] hsr_slave_0: entered allmulticast mode [ 109.038577][ T6185] hsr_slave_1: entered allmulticast mode [ 109.088471][ T6185] bridge0: port 2(hsr0) entered blocking state [ 109.096784][ T6185] bridge0: port 2(hsr0) entered forwarding state [ 109.517606][ T6199] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.587263][ T6200] netlink: 'syz.0.130': attribute type 3 has an invalid length. [ 109.912102][ T6207] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.927731][ T6213] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.981854][ T6207] netlink: 'syz.2.123': attribute type 3 has an invalid length. [ 110.681329][ T6225] netlink: 'syz.0.133': attribute type 10 has an invalid length. [ 110.707876][ T6225] hsr0: entered promiscuous mode [ 110.730314][ T6225] bridge0: port 3(hsr0) entered blocking state [ 110.803171][ T6225] bridge0: port 3(hsr0) entered disabled state [ 110.822077][ T6225] hsr0: entered allmulticast mode [ 110.828566][ T6225] hsr_slave_0: entered allmulticast mode [ 110.844878][ T6225] hsr_slave_1: entered allmulticast mode [ 110.901758][ T6225] bridge0: port 3(hsr0) entered blocking state [ 110.910890][ T6225] bridge0: port 3(hsr0) entered forwarding state [ 111.131857][ T34] wlan1: Trigger new scan to find an IBSS to join [ 111.356676][ T6246] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.391409][ T6245] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.407771][ T6246] __nla_validate_parse: 8 callbacks suppressed [ 111.407824][ T6246] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.140'. [ 111.447915][ T6245] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 111.458497][ T6245] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.138'. [ 111.496447][ T6248] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.539378][ T6248] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 111.561604][ T6248] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.141'. [ 111.725073][ T6252] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.785083][ T6256] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.142'. [ 111.816365][ T6252] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.151'. [ 112.080680][ T6265] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.145'. [ 112.253419][ T6270] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 112.284885][ T6268] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 112.309330][ T6268] syz_tun: entered promiscuous mode [ 112.504735][ T6268] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.579558][ T6270] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.158'. [ 112.617690][ T6278] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 112.645190][ T6273] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.157'. [ 112.765662][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.828233][ T6278] team0: Port device bond0 added [ 112.850060][ T6271] netlink: 'syz.2.147': attribute type 10 has an invalid length. [ 112.868605][ T6271] netlink: 2 bytes leftover after parsing attributes in process `syz.2.147'. [ 112.908505][ T6271] hsr0: entered promiscuous mode [ 112.929403][ T6271] bridge0: port 2(hsr0) entered blocking state [ 112.958840][ T6271] bridge0: port 2(hsr0) entered disabled state [ 112.978006][ T6271] hsr0: entered allmulticast mode [ 112.985957][ T6271] hsr_slave_0: entered allmulticast mode [ 112.995749][ T6271] hsr_slave_1: entered allmulticast mode [ 113.080582][ T6271] bridge0: port 2(hsr0) entered blocking state [ 113.086994][ T6271] bridge0: port 2(hsr0) entered forwarding state [ 113.325824][ T6290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.156'. [ 113.500908][ T6294] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 113.533558][ T6293] netlink: 'syz.3.160': attribute type 9 has an invalid length. [ 113.549040][ T6294] netlink: 'syz.0.159': attribute type 3 has an invalid length. [ 113.680592][ T6296] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 114.100184][ T2939] wlan1: Trigger new scan to find an IBSS to join [ 114.494849][ T6311] netlink: 'syz.2.165': attribute type 10 has an invalid length. [ 114.582352][ T6311] syz_tun: entered promiscuous mode [ 114.841352][ T6311] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 114.872679][ T6312] netlink: 'syz.2.165': attribute type 10 has an invalid length. [ 114.996951][ T6312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.050086][ T6312] team0: Port device bond0 added [ 115.271830][ T6312] syz.2.165 (6312) used greatest stack depth: 18984 bytes left [ 115.711911][ T6330] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 115.743201][ T6330] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 115.787857][ T6330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.844174][ T6332] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 116.021370][ T6336] netlink: 'syz.1.176': attribute type 9 has an invalid length. [ 116.095490][ T34] wlan1: Trigger new scan to find an IBSS to join [ 116.102688][ T48] wlan1: Trigger new scan to find an IBSS to join [ 117.055975][ T6351] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 117.113763][ T6351] syz_tun: entered promiscuous mode [ 117.137908][ T48] wlan1: Trigger new scan to find an IBSS to join [ 117.289650][ T6351] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 117.344246][ T6352] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 117.509708][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.530694][ T6352] team0: Port device bond0 added [ 117.573471][ T6360] __nla_validate_parse: 10 callbacks suppressed [ 117.573491][ T6360] netlink: 156 bytes leftover after parsing attributes in process `syz.3.183'. [ 117.765632][ T6362] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.182'. [ 117.896453][ T6366] netlink: 156 bytes leftover after parsing attributes in process `syz.2.194'. [ 118.091671][ T2948] wlan1: Trigger new scan to find an IBSS to join [ 118.245502][ T6370] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 118.314801][ T6370] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.187'. [ 118.705636][ T6364] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.184'. [ 118.714993][ T6364] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 118.770084][ T6380] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 118.780171][ T6380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.191'. [ 118.796727][ T6380] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 118.808495][ T6380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.048216][ T6386] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 119.081330][ T6386] netlink: 'syz.2.193': attribute type 3 has an invalid length. [ 119.128464][ T6386] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.193'. [ 119.140991][ T48] wlan1: Trigger new scan to find an IBSS to join [ 119.232531][ T6394] netlink: 'syz.1.196': attribute type 3 has an invalid length. [ 119.240252][ T6394] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.196'. [ 119.414074][ T6397] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.197'. [ 119.650682][ T6402] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 119.741923][ T6402] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.201'. [ 120.396128][ T6417] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 120.856590][ T6424] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.961375][ T6424] netlink: 'syz.1.209': attribute type 3 has an invalid length. [ 121.076386][ T6426] netlink: 'syz.3.210': attribute type 3 has an invalid length. [ 121.866197][ T6435] netlink: 'syz.0.211': attribute type 3 has an invalid length. [ 122.180290][ T6438] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 122.716642][ T6452] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 122.731779][ T6452] __nla_validate_parse: 8 callbacks suppressed [ 122.731814][ T6452] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.221'. [ 122.748988][ T6450] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 122.759450][ T6450] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.222'. [ 122.769746][ T6453] netlink: 'syz.1.220': attribute type 3 has an invalid length. [ 122.788747][ T6453] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.220'. [ 122.960609][ T6458] netlink: 156 bytes leftover after parsing attributes in process `syz.0.224'. [ 123.132017][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 123.268785][ T6464] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 123.337546][ T6464] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.226'. [ 124.105849][ T6466] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.227'. [ 124.485738][ T6480] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 124.507706][ T6481] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.231'. [ 124.781184][ T6487] netlink: 'syz.1.234': attribute type 3 has an invalid length. [ 124.789595][ T6487] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.234'. [ 124.860588][ T6489] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 124.881621][ T6489] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.236'. [ 125.037368][ T6493] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.141775][ T6493] netlink: 'syz.1.237': attribute type 3 has an invalid length. [ 125.177645][ T6493] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.237'. [ 126.099489][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 126.488952][ T6514] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 126.788539][ T6523] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 126.931093][ T6526] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 126.953736][ T6526] netlink: 'syz.1.248': attribute type 3 has an invalid length. [ 127.133748][ T11] wlan1: Trigger new scan to find an IBSS to join [ 127.513786][ T6542] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.007653][ T6555] __nla_validate_parse: 9 callbacks suppressed [ 128.007672][ T6555] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.259'. [ 128.481354][ T6561] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.493209][ T6562] netlink: 'syz.0.262': attribute type 3 has an invalid length. [ 128.500919][ T6562] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.262'. [ 128.587886][ T6566] netlink: 156 bytes leftover after parsing attributes in process `syz.2.265'. [ 128.945234][ T6546] tipc: can't start tipc send workqueue [ 128.983832][ T6571] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.096754][ T6571] netlink: 'syz.0.275': attribute type 3 has an invalid length. [ 129.115259][ T6571] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.275'. [ 129.148169][ T2948] wlan1: Trigger new scan to find an IBSS to join [ 129.161678][ T34] wlan1: Trigger new scan to find an IBSS to join [ 129.378692][ T6581] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.421257][ T6584] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.272'. [ 129.518947][ T6585] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.271'. [ 130.014972][ T6597] netlink: 156 bytes leftover after parsing attributes in process `syz.1.277'. [ 130.108211][ T2948] wlan1: Trigger new scan to find an IBSS to join [ 130.142892][ T2939] wlan1: Creating new IBSS network, BSSID e2:25:d7:56:87:0e [ 130.424041][ T6602] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.498361][ T6602] netlink: 'syz.0.280': attribute type 3 has an invalid length. [ 130.516922][ T6602] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.280'. [ 130.828541][ T6615] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.284'. [ 131.042586][ T6620] netlink: 156 bytes leftover after parsing attributes in process `syz.3.287'. [ 131.566121][ T6636] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 131.600807][ T6636] netlink: 'syz.0.294': attribute type 3 has an invalid length. [ 133.010430][ T6668] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô' [ 133.047569][ T6668] CPU: 0 PID: 6668 Comm: syz.3.307 Not tainted syzkaller #0 [ 133.054975][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.065202][ T6668] Call Trace: [ 133.068515][ T6668] [ 133.071476][ T6668] dump_stack_lvl+0x18c/0x250 [ 133.076221][ T6668] ? show_regs_print_info+0x20/0x20 [ 133.081468][ T6668] ? load_image+0x420/0x420 [ 133.086026][ T6668] sysfs_warn_dup+0x8e/0xa0 [ 133.090560][ T6668] sysfs_do_create_link_sd+0xc0/0x110 [ 133.095955][ T6668] device_add_class_symlinks+0x1cf/0x240 [ 133.101620][ T6668] device_add+0x4f9/0xc40 [ 133.106037][ T6668] wiphy_register+0x1d99/0x2ac0 [ 133.110974][ T6668] ? cfg80211_event_work+0x40/0x40 [ 133.114573][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.116143][ T6668] ? minstrel_ht_alloc+0x88a/0x990 [ 133.123791][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.127730][ T6668] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 133.140128][ T6668] ieee80211_register_hw+0x2dd8/0x3b30 [ 133.145653][ T6668] ? ieee80211_register_hw+0xfb1/0x3b30 [ 133.151247][ T6668] ? ieee80211_tasklet_handler+0x20/0x20 [ 133.156911][ T6668] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 133.162854][ T6668] ? __debug_object_init+0xec/0x450 [ 133.168093][ T6668] ? __asan_memset+0x22/0x40 [ 133.172717][ T6668] ? __hrtimer_init+0x189/0x270 [ 133.177601][ T6668] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 133.183378][ T6668] ? mac80211_hwsim_free+0x220/0x220 [ 133.188695][ T6668] ? rcu_is_watching+0x15/0xb0 [ 133.193493][ T6668] ? kstrndup+0xbd/0x140 [ 133.197779][ T6668] hwsim_new_radio_nl+0xdad/0x1a70 [ 133.202929][ T6668] ? __nla_validate+0x50/0x50 [ 133.207659][ T6668] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 133.214037][ T6668] ? __nla_parse+0x40/0x50 [ 133.218489][ T6668] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 133.224868][ T6668] genl_family_rcv_msg_doit+0x21a/0x310 [ 133.230460][ T6668] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 133.236389][ T6668] ? bpf_lsm_capable+0x9/0x10 [ 133.241105][ T6668] ? security_capable+0x89/0xb0 [ 133.245991][ T6668] genl_rcv_msg+0x611/0x7a0 [ 133.250534][ T6668] ? genl_bind+0x360/0x360 [ 133.254987][ T6668] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 133.261357][ T6668] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 133.267989][ T6668] ? perf_trace_lock+0xfc/0x3b0 [ 133.272896][ T6668] netlink_rcv_skb+0x235/0x4c0 [ 133.277710][ T6668] ? genl_bind+0x360/0x360 [ 133.282175][ T6668] ? netlink_ack+0x1160/0x1160 [ 133.286991][ T6668] ? __lock_acquire+0x7d80/0x7d80 [ 133.292058][ T6668] ? down_read+0x1ac/0x2e0 [ 133.296508][ T6668] genl_rcv+0x28/0x40 [ 133.300514][ T6668] netlink_unicast+0x7b1/0x930 [ 133.305327][ T6668] netlink_sendmsg+0x8d0/0xbf0 [ 133.310126][ T6668] ? netlink_getsockopt+0x590/0x590 [ 133.315354][ T6668] ? apparmor_socket_sendmsg+0x8e/0x330 [ 133.320957][ T6668] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 133.326277][ T6668] ? security_socket_sendmsg+0x80/0xa0 [ 133.331764][ T6668] ? netlink_getsockopt+0x590/0x590 [ 133.336992][ T6668] ____sys_sendmsg+0x61b/0x980 [ 133.341800][ T6668] ? __asan_memset+0x22/0x40 [ 133.346425][ T6668] ? __sys_sendmsg_sock+0x30/0x30 [ 133.351474][ T6668] ? __import_iovec+0x5f2/0x850 [ 133.356376][ T6668] ? import_iovec+0x73/0xa0 [ 133.360914][ T6668] ___sys_sendmsg+0x2a6/0x360 [ 133.365633][ T6668] ? __sys_sendmsg+0x2b0/0x2b0 [ 133.370487][ T6668] __se_sys_sendmsg+0x1d0/0x2c0 [ 133.375374][ T6668] ? perf_trace_preemptirq_template+0x269/0x330 [ 133.381662][ T6668] ? __x64_sys_sendmsg+0x80/0x80 [ 133.386659][ T6668] ? lockdep_hardirqs_on+0x98/0x150 [ 133.391896][ T6668] do_syscall_64+0x55/0xb0 [ 133.396342][ T6668] ? clear_bhb_loop+0x40/0x90 [ 133.401052][ T6668] ? clear_bhb_loop+0x40/0x90 [ 133.405763][ T6668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.411696][ T6668] RIP: 0033:0x7f4e7ed9e0d9 [ 133.416146][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.435777][ T6668] RSP: 002b:00007f4e7fc21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.444246][ T6668] RAX: ffffffffffffffda RBX: 00007f4e7f026090 RCX: 00007f4e7ed9e0d9 [ 133.452274][ T6668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 133.460289][ T6668] RBP: 00007f4e7ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 133.468294][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.476312][ T6668] R13: 00007f4e7f026128 R14: 00007f4e7f026090 R15: 00007ffc0001f6d8 [ 133.484341][ T6668] [ 133.493770][ T12] wlan1: Trigger new scan to find an IBSS to join [ 133.609374][ T6675] __nla_validate_parse: 5 callbacks suppressed [ 133.609411][ T6675] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.310'. [ 133.728094][ T6678] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 133.759008][ T6680] netlink: 156 bytes leftover after parsing attributes in process `syz.1.312'. [ 134.101842][ T12] wlan1: Trigger new scan to find an IBSS to join [ 134.110200][ T11] wlan1: Trigger new scan to find an IBSS to join [ 134.278154][ T6683] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.313'. [ 134.974941][ T12] wlan1: Creating new IBSS network, BSSID 0e:47:1e:46:da:7c [ 135.210893][ T6704] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 135.228698][ T6704] netlink: 152 bytes leftover after parsing attributes in process `syz.0.321'. [ 135.287956][ T6704] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 135.326778][ T6706] netlink: 156 bytes leftover after parsing attributes in process `syz.3.322'. [ 135.363217][ T6708] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 135.640980][ T6719] netlink: 'syz.1.328': attribute type 9 has an invalid length. [ 135.651787][ T6719] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.328'. [ 135.788107][ T6724] netlink: 'syz.0.330': attribute type 13 has an invalid length. [ 135.807128][ T6724] netlink: 'syz.0.330': attribute type 58 has an invalid length. [ 135.827890][ T6724] netlink: 152 bytes leftover after parsing attributes in process `syz.0.330'. [ 136.091945][ T11] wlan1: Trigger new scan to find an IBSS to join [ 136.778559][ T6727] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.331'. [ 137.059631][ T2939] wlan1: Creating new IBSS network, BSSID 6e:1b:32:d4:f7:b8 [ 137.094546][ T6737] netlink: 156 bytes leftover after parsing attributes in process `syz.2.335'. [ 137.196663][ T6739] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 137.689227][ T6758] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.747869][ T6758] netlink: 'syz.3.344': attribute type 3 has an invalid length. [ 137.779294][ T6758] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.344'. [ 137.831821][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.841709][ T6758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.891700][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.921855][ T6758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.591137][ T6777] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 138.999245][ T6791] __nla_validate_parse: 2 callbacks suppressed [ 138.999263][ T6791] netlink: 156 bytes leftover after parsing attributes in process `syz.2.356'. [ 139.133852][ T2948] wlan1: Trigger new scan to find an IBSS to join [ 139.393439][ T6786] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.355'. [ 140.056661][ T6816] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.364'. [ 140.069410][ T6816] netlink: 6112 bytes leftover after parsing attributes in process `syz.1.364'. [ 140.081090][ T6816] tc_dump_action: action bad kind [ 140.126080][ T6820] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 140.176179][ T2976] wlan1: Creating new IBSS network, BSSID 32:68:1a:49:94:ab [ 140.269277][ T6823] netlink: 156 bytes leftover after parsing attributes in process `syz.2.367'. [ 141.037502][ T6849] netlink: 156 bytes leftover after parsing attributes in process `syz.2.377'. [ 141.061707][ T6837] wlan1: Trigger new scan to find an IBSS to join [ 141.157035][ T6847] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 141.247264][ T6854] netlink: 'syz.2.380': attribute type 27 has an invalid length. [ 141.261174][ T6854] netlink: 164 bytes leftover after parsing attributes in process `syz.2.380'. [ 141.922488][ T6866] netlink: set zone limit has 8 unknown bytes [ 143.385024][ T6877] netlink: 156 bytes leftover after parsing attributes in process `syz.0.388'. [ 143.574502][ T6883] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 144.293191][ T6907] netlink: 'syz.2.399': attribute type 21 has an invalid length. [ 144.312468][ T6907] netlink: 176 bytes leftover after parsing attributes in process `syz.2.399'. [ 144.332140][ T6908] netlink: 156 bytes leftover after parsing attributes in process `syz.3.400'. [ 144.379765][ T6910] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.061640][ T34] wlan1: Trigger new scan to find an IBSS to join [ 145.161881][ T6935] netlink: 156 bytes leftover after parsing attributes in process `syz.2.411'. [ 145.343559][ T6941] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.814438][ T6953] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 146.067937][ T6839] wlan1: Creating new IBSS network, BSSID ca:c5:ce:d3:8d:79 [ 146.103532][ T6837] wlan1: Trigger new scan to find an IBSS to join [ 146.248052][ T6963] netlink: 156 bytes leftover after parsing attributes in process `syz.1.423'. [ 146.662565][ T6977] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 147.852909][ T7014] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 148.067220][ T7023] FAULT_INJECTION: forcing a failure. [ 148.067220][ T7023] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.081059][ T7023] CPU: 0 PID: 7023 Comm: syz.1.445 Not tainted syzkaller #0 [ 148.088433][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.098544][ T7023] Call Trace: [ 148.101870][ T7023] [ 148.104845][ T7023] dump_stack_lvl+0x18c/0x250 [ 148.109581][ T7023] ? show_regs_print_info+0x20/0x20 [ 148.114836][ T7023] ? load_image+0x420/0x420 [ 148.119401][ T7023] ? __might_fault+0xaa/0x120 [ 148.124177][ T7023] ? __lock_acquire+0x7d80/0x7d80 [ 148.129280][ T7023] should_fail_ex+0x394/0x4c0 [ 148.134028][ T7023] _copy_from_user+0x2f/0xe0 [ 148.138672][ T7023] __sys_bpf+0x23e/0x890 [ 148.142972][ T7023] ? bpf_link_show_fdinfo+0x390/0x390 [ 148.148418][ T7023] ? lock_chain_count+0x20/0x20 [ 148.153421][ T7023] __x64_sys_bpf+0x7c/0x90 [ 148.157877][ T7023] do_syscall_64+0x55/0xb0 [ 148.162356][ T7023] ? clear_bhb_loop+0x40/0x90 [ 148.167095][ T7023] ? clear_bhb_loop+0x40/0x90 [ 148.171819][ T7023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.177750][ T7023] RIP: 0033:0x7fec4319e0d9 [ 148.182201][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.202019][ T7023] RSP: 002b:00007fec440da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.210465][ T7023] RAX: ffffffffffffffda RBX: 00007fec43425fa0 RCX: 00007fec4319e0d9 [ 148.218462][ T7023] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 148.226495][ T7023] RBP: 00007fec440da090 R08: 0000000000000000 R09: 0000000000000000 [ 148.234508][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.242506][ T7023] R13: 00007fec43426038 R14: 00007fec43425fa0 R15: 00007ffe08c84518 [ 148.250524][ T7023] [ 149.134243][ T6837] wlan1: Trigger new scan to find an IBSS to join [ 149.215325][ T7046] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.977658][ T7066] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.462'. [ 150.585978][ T7079] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.630401][ T7081] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.467'. [ 151.529699][ T7113] netlink: 'syz.3.478': attribute type 9 has an invalid length. [ 151.562385][ T7113] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.478'. [ 151.788387][ T7118] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.861883][ T7121] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.481'. [ 153.141872][ T34] wlan1: Trigger new scan to find an IBSS to join [ 153.420961][ T7147] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.465993][ T7147] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.492'. [ 153.873437][ T7156] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.496'. [ 153.922488][ T7156] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.496'. [ 153.951513][ T7156] netlink: 6 bytes leftover after parsing attributes in process `syz.0.496'. [ 154.098500][ T12] wlan1: Trigger new scan to find an IBSS to join [ 154.120890][ T34] wlan1: Trigger new scan to find an IBSS to join [ 155.053366][ T7170] netlink: 'syz.3.502': attribute type 7 has an invalid length. [ 155.163830][ T6837] wlan1: Creating new IBSS network, BSSID ca:cd:5f:15:f2:f8 [ 155.466876][ T7177] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.841220][ T7178] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.504'. [ 156.634087][ T7196] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.508'. [ 158.092957][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 158.099685][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 158.267937][ T7212] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 158.330557][ T7212] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.515'. [ 159.110045][ T7225] can: request_module (can-proto-0) failed. [ 159.136630][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 159.505355][ T7232] netlink: set zone limit has 8 unknown bytes [ 160.161925][ T6839] wlan1: Creating new IBSS network, BSSID e2:da:c5:56:82:eb [ 161.050126][ T7250] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.164853][ T7255] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.529'. [ 163.052281][ T6839] wlan1: Trigger new scan to find an IBSS to join [ 163.131822][ T2939] wlan1: Trigger new scan to find an IBSS to join [ 163.797215][ T7282] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 164.223027][ T6839] wlan1: Creating new IBSS network, BSSID 76:7e:7e:fc:1e:b2 [ 164.381294][ T7282] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.541'. [ 165.225511][ T2939] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 166.404014][ T7312] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.032244][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.561'. [ 168.670787][ T7342] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.762898][ T7342] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.564'. [ 169.134404][ T2939] wlan1: Trigger new scan to find an IBSS to join [ 170.945787][ T7373] FAULT_INJECTION: forcing a failure. [ 170.945787][ T7373] name failslab, interval 1, probability 0, space 0, times 1 [ 171.030383][ T7373] CPU: 1 PID: 7373 Comm: syz.2.574 Not tainted syzkaller #0 [ 171.037788][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.047929][ T7373] Call Trace: [ 171.051542][ T7373] [ 171.054547][ T7373] dump_stack_lvl+0x18c/0x250 [ 171.059314][ T7373] ? show_regs_print_info+0x20/0x20 [ 171.064768][ T7373] ? load_image+0x420/0x420 [ 171.069372][ T7373] ? __might_sleep+0xe0/0xe0 [ 171.074150][ T7373] ? __lock_acquire+0x7d80/0x7d80 [ 171.079281][ T7373] should_fail_ex+0x394/0x4c0 [ 171.084073][ T7373] should_failslab+0x9/0x20 [ 171.088664][ T7373] slab_pre_alloc_hook+0x59/0x300 [ 171.093783][ T7373] ? __get_vm_area_node+0x125/0x370 [ 171.099073][ T7373] __kmem_cache_alloc_node+0x53/0x250 [ 171.104553][ T7373] ? __get_vm_area_node+0x125/0x370 [ 171.109884][ T7373] kmalloc_node_trace+0x26/0xe0 [ 171.114826][ T7373] __get_vm_area_node+0x125/0x370 [ 171.119934][ T7373] __vmalloc_node_range+0x36f/0x1320 [ 171.125277][ T7373] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 171.130881][ T7373] ? __lock_acquire+0x7d80/0x7d80 [ 171.135957][ T7373] ? mark_lock+0x94/0x320 [ 171.140368][ T7373] ? trace_call_bpf+0xc3/0x6c0 [ 171.145225][ T7373] ? trace_call_bpf+0x5e9/0x6c0 [ 171.150123][ T7373] ? trace_call_bpf+0xc3/0x6c0 [ 171.154950][ T7373] ? aa_get_newest_label+0xfd/0x5c0 [ 171.160200][ T7373] ? free_vm_area+0x50/0x50 [ 171.164764][ T7373] ? end_current_label_crit_section+0x170/0x170 [ 171.171073][ T7373] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 171.176721][ T7373] __vmalloc+0x7a/0x90 [ 171.180872][ T7373] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 171.186481][ T7373] bpf_prog_alloc_no_stats+0x46/0x430 [ 171.191943][ T7373] bpf_prog_alloc+0x3d/0x1a0 [ 171.196599][ T7373] bpf_prog_load+0x6b2/0x1610 [ 171.201358][ T7373] ? map_freeze+0x420/0x420 [ 171.205934][ T7373] ? __might_fault+0xaa/0x120 [ 171.210663][ T7373] ? __lock_acquire+0x7d80/0x7d80 [ 171.215745][ T7373] ? file_end_write+0x159/0x250 [ 171.220682][ T7373] ? __might_fault+0xaa/0x120 [ 171.225412][ T7373] ? __might_fault+0xc6/0x120 [ 171.230133][ T7373] ? __might_fault+0xaa/0x120 [ 171.234858][ T7373] ? bpf_lsm_bpf+0x9/0x10 [ 171.239242][ T7373] ? security_bpf+0x7e/0xa0 [ 171.243808][ T7373] __sys_bpf+0x5ba/0x890 [ 171.248110][ T7373] ? bpf_link_show_fdinfo+0x390/0x390 [ 171.253579][ T7373] ? lock_chain_count+0x20/0x20 [ 171.258500][ T7373] __x64_sys_bpf+0x7c/0x90 [ 171.262968][ T7373] do_syscall_64+0x55/0xb0 [ 171.267437][ T7373] ? clear_bhb_loop+0x40/0x90 [ 171.272169][ T7373] ? clear_bhb_loop+0x40/0x90 [ 171.276909][ T7373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.282913][ T7373] RIP: 0033:0x7feb3bd9e0d9 [ 171.287375][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.307070][ T7373] RSP: 002b:00007feb3cc4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.315540][ T7373] RAX: ffffffffffffffda RBX: 00007feb3c025fa0 RCX: 00007feb3bd9e0d9 [ 171.323566][ T7373] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 171.331587][ T7373] RBP: 00007feb3cc4b090 R08: 0000000000000000 R09: 0000000000000000 [ 171.339603][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.347618][ T7373] R13: 00007feb3c026038 R14: 00007feb3c025fa0 R15: 00007ffc9f54a348 [ 171.355690][ T7373] [ 171.364047][ T2939] wlan1: Trigger new scan to find an IBSS to join [ 171.413828][ T7373] syz.2.574: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 171.439115][ T7373] CPU: 0 PID: 7373 Comm: syz.2.574 Not tainted syzkaller #0 [ 171.446494][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.456616][ T7373] Call Trace: [ 171.459966][ T7373] [ 171.462964][ T7373] dump_stack_lvl+0x18c/0x250 [ 171.467731][ T7373] ? show_regs_print_info+0x20/0x20 [ 171.473018][ T7373] ? load_image+0x420/0x420 [ 171.477629][ T7373] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.484221][ T7373] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 171.490996][ T7373] warn_alloc+0x246/0x340 [ 171.495420][ T7373] ? __get_vm_area_node+0x125/0x370 [ 171.500728][ T7373] ? zone_watermark_ok_safe+0x230/0x230 [ 171.506348][ T7373] ? rcu_is_watching+0x15/0xb0 [ 171.511219][ T7373] ? __get_vm_area_node+0x356/0x370 [ 171.516629][ T7373] __vmalloc_node_range+0x394/0x1320 [ 171.521998][ T7373] ? __lock_acquire+0x7d80/0x7d80 [ 171.527100][ T7373] ? mark_lock+0x94/0x320 [ 171.531544][ T7373] ? trace_call_bpf+0xc3/0x6c0 [ 171.536387][ T7373] ? trace_call_bpf+0x5e9/0x6c0 [ 171.541342][ T7373] ? trace_call_bpf+0xc3/0x6c0 [ 171.546202][ T7373] ? aa_get_newest_label+0xfd/0x5c0 [ 171.551476][ T7373] ? free_vm_area+0x50/0x50 [ 171.556063][ T7373] ? end_current_label_crit_section+0x170/0x170 [ 171.562415][ T7373] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 171.568043][ T7373] __vmalloc+0x7a/0x90 [ 171.572196][ T7373] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 171.577825][ T7373] bpf_prog_alloc_no_stats+0x46/0x430 [ 171.583298][ T7373] bpf_prog_alloc+0x3d/0x1a0 [ 171.588038][ T7373] bpf_prog_load+0x6b2/0x1610 [ 171.592839][ T7373] ? map_freeze+0x420/0x420 [ 171.597460][ T7373] ? __might_fault+0xaa/0x120 [ 171.602226][ T7373] ? __lock_acquire+0x7d80/0x7d80 [ 171.607344][ T7373] ? file_end_write+0x159/0x250 [ 171.612282][ T7373] ? __might_fault+0xaa/0x120 [ 171.617044][ T7373] ? __might_fault+0xc6/0x120 [ 171.621793][ T7373] ? __might_fault+0xaa/0x120 [ 171.626549][ T7373] ? bpf_lsm_bpf+0x9/0x10 [ 171.630962][ T7373] ? security_bpf+0x7e/0xa0 [ 171.635555][ T7373] __sys_bpf+0x5ba/0x890 [ 171.639899][ T7373] ? bpf_link_show_fdinfo+0x390/0x390 [ 171.645411][ T7373] ? lock_chain_count+0x20/0x20 [ 171.650381][ T7373] __x64_sys_bpf+0x7c/0x90 [ 171.654896][ T7373] do_syscall_64+0x55/0xb0 [ 171.659385][ T7373] ? clear_bhb_loop+0x40/0x90 [ 171.664141][ T7373] ? clear_bhb_loop+0x40/0x90 [ 171.668908][ T7373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.674963][ T7373] RIP: 0033:0x7feb3bd9e0d9 [ 171.679457][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.699147][ T7373] RSP: 002b:00007feb3cc4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.707651][ T7373] RAX: ffffffffffffffda RBX: 00007feb3c025fa0 RCX: 00007feb3bd9e0d9 [ 171.715707][ T7373] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 171.723751][ T7373] RBP: 00007feb3cc4b090 R08: 0000000000000000 R09: 0000000000000000 [ 171.731791][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.739830][ T7373] R13: 00007feb3c026038 R14: 00007feb3c025fa0 R15: 00007ffc9f54a348 [ 171.747940][ T7373] [ 171.797363][ T7373] Mem-Info: [ 171.800595][ T7373] active_anon:20969 inactive_anon:0 isolated_anon:0 [ 171.800595][ T7373] active_file:10978 inactive_file:39986 isolated_file:0 [ 171.800595][ T7373] unevictable:768 dirty:114 writeback:0 [ 171.800595][ T7373] slab_reclaimable:10095 slab_unreclaimable:94049 [ 171.800595][ T7373] mapped:34790 shmem:16935 pagetables:600 [ 171.800595][ T7373] sec_pagetables:0 bounce:0 [ 171.800595][ T7373] kernel_misc_reclaimable:0 [ 171.800595][ T7373] free:1338772 free_pcp:6342 free_cma:0 [ 171.921140][ T7373] Node 0 active_anon:84276kB inactive_anon:0kB active_file:43912kB inactive_file:159744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140860kB dirty:456kB writeback:0kB shmem:66504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10744kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 171.987123][ T7373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 172.022560][ T7383] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.063031][ T7385] netlink: 'syz.1.577': attribute type 3 has an invalid length. [ 172.083286][ T7385] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.577'. [ 172.140850][ T7373] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.210178][ T7379] netlink: 'syz.3.578': attribute type 21 has an invalid length. [ 172.242548][ T7379] netlink: 128 bytes leftover after parsing attributes in process `syz.3.578'. [ 172.262566][ T7373] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 172.268509][ T7373] Node 0 DMA32 free:1449744kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:85936kB inactive_anon:0kB active_file:43912kB inactive_file:158912kB unevictable:1536kB writepending:456kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:5816kB local_pcp:1652kB free_cma:0kB [ 172.272490][ T7379] netlink: 'syz.3.578': attribute type 4 has an invalid length. [ 172.361570][ T7373] lowmem_reserve[]: 0 0 0 0 0 [ 172.366470][ T7373] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.480900][ T7373] lowmem_reserve[]: 0 0 0 0 0 [ 172.485936][ T7373] Node 1 Normal free:3886880kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19680kB local_pcp:13568kB free_cma:0kB [ 172.598497][ T7373] lowmem_reserve[]: 0 0 0 0 0 [ 172.676973][ T7373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.779926][ T7373] Node 0 DMA32: 1549*4kB (UME) 996*8kB (UME) 593*16kB (UE) 240*32kB (UME) 52*64kB (UE) 9*128kB (UE) 1*256kB (U) 1*512kB (U) 1*1024kB (M) 1*2048kB (U) 344*4096kB (UME) = 1448676kB [ 172.871754][ T7373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 172.943675][ T7373] Node 1 Normal: 240*4kB (UME) 54*8kB (UME) 39*16kB (UME) 60*32kB (UME) 19*64kB (UME) 4*128kB (UE) 1*256kB (U) 2*512kB (UM) 1*1024kB (U) 2*2048kB (UE) 946*4096kB (M) = 3886880kB [ 173.028537][ T7373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.058471][ T7373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.106231][ T7373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.131900][ T12] wlan1: Trigger new scan to find an IBSS to join [ 173.186736][ T7373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.201793][ T7373] 68746 total pagecache pages [ 173.206590][ T7373] 0 pages in swap cache [ 173.243612][ T7373] Free swap = 124996kB [ 173.270152][ T7373] Total swap = 124996kB [ 173.293664][ T7373] 2097051 pages RAM [ 173.360889][ T7373] 0 pages HighMem/MovableOnly [ 173.421705][ T7373] 416958 pages reserved [ 173.432164][ T7373] 0 pages cma reserved [ 173.744630][ T7406] FAULT_INJECTION: forcing a failure. [ 173.744630][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.758599][ T7406] CPU: 1 PID: 7406 Comm: syz.1.587 Not tainted syzkaller #0 [ 173.765942][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.776026][ T7406] Call Trace: [ 173.779332][ T7406] [ 173.782297][ T7406] dump_stack_lvl+0x18c/0x250 [ 173.787052][ T7406] ? show_regs_print_info+0x20/0x20 [ 173.792279][ T7406] ? load_image+0x420/0x420 [ 173.796821][ T7406] ? __might_fault+0xaa/0x120 [ 173.801530][ T7406] ? __lock_acquire+0x7d80/0x7d80 [ 173.806653][ T7406] should_fail_ex+0x394/0x4c0 [ 173.811370][ T7406] _copy_from_user+0x2f/0xe0 [ 173.815990][ T7406] __sys_bpf+0x23e/0x890 [ 173.820261][ T7406] ? bpf_link_show_fdinfo+0x390/0x390 [ 173.825671][ T7406] ? lock_chain_count+0x20/0x20 [ 173.830564][ T7406] __x64_sys_bpf+0x7c/0x90 [ 173.835014][ T7406] do_syscall_64+0x55/0xb0 [ 173.839529][ T7406] ? clear_bhb_loop+0x40/0x90 [ 173.844240][ T7406] ? clear_bhb_loop+0x40/0x90 [ 173.848979][ T7406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.854903][ T7406] RIP: 0033:0x7fec4319e0d9 [ 173.859343][ T7406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.879084][ T7406] RSP: 002b:00007fec440da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.887525][ T7406] RAX: ffffffffffffffda RBX: 00007fec43425fa0 RCX: 00007fec4319e0d9 [ 173.895526][ T7406] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 173.903519][ T7406] RBP: 00007fec440da090 R08: 0000000000000000 R09: 0000000000000000 [ 173.911512][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.919593][ T7406] R13: 00007fec43426038 R14: 00007fec43425fa0 R15: 00007ffe08c84518 [ 173.927602][ T7406] [ 174.091863][ T6839] wlan1: Trigger new scan to find an IBSS to join [ 174.247841][ T6839] wlan1: Creating new IBSS network, BSSID 02:79:76:98:5c:40 [ 174.473162][ T7416] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 174.570882][ T7413] netlink: 'syz.1.589': attribute type 3 has an invalid length. [ 174.590962][ T7413] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.589'. [ 175.137891][ T59] wlan1: Trigger new scan to find an IBSS to join [ 175.550028][ T7433] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.598'. [ 175.565324][ T7439] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.838643][ T7440] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 175.848553][ T7440] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 175.868246][ T7439] netlink: 'syz.1.601': attribute type 3 has an invalid length. [ 175.888665][ T7439] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.601'. [ 176.206878][ T6837] wlan1: Creating new IBSS network, BSSID 9a:c8:1e:43:0d:97 [ 177.127306][ T7474] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.148130][ T7478] netlink: 'syz.3.613': attribute type 3 has an invalid length. [ 177.196058][ T7478] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.613'. [ 177.666607][ T7487] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.618'. [ 178.007882][ T7495] netlink: 'syz.0.622': attribute type 9 has an invalid length. [ 178.121986][ T7495] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.622'. [ 178.153889][ T2939] wlan1: Trigger new scan to find an IBSS to join [ 179.055048][ T7509] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 179.132343][ T7509] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 179.151866][ T7509] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.626'. [ 180.923922][ T7524] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.157946][ T7531] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.185151][ T7531] netlink: 'syz.2.635': attribute type 3 has an invalid length. [ 181.198059][ T7531] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.635'. [ 181.402509][ T7534] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.453246][ T7534] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.636'. [ 181.552343][ T7540] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.607175][ T7540] netlink: 'syz.2.639': attribute type 3 has an invalid length. [ 181.615374][ T7540] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.639'. [ 181.653344][ T7543] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.691370][ T7543] netlink: 'syz.1.640': attribute type 3 has an invalid length. [ 181.710475][ T7543] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.640'. [ 182.215871][ T7555] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 183.131861][ T34] wlan1: Trigger new scan to find an IBSS to join [ 183.588732][ T7552] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.092982][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 184.099591][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 184.134369][ T7577] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.183687][ T7577] netlink: 'syz.0.653': attribute type 3 has an invalid length. [ 184.217152][ T7577] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.653'. [ 184.232627][ T7570] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.648'. [ 184.717759][ T7588] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.800264][ T7588] netlink: 'syz.0.655': attribute type 3 has an invalid length. [ 184.809516][ T7588] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.655'. [ 184.934820][ T7596] netlink: 'syz.1.660': attribute type 3 has an invalid length. [ 184.943189][ T7596] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.660'. [ 185.193567][ T7606] netlink: 'syz.1.665': attribute type 3 has an invalid length. [ 185.225383][ T7606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.665'. [ 185.282423][ T7602] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 185.325932][ T7602] netlink: 'syz.2.663': attribute type 3 has an invalid length. [ 185.337352][ T7602] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.663'. [ 186.100349][ T34] wlan1: Trigger new scan to find an IBSS to join [ 186.100377][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 186.274167][ T7637] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.311877][ T7637] netlink: 'syz.3.678': attribute type 3 has an invalid length. [ 186.327233][ T7637] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.678'. [ 187.133488][ T6837] wlan1: Trigger new scan to find an IBSS to join [ 187.274736][ T7667] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.690'. [ 187.315869][ T7667] netlink: 'syz.0.690': attribute type 2 has an invalid length. [ 187.579167][ T7674] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.610921][ T7674] netlink: 'syz.3.692': attribute type 3 has an invalid length. [ 187.633204][ T7674] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.692'. [ 188.005780][ T7679] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.109758][ T7679] netlink: 'syz.0.702': attribute type 3 has an invalid length. [ 188.189110][ T7679] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.702'. [ 189.060714][ T6837] wlan1: Trigger new scan to find an IBSS to join [ 189.133571][ T59] wlan1: Trigger new scan to find an IBSS to join [ 189.939023][ T7718] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.969673][ T7718] netlink: 'syz.1.708': attribute type 3 has an invalid length. [ 189.979890][ T7718] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.708'. [ 190.092618][ T59] wlan1: Trigger new scan to find an IBSS to join [ 190.182230][ T7725] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 190.189974][ T7725] netlink: 152 bytes leftover after parsing attributes in process `syz.0.712'. [ 190.226618][ T7725] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.342410][ T7745] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.368764][ T7745] netlink: 'syz.0.719': attribute type 3 has an invalid length. [ 191.392187][ T7745] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.719'. [ 191.709441][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.3.723'. [ 191.726425][ T7762] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 191.753338][ T7762] netlink: 6 bytes leftover after parsing attributes in process `syz.3.723'. [ 192.380566][ T7780] delete_channel: no stack [ 192.390988][ T7780] delete_channel: no stack [ 192.538891][ T7784] syzkaller0: entered promiscuous mode [ 192.549674][ T7784] syzkaller0: entered allmulticast mode [ 192.559764][ T7782] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.591631][ T7787] netlink: 'syz.3.730': attribute type 3 has an invalid length. [ 192.599356][ T7787] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.730'. [ 193.369069][ T7793] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.742'. [ 194.092440][ T6839] wlan1: Trigger new scan to find an IBSS to join [ 194.107284][ T6839] wlan1: Trigger new scan to find an IBSS to join [ 194.114788][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 194.505030][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.523064][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.035392][ T12] wlan1: Creating new IBSS network, BSSID b6:b3:66:1d:66:fc [ 195.134484][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 195.270248][ T7822] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.279910][ T7824] netlink: 'syz.2.744': attribute type 3 has an invalid length. [ 195.287694][ T7824] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.744'. [ 195.547571][ T7831] netlink: 'syz.3.746': attribute type 9 has an invalid length. [ 195.555685][ T7833] netlink: 'syz.2.748': attribute type 29 has an invalid length. [ 195.566344][ T7833] netlink: 'syz.2.748': attribute type 29 has an invalid length. [ 195.575989][ T7831] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.746'. [ 195.612689][ T7833] netlink: 'syz.2.748': attribute type 29 has an invalid length. [ 195.682241][ T7833] netlink: 'syz.2.748': attribute type 29 has an invalid length. [ 195.710498][ T7833] netlink: 'syz.2.748': attribute type 29 has an invalid length. [ 195.797781][ T7840] netlink: 'syz.2.748': attribute type 29 has an invalid length. [ 196.215256][ T7844] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.752'. [ 196.690403][ T7850] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.754'. [ 197.040545][ T7854] netlink: set zone limit has 8 unknown bytes [ 197.056589][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 197.063210][ T59] wlan1: Trigger new scan to find an IBSS to join [ 197.752586][ T7874] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.764'. [ 197.967905][ T7879] syz.0.765 uses obsolete (PF_INET,SOCK_PACKET) [ 198.118355][ T6839] wlan1: Trigger new scan to find an IBSS to join [ 198.535387][ T7867] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.550871][ T34] wlan1: Creating new IBSS network, BSSID b2:b2:19:10:e8:da [ 198.558535][ T6839] wlan1: Creating new IBSS network, BSSID 9e:28:58:ef:27:f4 [ 198.567483][ T7871] netlink: 'syz.3.762': attribute type 3 has an invalid length. [ 198.577416][ T7871] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.762'. [ 198.597722][ T7872] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.607765][ T7875] netlink: 'syz.1.763': attribute type 3 has an invalid length. [ 198.621781][ T7875] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.763'. [ 198.656959][ T12] ------------[ cut here ]------------ [ 198.662920][ T12] WARNING: CPU: 1 PID: 12 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 198.672756][ T12] Modules linked in: [ 198.676725][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 198.684237][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.694405][ T12] Workqueue: cfg80211 cfg80211_event_work [ 198.700197][ T12] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 198.706518][ T12] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 16 98 f7 0f 0b eb bf e8 65 16 98 f7 <0f> 0b eb b6 e8 5c 16 98 f7 0f 0b e9 e2 fd ff ff e8 50 16 98 f7 0f [ 198.726709][ T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293 [ 198.733476][ T12] RAX: ffffffff89ef5bbb RBX: dffffc0000000000 RCX: ffff88801a275a00 [ 198.741671][ T12] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 198.749706][ T12] RBP: ffffc90000117af8 R08: ffffffff911ed56f R09: 1ffffffff223daad [ 198.757809][ T12] R10: dffffc0000000000 R11: fffffbfff223daae R12: ffff88805deacd10 [ 198.766012][ T12] R13: ffff88807917b618 R14: 1ffff92000022f4c R15: 000000000000001f [ 198.774105][ T12] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 198.783440][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.790085][ T12] CR2: 0000000000000000 CR3: 0000000063b38000 CR4: 00000000003506e0 [ 198.798174][ T12] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 198.806278][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 198.815090][ T12] Call Trace: [ 198.818427][ T12] [ 198.821575][ T12] ? trace_rdev_return_void+0x1c0/0x1c0 [ 198.827210][ T12] cfg80211_process_wdev_events+0x396/0x500 [ 198.833316][ T12] cfg80211_process_rdev_events+0xa1/0x110 [ 198.839197][ T12] cfg80211_event_work+0x2f/0x40 [ 198.844291][ T12] ? process_scheduled_works+0x975/0x1600 [ 198.850081][ T12] process_scheduled_works+0xa60/0x1600 [ 198.855762][ T12] ? worker_attach_to_pool+0x370/0x370 [ 198.861428][ T12] ? assign_work+0x3cc/0x5d0 [ 198.866096][ T12] worker_thread+0xa5e/0xfe0 [ 198.870789][ T12] kthread+0x2fa/0x390 [ 198.875029][ T12] ? pr_cont_work+0x550/0x550 [ 198.879775][ T12] ? kthread_blkcg+0xd0/0xd0 [ 198.884501][ T12] ret_from_fork+0x48/0x80 [ 198.888978][ T12] ? kthread_blkcg+0xd0/0xd0 [ 198.893807][ T12] ret_from_fork_asm+0x11/0x20 [ 198.898657][ T12] [ 198.901804][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.909200][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 198.916608][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.926690][ T12] Workqueue: cfg80211 cfg80211_event_work [ 198.932476][ T12] Call Trace: [ 198.935778][ T12] [ 198.938764][ T12] dump_stack_lvl+0x18c/0x250 [ 198.943482][ T12] ? show_regs_print_info+0x20/0x20 [ 198.948799][ T12] ? load_image+0x420/0x420 [ 198.953345][ T12] panic+0x2ca/0x720 [ 198.957282][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 198.961834][ T12] ? ret_from_fork_asm+0x11/0x20 [ 198.966811][ T12] __warn+0x2e0/0x470 [ 198.970841][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 198.976470][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 198.982054][ T12] report_bug+0x2be/0x4f0 [ 198.986414][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 198.991996][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 198.997572][ T12] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 199.003151][ T12] handle_bug+0xcf/0x120 [ 199.007430][ T12] exc_invalid_op+0x1a/0x50 [ 199.011972][ T12] asm_exc_invalid_op+0x1a/0x20 [ 199.016854][ T12] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 199.023049][ T12] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 16 98 f7 0f 0b eb bf e8 65 16 98 f7 <0f> 0b eb b6 e8 5c 16 98 f7 0f 0b e9 e2 fd ff ff e8 50 16 98 f7 0f [ 199.042691][ T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293 [ 199.048888][ T12] RAX: ffffffff89ef5bbb RBX: dffffc0000000000 RCX: ffff88801a275a00 [ 199.056901][ T12] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 199.064905][ T12] RBP: ffffc90000117af8 R08: ffffffff911ed56f R09: 1ffffffff223daad [ 199.072906][ T12] R10: dffffc0000000000 R11: fffffbfff223daae R12: ffff88805deacd10 [ 199.080900][ T12] R13: ffff88807917b618 R14: 1ffff92000022f4c R15: 000000000000001f [ 199.088903][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 199.094510][ T12] ? trace_rdev_return_void+0x1c0/0x1c0 [ 199.100102][ T12] cfg80211_process_wdev_events+0x396/0x500 [ 199.106035][ T12] cfg80211_process_rdev_events+0xa1/0x110 [ 199.111881][ T12] cfg80211_event_work+0x2f/0x40 [ 199.116853][ T12] ? process_scheduled_works+0x975/0x1600 [ 199.122614][ T12] process_scheduled_works+0xa60/0x1600 [ 199.128222][ T12] ? worker_attach_to_pool+0x370/0x370 [ 199.133722][ T12] ? assign_work+0x3cc/0x5d0 [ 199.138347][ T12] worker_thread+0xa5e/0xfe0 [ 199.142999][ T12] kthread+0x2fa/0x390 [ 199.147092][ T12] ? pr_cont_work+0x550/0x550 [ 199.151801][ T12] ? kthread_blkcg+0xd0/0xd0 [ 199.156441][ T12] ret_from_fork+0x48/0x80 [ 199.160891][ T12] ? kthread_blkcg+0xd0/0xd0 [ 199.165512][ T12] ret_from_fork_asm+0x11/0x20 [ 199.170321][ T12] [ 199.173941][ T12] Kernel Offset: disabled [ 199.178340][ T12] Rebooting in 86400 seconds..