last executing test programs: 5.177876956s ago: executing program 3 (id=2123): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x200000, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a86080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000845cf2e0474b771b66b37dea1734d6c602defe12616166f9f8601b55fbb479ed3889bbef86e76735e86649fe9bdb93e45b4975e46021f95e94a072c307323a527d82d02f55047a89337de6829be6317ee42b080baea924f74b1ab52480ad7afd07e3f7efc5346ab3edcc3d32cd76cae6619602bd7dbc1977574172e6f8e917310ca01a11afd7247e8a5855b4cf484d2ec75340bfd9732c787a65cf3704161f83af", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x802000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x20000080) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r1, 0x0, 0x44010) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.641890237s ago: executing program 3 (id=2129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000240)="c855", &(0x7f0000000280)=""/237, &(0x7f0000002a00)="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", 0x0, 0x1, r0, 0x4}, 0x38) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x21100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10806, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000600)="9747fc8733f0042e5447ee0dd20705d3d62f24478a22e2a62d8e28399153ad128b94ab70a8858b79bbbf6fe733898d356fda4de60d2a63d4d3db1348f6d5c510d20fb103c0cf4c4778b2764d6a5b032b97baa6c193bae960d9eda842c7b82406c5c30c68ce79898ee60d55bd75bbe8074ea695243f5517b71656d729e0fcb786386c657cdf273f956f3f90f236cb795b20f71c5dc2872e6bc1be3c9c3905ac37d2a3d4f1a467f36991b19f63eda768949c194164d00c618529b8c8e954d981706ce31fa6b2aed72f53b0bc7d02e3b47d4815a5ccc0e83ad5bd7de23e62778c33b50923f0a99456e7d32b9c474a4ec6d4514a1899dc1d648d", &(0x7f0000000700)=""/229}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000007006f440000000000006b0a00fe000000007303000000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050cdcfc92f5daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf9bf04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff4e2c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc8230000065937f36f6490eb033b1ce0d4922701cb42aa86ee11cd5950b58ebffffae2aba1a21410e6cb3835bc2c19c9dacbb5f836d1c0de069c20c55fa567859aca8be3afdc3a14779e9181a382831580eac154d314974d209c00896548b04f80d68da1c7ecdfea1e05d0f442b81c4f2a38ae1f43688aff1d3eb14112da5d5289bedeeff7093a12faf47f55bd7ffc82893600042e761ec18de4cd287e176befc4af4063e5f091f8a50cbf02ad70682c0131d616ff6d999fc6fba6e9d4a3fc4e6430aca493d38db18ef4b2d46a22c1dc14910a49126684e453d30ea51dc537a0c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 4.136722567s ago: executing program 3 (id=2134): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000400000001000003"], &(0x7f0000000580)=""/151, 0x35, 0x97, 0x1}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000001000)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0xa, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000402100000000000002000000978af8fff0ffffff157b3000fcffffff0532f8ff1000000018690000050000000000e4ffc3008000185700000f00000000000000000000009500000000000000b85b1dd93cfac23219c942829d11aa63e17779094384192cbbc1dcb00b293c048b9ce24486c01eba55d48613075e97cb7d57b57f88e54ee0bc06ebdaa22e70472d3c762ace89700ee1ff7647da9c7fd44f74e99dff4d87259f77df2090e7e1572f9aed"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x76, &(0x7f0000000280)=""/118, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[r1, r1], &(0x7f0000000480)=[{0x0, 0x4, 0x1, 0x8}, {0x200002, 0x5, 0x8, 0x6}, {0x0, 0x4, 0xe, 0xc}, {0x3, 0x2, 0x9, 0x672b5b9dfec99198}, {0x3, 0x3, 0xe, 0xc}, {0x1, 0x1, 0xb, 0xc}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], 0x0, 0x2a, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x15, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000a80)='GPL\x00', 0x10001, 0xa6, &(0x7f0000000ac0)=""/166, 0x40f00, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x6, 0xffffffff, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[r1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x7a, 0x4c, &(0x7f00000005c0)="ca71b457290bbcf6d654d429aff9e35e9167f38adc8d29e7bb9dfb74c8c268eb1883b968c41dd69c4719c98e7232f1beac32e88afcdae6c7f9fec720dbbd2b9756cb2860f73bd1212508906744244e63d57211e75f45ebc589276bb7dac1ef729cc2ef530b2af06d9ae0e61808014284fe50eb4bdd73224bb89a", &(0x7f0000000680)=""/76, 0x101, 0x0, 0x31, 0x79, &(0x7f0000000700)="6d3607500509de76e1fc6c5342dba159dee438d30288459492756d753202368b63b9e23a1c3193dd912d16def82a5c542c", &(0x7f0000000740)="f533b236006f6530d151bf1edce35b8bab831aa50f3a2f404476f35addab4cb17e7452a0214fc5756a95d64e0b18eb0c11763f8ca742f388686820d252411a03ea3ec473f5a3443af27d71b839ec25dc78dfccc09ecd0fc9d4a5a662bda1aa2f3e6e058d3c61a83b499dbeadf5390af4c3748561ff10323fb2", 0x3, 0x0, 0x800}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, r7, 0x1f, 0x2011, r7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000020000160000000000400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x48891) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r9, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 3.562675021s ago: executing program 4 (id=2137): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000300)=0xfffffffb) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000300)=0xfffffffb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00104006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100", 0x9b}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00104006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100", 0x9b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b37, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x10, 0x4, 0x2, 0x4, 0xfffffffffffffffe, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="1400000021000b12d25a805bb98222f90524fc60", 0x14}], 0x1}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 3.466936116s ago: executing program 3 (id=2139): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x200000, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a86080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000845cf2e0474b771b66b37dea1734d6c602defe12616166f9f8601b55fbb479ed3889bbef86e76735e86649fe9bdb93e45b4975e46021f95e94a072c307323a527d82d02f55047a89337de6829be6317ee42b080baea924f74b1ab52480ad7afd07e3f7efc5346ab3edcc3d32cd76cae6619602bd7dbc1977574172e6f8e917310ca01a11afd7247e8a5855b4cf484d2ec75340bfd9732c787a65cf3704161f83af", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x802000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x20000080) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r1, 0x0, 0x44010) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.452305357s ago: executing program 1 (id=2140): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000200000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x21) 3.329095985s ago: executing program 0 (id=2141): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d711869000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x64040, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000007c0)=r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0xdab}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x14, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r3, r4, r5], &(0x7f0000000640)=[{0x4, 0x4, 0x5, 0x7}, {0x3, 0x1, 0xa, 0x8}, {0x4, 0x3, 0x1, 0xf}, {0x1, 0x3, 0xf, 0x4}, {0x1, 0x4, 0xf, 0x8}, {0x1, 0x3, 0xb, 0xf}], 0x10, 0x2}, 0x94) 3.218791391s ago: executing program 1 (id=2143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000019001800"/21], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x44) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x0) 3.07021032s ago: executing program 3 (id=2145): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e4", 0x37}, {&(0x7f0000001740)="ba733b3229f151bda96b0d7a9951e944755a20662ef250c2939ab8d1dc", 0x1d}], 0x2}, 0x24000008) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x4e, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000080)="66a6060c3aa2d5c200095117812a1eada6e7f67d1e7cf722dea4bd1c265e192014a232", 0x23}, {&(0x7f0000000540)="012fda579f922ea31bb967389d40c534dbf1d90a9d2d3d55feef85951257", 0x1e}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000580)="1bdb71b3dfe49e1f8c19a6fd74e2fddcc4867137b2c5baf3ced05ea8c0f6c42500e7cfe866c9e7f78995ef0b9c2bff1e68", 0x31}, {0x0}, {&(0x7f0000000840)}, {&(0x7f00000008c0)="26df73bc47df8b8c058c2700189d3722bcf74a004d43cb611db85361e2a005afab97dcb6bcdf7bcc43ad177d77bd9cd9174f2a567850fe479fb97e390e160b2ad3b95f7c99e412b2c90d3af2af5f509b1a160d0b", 0x54}, {&(0x7f00000009c0)="32684ad14c4988a15e370e8c9a9275f8f03c6f2bc04c544ea5f4d775638e2593face0386a2d8ca7927ad7edd3a1e04df0a5cf638dce25f6051970cdb591b52f61c57", 0x42}, {&(0x7f0000000a80)="47ee5214566e5fca7615449eeaed0ba15437167c75c57527b74a35edf2e42d83ee2294bf704c226257dd05567e34", 0x2e}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r6]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110, 0x4000}, 0x20000000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x4, 0x81, 0x8, 0x0, 0x3, 0x4100, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x400}, 0x8008, 0x1000, 0x0, 0x5, 0x1, 0xfffffffb, 0xfffc, 0x0, 0x8000, 0x0, 0x83}, r7, 0x10, 0xffffffffffffffff, 0x1) 2.322621593s ago: executing program 1 (id=2148): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x4000000830e}, 0x10a9c8, 0x3, 0xfffffffe, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x18, 0x7, 0x0) socket$kcm(0xa, 0x3, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x2, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f00000005c0)="7d21ac1d753728a258ae0e96b012f183ffe744976b96675e9c01292b6085d2ef9f955499f5306b476a8d78b030d1823877d8dacd8086a1809d495363097d30dbd206ec5d5c3bebc4f15a17a90879fd2cb1d475616730d1af9bfce70dd6d75e7aa6322645a280faf7ea8f180a57993a19be811d6e169ea97045951d1d182e9e7f0adc14b4f11ef5fd3ccc98e03f06233a5da916dc1867", &(0x7f0000002400)=""/4096}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) socket$kcm(0x2, 0x1, 0x84) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = getpid() r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x0, 0xfffffffd, 0x6, 0x4, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, r4, 0xffffffffffffffff, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x420780, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb011f18000000000000000c0000e80000000000003823c24ed2cc7b448ab2db056b2f15ab16ba896c1009aa93d4536077f8c9fc7ffee7abc124721fa8644c70aac5a2984fd0392c6337"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4005d31, 0x14984, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0xffff}, 0x0, 0x0, r5, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r7}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) close(r2) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x87, 0x100000001}, 0x113041, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r8, 0x0) 2.246270758s ago: executing program 4 (id=2149): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x78}, 0x10010}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) close(r2) 2.181365812s ago: executing program 2 (id=2150): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xc3cb) (async) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x84908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.157541613s ago: executing program 0 (id=2151): r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2c, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, r2, 0x29}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r3}, 0xc) 2.109554706s ago: executing program 3 (id=2152): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x4, 0x0, 0x1000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021c080406037c09e8fe55a10a0015400200142603600e122f00160004000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ed50c3e7867a9d3026cd0a23394d78c24cbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.068720139s ago: executing program 4 (id=2153): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x203}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)={'vlan1', 0x32, 0x38}, 0x8) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x7, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, 0x0, 0xfc) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d80000001a0081044e81f782db4cb9040a1d0800fe", 0x15}], 0x1}, 0x4004840) sendmsg$inet(r4, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000800000f9000055dfa3b232743d9827", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd0002020c600e41b0000900ac00060311000000040005000a0012000048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) gettid() openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.857126321s ago: executing program 2 (id=2154): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000210000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x21) 1.856708781s ago: executing program 0 (id=2155): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x200000, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a86080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000845cf2e0474b771b66b37dea1734d6c602defe12616166f9f8601b55fbb479ed3889bbef86e76735e86649fe9bdb93e45b4975e46021f95e94a072c307323a527d82d02f55047a89337de6829be6317ee42b080baea924f74b1ab52480ad7afd07e3f7efc5346ab3edcc3d32cd76cae6619602bd7dbc1977574172e6f8e917310ca01a11afd7247e8a5855b4cf484d2ec75340bfd9732c787a65cf3704161f83af", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x802000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x20000080) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r1, 0x0, 0x44010) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.474332473s ago: executing program 2 (id=2156): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, &(0x7f0000000040), 0xcf) r5 = socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYRESDEC=r3, @ANYRES16=r8, @ANYRESOCT=r2, @ANYRES16=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.331381731s ago: executing program 0 (id=2157): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c080000000900"/40, 0x5dc}], 0x1}, 0x23030000) r4 = getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0xfffffffffffffeca, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4d35, 0x7b749c3798b87d7a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffd, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x8000, 0x9, 0x3, 0x5, 0x6, 0x0, 0x0, 0x0, 0x18c0d2c4, 0x0, 0x10}, r4, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.225017698s ago: executing program 1 (id=2158): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002285000000a800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff8}, 0x2f) 1.224134348s ago: executing program 4 (id=2159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000019001800"/21], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x44) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x0) 1.131066234s ago: executing program 0 (id=2160): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="06ff03076844babeb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000002c0)=""/116, 0x74}, {0x0}], 0x3}, 0x40010001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4084, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000100), &(0x7f0000000440)=r2}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) 1.095616955s ago: executing program 2 (id=2161): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x34, 0x5, 0xc, 0x2, 0x0, 0x10001, 0x2000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x5, 0xcd4}, 0x200, 0x0, 0x9, 0x4, 0x7fff, 0xcca, 0x3ff, 0x0, 0xc, 0x0, 0x7f}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) 1.069145287s ago: executing program 1 (id=2162): socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@enum={0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile]}, {0x0, [0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000140)=""/4096, 0x46, 0x1000, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000079122000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)='%pI4 \x00'}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x9, 0x0, 0x0, 0x0, 0x5, 0xe214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r4, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/4081, 0xff1}}, 0x10) (async) socket$kcm(0x23, 0x2, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f00000029c0)}, 0xc9) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) (async) sendmsg$kcm(r5, &(0x7f0000001340)={&(0x7f0000001180)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x3, 0x0, 0x3, {0xa, 0x4e20, 0x67, @mcast1, 0x1}}}, 0x80, &(0x7f0000001200), 0x0, &(0x7f0000001240)=[{0x88, 0x10a, 0x3, "fc6121909cc7c2f0c301796cec43f25236ea35a308255abda9ce2e1aa15e8bcd2cacbcbd2e3725197ea3e1181015a72e3dcdf326ba5441e0997c4994cca58474b582c821d70f9c9cda19887c4156b11f46fc3e2eac7235661e88014ec1362db5433f15f78b34eba0b3cd5198fdb74d375d2b3536d9778006"}, {0x40, 0x117, 0x45, "0c2e21e12260733514bd480cc6684399b0749f37d70ba0099f3a55c64ba2e79e72eb7f7918ac4636340e"}], 0xc8}, 0x4091) (async) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 1.068322347s ago: executing program 4 (id=2163): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e4", 0x37}, {&(0x7f0000001740)="ba733b3229f151bda96b0d7a9951e944755a20662ef250c2939ab8d1dc", 0x1d}], 0x2}, 0x24000008) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x4e, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000080)="66a6060c3aa2d5c200095117812a1eada6e7f67d1e7cf722dea4bd1c265e192014a232", 0x23}, {&(0x7f0000000540)="012fda579f922ea31bb967389d40c534dbf1d90a9d2d3d55feef85951257", 0x1e}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000580)="1bdb71b3dfe49e1f8c19a6fd74e2fddcc4867137b2c5baf3ced05ea8c0f6c42500e7cfe866c9e7f78995ef0b9c2bff1e68", 0x31}, {0x0}, {&(0x7f0000000840)}, {&(0x7f00000008c0)="26df73bc47df8b8c058c2700189d3722bcf74a004d43cb611db85361e2a005afab97dcb6bcdf7bcc43ad177d77bd9cd9174f2a567850fe479fb97e390e160b2ad3b95f7c99e412b2c90d3af2af5f509b1a160d0b", 0x54}, {&(0x7f00000009c0)="32684ad14c4988a15e370e8c9a9275f8f03c6f2bc04c544ea5f4d775638e2593face0386a2d8ca7927ad7edd3a1e04df0a5cf638dce25f6051970cdb591b52f61c57", 0x42}, {&(0x7f0000000a80)="47ee5214566e5fca7615449eeaed0ba15437167c75c57527b74a35edf2e42d83ee2294bf704c226257dd05567e34", 0x2e}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r6]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110, 0x4000}, 0x20000000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x4, 0x81, 0x8, 0x0, 0x3, 0x4100, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x400}, 0x8008, 0x1000, 0x0, 0x5, 0x1, 0xfffffffb, 0xfffc, 0x0, 0x8000, 0x0, 0x83}, r7, 0x10, 0xffffffffffffffff, 0x1) 761.078195ms ago: executing program 2 (id=2164): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x78}, 0x10010}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) close(r2) 143.101321ms ago: executing program 1 (id=2165): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20040817) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270310a8cc79500828fd6dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae772d2dfdc5e7fe357cdc53134f29b12bf56da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17000000", 0x72}, {&(0x7f0000000cc0)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x48b}], 0x3}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={0xffffffffffffffff, r2, 0x4}, 0x10) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0xd01) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x110, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0xd}, 0xa, 0x1, 0x100007, 0x3, 0x81, 0x5, 0x5, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xa, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 115.858633ms ago: executing program 2 (id=2166): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0x8, 0x7, 0x5f, 0x5, 0x0, 0x4, 0x4a401, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xcf, 0x1, @perf_config_ext={0x9, 0x7}, 0x1, 0xfffffffffffffffc, 0xd7, 0x6, 0x6, 0xffff, 0x8, 0x0, 0x3b, 0x0, 0x2}) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x11, 0x0, 0x40000) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r4}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x101, 0x0}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x11, &(0x7f0000000440)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x22}, @alu={0x4, 0x1, 0xc, 0xb, 0x8, 0x8, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x24, &(0x7f0000000540)=""/36, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x3, 0x40, 0xa75}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x1, 0x1, 0x1, 0x7}, {0x1, 0x3, 0xa, 0xb}, {0x1, 0x4, 0x4, 0x4}, {0x1, 0x2, 0x8, 0x5}, {0x4, 0x2, 0x6, 0x8}, {0x4, 0x5, 0x7, 0xa}, {0x5, 0x3, 0x5, 0xb}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6b76b55c, 0x0, 0x0, 0x0, 0x7}, [@func, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x80, 0xd6, &(0x7f0000000200)=""/214, 0x41100, 0x31, '\x00', r8, @fallback=0x36, r9, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x5, &(0x7f0000000740)=[0xffffffffffffffff], &(0x7f0000000780)=[{0x80000000, 0x1, 0x2, 0x2}, {0x0, 0x5, 0xb, 0x5}, {0x0, 0x4, 0xf, 0xc}, {0x4, 0x4, 0x8, 0x2}, {0x1, 0x3, 0xa, 0x9}], 0x10, 0x7}, 0x94) 29.749598ms ago: executing program 0 (id=2167): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x200000, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a86080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000845cf2e0474b771b66b37dea1734d6c602defe12616166f9f8601b55fbb479ed3889bbef86e76735e86649fe9bdb93e45b4975e46021f95e94a072c307323a527d82d02f55047a89337de6829be6317ee42b080baea924f74b1ab52480ad7afd07e3f7efc5346ab3edcc3d32cd76cae6619602bd7dbc1977574172e6f8e917310ca01a11afd7247e8a5855b4cf484d2ec75340bfd9732c787a65cf3704161f83af", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x802000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x20000080) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r1, 0x0, 0x44010) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 4 (id=2168): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000040000061109a000000000062050000000000009500000000000000b12424501f2c565eaa10e88f2fb55ccf9989e56b4cc6d1214b6a3a8212422f30fde7f0e4d338d97b1c1c7cac7b2fb1e2f4dda34bbf7c429de549283c65e95b9cfbbaae8570a6eacbb33d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x2, 0x6, 0x138, 0x1, 0xd, '\x00', 0x0, r0, 0x3, 0x1, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000040000061109a000000000062050000000000009500000000000000b12424501f2c565eaa10e88f2fb55ccf9989e56b4cc6d1214b6a3a8212422f30fde7f0e4d338d97b1c1c7cac7b2fb1e2f4dda34bbf7c429de549283c65e95b9cfbbaae8570a6eacbb33d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x2, 0x6, 0x138, 0x1, 0xd, '\x00', 0x0, r0, 0x3, 0x1, 0x2, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) (async) kernel console output (not intermixed with test programs): ETDEV_CHANGE): vlan1: link becomes ready [ 59.810082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.819511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.828050][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.835143][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.851030][ T4198] device veth0_vlan entered promiscuous mode [ 59.860187][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.871035][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.881651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.891591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.900425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.909749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.918181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.933214][ T4198] device veth1_vlan entered promiscuous mode [ 59.951596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.961055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.969473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.979043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.987917][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.995431][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.003811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.016300][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.028992][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.030736][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 60.042657][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 60.070179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.078426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.088173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.096875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.105346][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 60.109959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.112041][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 60.122307][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.127068][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 60.132651][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.147091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.155919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.164321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.174284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.182875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.192260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.200560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.209374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.218300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.227104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.235540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.246727][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.268019][ T4198] device veth0_macvtap entered promiscuous mode [ 60.285204][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.294197][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.312708][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.331207][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.352466][ T4198] device veth1_macvtap entered promiscuous mode [ 60.394129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.403084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.413423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.422529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.432558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.443365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.452369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.461737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.471427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.479705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.488195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.517722][ T4185] device veth0_vlan entered promiscuous mode [ 60.528015][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.554405][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.566321][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.580153][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.593843][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.603544][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.612934][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.622031][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.630655][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.644178][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.654435][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.683185][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.692845][ T4185] device veth1_vlan entered promiscuous mode [ 60.704151][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.713555][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.723080][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.731195][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.746970][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.754427][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.774030][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.784132][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.793126][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.802092][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.826653][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.874349][ T4185] device veth0_macvtap entered promiscuous mode [ 60.919022][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.929795][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.940150][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.974179][ T4185] device veth1_macvtap entered promiscuous mode [ 61.021421][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.030005][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.037713][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.051830][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.062810][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.074082][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.093159][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.104029][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.116234][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.124046][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.140942][ T4188] device veth0_vlan entered promiscuous mode [ 61.182247][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.194249][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.209105][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.225599][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.233661][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.261220][ T4188] device veth1_vlan entered promiscuous mode [ 61.268776][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.277312][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.285718][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.295243][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.303813][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.314301][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.332344][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.341339][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.354803][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.366883][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.378679][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.388382][ T1430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.397714][ T1430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.430283][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.438608][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.446987][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.459763][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.473434][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.482607][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.491698][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.500710][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.528990][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.542939][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.553491][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.570237][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.579068][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.587225][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.595678][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.603345][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.615304][ T4184] device veth0_vlan entered promiscuous mode [ 61.622015][ T4192] device veth0_vlan entered promiscuous mode [ 61.678190][ T4188] device veth0_macvtap entered promiscuous mode [ 61.702135][ T4192] device veth1_vlan entered promiscuous mode [ 61.710987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.723247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.732872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.742032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.757047][ T4184] device veth1_vlan entered promiscuous mode [ 61.771461][ T4188] device veth1_macvtap entered promiscuous mode [ 61.784557][ C1] hrtimer: interrupt took 64477 ns [ 61.842291][ T4291] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 61.851966][ T4291] device hsr0 entered promiscuous mode [ 61.870144][ T4291] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 61.882404][ T4291] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 61.900786][ T4291] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 61.922444][ T4291] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 61.938584][ T4192] device veth0_macvtap entered promiscuous mode [ 61.970669][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.991481][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.004081][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.016982][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.030068][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.051050][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.060217][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.060477][ T4291] syz.1.2 (4291) used greatest stack depth: 20632 bytes left [ 62.068847][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.085128][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.093550][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.103869][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.105320][ T4173] Bluetooth: hci3: command 0x040f tx timeout [ 62.114000][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.133847][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 62.149111][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.158578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.168051][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.177566][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.188396][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 62.196911][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 62.198083][ T4192] device veth1_macvtap entered promiscuous mode [ 62.203150][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 62.227196][ T4184] device veth0_macvtap entered promiscuous mode [ 62.242725][ T4296] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6'. [ 62.264141][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.276205][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.286491][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.297374][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.310603][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.328014][ T4184] device veth1_macvtap entered promiscuous mode [ 62.340576][ T4297] device bridge_slave_1 left promiscuous mode [ 62.348070][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.363707][ T4297] device bridge_slave_0 left promiscuous mode [ 62.371663][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.455913][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.464365][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.473603][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.483429][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.492076][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.504236][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.513709][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.522703][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.531773][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.550883][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.561540][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.571798][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.582483][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.604436][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.616248][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.627605][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.647502][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.656187][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.666322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.676267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.686758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.710777][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.722006][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.732820][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.744068][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.754867][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.765777][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.776109][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.786805][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.799460][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.810455][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.821401][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.831882][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.843109][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.853244][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.863965][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.876196][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.888870][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.900012][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.911143][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.922558][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.932796][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.943598][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.953722][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.965363][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.976581][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.006686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.023548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.034863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.043519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.055521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.067354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.081001][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.090569][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.099742][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.108702][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.133174][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.142673][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.146126][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.154912][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.169205][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.178249][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.204072][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.286312][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.330537][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.352852][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.426009][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.440376][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.448611][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.472506][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.492850][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.493734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.510521][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.556214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.578660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.610505][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.651493][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.689459][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.693919][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.712971][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.752864][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.971661][ T4311] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 64.127974][ T4313] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 64.178403][ T4313] device hsr0 entered promiscuous mode [ 64.192578][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 64.216189][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 64.265068][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 64.284132][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 64.341387][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 64.367845][ T4313] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 64.395249][ T4313] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 64.487872][ T4313] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 64.617061][ T4313] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 65.622977][ T4313] syz.4.5 (4313) used greatest stack depth: 20568 bytes left [ 66.745081][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 67.140738][ T4363] netlink: 'syz.2.16': attribute type 9 has an invalid length. [ 67.271611][ T4367] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.19'. [ 67.286110][ T4363] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.16'. [ 67.327412][ T4362] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18'. [ 67.739256][ T4373] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.20'. [ 68.002160][ T4375] device bridge_slave_1 left promiscuous mode [ 68.025455][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.339538][ T4375] device bridge_slave_0 left promiscuous mode [ 68.358939][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.566622][ T4385] netlink: 'syz.1.24': attribute type 10 has an invalid length. [ 68.591963][ T4385] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 68.637517][ T4385] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 68.788297][ T4385] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 68.892508][ T4385] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 69.525665][ T4405] netlink: 'syz.4.30': attribute type 10 has an invalid length. [ 69.537416][ T4405] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 69.573061][ T4405] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 69.821606][ T4405] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 70.115949][ T4405] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 78.457762][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.464424][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.488878][ T155] wlan1: Trigger new scan to find an IBSS to join [ 78.878602][ T4413] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 79.074810][ T4423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33'. [ 79.619636][ T9] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 80.664328][ T4456] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.39'. [ 80.728106][ T4460] netlink: 'syz.4.41': attribute type 10 has an invalid length. [ 80.770985][ T4460] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 80.812122][ T4460] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 80.845054][ T4460] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 80.869028][ T4460] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 82.057063][ T1108] cfg80211: failed to load regulatory.db [ 82.827178][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 83.310390][ T4507] raw_sendmsg: syz.3.54 forgot to set AF_INET. Fix it! [ 83.407491][ T4507] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.54'. [ 83.477921][ T4512] netlink: 'syz.2.56': attribute type 10 has an invalid length. [ 83.515551][ T4514] netlink: 'syz.1.55': attribute type 29 has an invalid length. [ 83.713710][ T4512] device hsr0 entered promiscuous mode [ 84.018666][ T4512] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.072074][ T4512] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 84.084802][ T4512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 84.114881][ T4512] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 84.141676][ T4514] netlink: 'syz.1.55': attribute type 29 has an invalid length. [ 84.204959][ T4521] netlink: 'syz.0.57': attribute type 12 has an invalid length. [ 84.265401][ T4521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.57'. [ 84.445917][ T4527] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 84.479509][ T4512] syz.2.56 (4512) used greatest stack depth: 19544 bytes left [ 85.919254][ T4570] tun0: tun_chr_ioctl cmd 1074025692 [ 86.080072][ T4570] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 86.125139][ T4570] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.215776][ T4570] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 86.275339][ T4570] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 86.389524][ T4570] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 86.771150][ T4591] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.77'. [ 86.825698][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 86.894403][ T4595] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.78'. [ 86.931940][ T4599] device bridge_slave_1 left promiscuous mode [ 86.942306][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.978512][ T4599] device bridge_slave_0 left promiscuous mode [ 86.990375][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.102317][ T4607] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 87.199709][ T4607] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 87.229442][ T4611] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 88.267388][ T4641] netlink: 'syz.1.91': attribute type 10 has an invalid length. [ 88.307148][ T4641] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.351879][ T4641] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 88.426362][ T4641] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.475322][ T4641] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 89.218032][ T4662] netlink: 'syz.0.96': attribute type 29 has an invalid length. [ 89.533692][ T4658] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 89.664595][ T4664] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 89.708740][ T4662] netlink: 'syz.0.96': attribute type 29 has an invalid length. [ 91.544346][ T4709] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.109'. [ 91.643562][ T4709] syz.3.109 (4709) used greatest stack depth: 17008 bytes left [ 91.760882][ T4713] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.938790][ T4718] netlink: 'syz.3.112': attribute type 27 has an invalid length. [ 92.025466][ T4718] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.112'. [ 93.809593][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 93.849019][ T4770] netlink: 'syz.2.124': attribute type 21 has an invalid length. [ 94.147009][ T4775] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 95.290034][ T4812] device bridge_slave_1 left promiscuous mode [ 95.337365][ T4812] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.441507][ T4812] device bridge_slave_0 left promiscuous mode [ 95.484844][ T4812] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.849709][ T4806] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.137'. [ 95.894713][ T4831] netlink: 'syz.2.143': attribute type 3 has an invalid length. [ 95.903549][ T4831] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.143'. [ 95.985762][ T4828] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 96.156387][ T4839] netlink: 'syz.1.144': attribute type 3 has an invalid length. [ 96.176773][ T4839] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.144'. [ 98.354206][ T4894] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 98.633524][ T4908] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.161'. [ 98.759703][ T145] wlan1: Trigger new scan to find an IBSS to join [ 98.759740][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 98.835726][ T4913] netlink: 'syz.3.165': attribute type 21 has an invalid length. [ 99.142255][ T4927] Zero length message leads to an empty skb [ 99.334267][ T4923] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.170'. [ 99.587283][ T4924] device syzkaller0 entered promiscuous mode [ 99.835126][ T4275] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 100.761752][ T145] wlan1: Trigger new scan to find an IBSS to join [ 101.171566][ T4962] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 101.295838][ T4964] netlink: 'syz.1.181': attribute type 21 has an invalid length. [ 101.609095][ T4960] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 101.818757][ T4973] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.185'. [ 102.229249][ T4987] netlink: 148 bytes leftover after parsing attributes in process `syz.4.190'. [ 102.462918][ T5000] netlink: 140 bytes leftover after parsing attributes in process `syz.1.188'. [ 102.736664][ T5006] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 103.602468][ T5026] netlink: 'syz.0.203': attribute type 19 has an invalid length. [ 103.644932][ T5026] netlink: 156 bytes leftover after parsing attributes in process `syz.0.203'. [ 103.793909][ T4330] wlan1: Trigger new scan to find an IBSS to join [ 104.405975][ T5045] netlink: 10 bytes leftover after parsing attributes in process `syz.0.208'. [ 104.904238][ T5059] netlink: 188 bytes leftover after parsing attributes in process `syz.2.213'. [ 104.931675][ T5062] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.214'. [ 105.005131][ T5063] netlink: 'syz.1.214': attribute type 10 has an invalid length. [ 105.035904][ T5063] netlink: 156 bytes leftover after parsing attributes in process `syz.1.214'. [ 105.864226][ T5083] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 105.906175][ T5083] device hsr0 entered promiscuous mode [ 106.005937][ T5083] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.076971][ T5083] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 106.148588][ T5083] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 106.194740][ T5083] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 106.744846][ T155] wlan1: Trigger new scan to find an IBSS to join [ 106.858465][ T5105] netlink: 140 bytes leftover after parsing attributes in process `syz.3.229'. [ 107.215891][ T5129] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 107.224092][ T5129] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.372527][ T5129] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 107.421134][ T5129] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 107.464113][ T5129] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 108.246505][ T5142] netlink: 'syz.4.240': attribute type 4 has an invalid length. [ 108.489255][ T5140] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.241'. [ 108.678212][ T5156] netlink: 'syz.1.245': attribute type 1 has an invalid length. [ 108.706694][ T5156] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.245'. [ 108.996883][ T5162] syz.3.246 uses obsolete (PF_INET,SOCK_PACKET) [ 109.653924][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 109.656659][ T5181] device syzkaller0 entered promiscuous mode [ 110.753198][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 111.662185][ T5230] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 111.732870][ T5230] pim6reg1: linktype set to 780 [ 112.158571][ T4330] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 112.263214][ T5239] team0: Port device team_slave_0 removed [ 112.292515][ T5239] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 112.418947][ T5244] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 113.042403][ T5256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.064855][ T5256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.110622][ T5256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.130542][ T5256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.142970][ T5263] netlink: 'syz.2.277': attribute type 9 has an invalid length. [ 113.153355][ T5263] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.277'. [ 114.477777][ T5289] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 114.823910][ T5303] netlink: 'syz.4.290': attribute type 21 has an invalid length. [ 114.862298][ T5303] netlink: 'syz.4.290': attribute type 1 has an invalid length. [ 115.291493][ T5310] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.291'. [ 116.169593][ T5342] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 116.464132][ T5348] delete_channel: no stack [ 116.483054][ T5348] delete_channel: no stack [ 116.745267][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 117.056489][ T5358] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.306'. [ 117.256401][ T5352] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 117.514033][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.535906][ T5352] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 117.556639][ T5350] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 117.603067][ T5357] device bond0 entered promiscuous mode [ 117.624190][ T5357] device bond_slave_0 entered promiscuous mode [ 117.632691][ T5357] device bond_slave_1 entered promiscuous mode [ 117.646781][ T5357] device batadv0 entered promiscuous mode [ 117.670801][ T5373] FAULT_INJECTION: forcing a failure. [ 117.670801][ T5373] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.768840][ T5373] CPU: 1 PID: 5373 Comm: syz.3.309 Not tainted syzkaller #0 [ 117.776636][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.786741][ T5373] Call Trace: [ 117.790064][ T5373] [ 117.793035][ T5373] dump_stack_lvl+0x188/0x250 [ 117.797926][ T5373] ? show_regs_print_info+0x20/0x20 [ 117.803310][ T5373] ? load_image+0x400/0x400 [ 117.808012][ T5373] ? __lock_acquire+0x7d10/0x7d10 [ 117.813094][ T5373] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 117.819079][ T5373] should_fail+0x38c/0x4c0 [ 117.823565][ T5373] _copy_from_user+0x2e/0x170 [ 117.828318][ T5373] __copy_msghdr_from_user+0xc9/0x630 [ 117.833751][ T5373] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 117.839539][ T5373] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 117.844939][ T5373] ___sys_sendmsg+0x19a/0x2e0 [ 117.849790][ T5373] ? __sys_sendmsg+0x2a0/0x2a0 [ 117.854778][ T5373] ? trace_event_raw_event_lock+0x270/0x270 [ 117.860719][ T5373] ? vfs_write+0x8b2/0xd60 [ 117.865251][ T5373] __se_sys_sendmsg+0x1af/0x290 [ 117.870163][ T5373] ? __x64_sys_sendmsg+0x80/0x80 [ 117.875142][ T5373] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 117.881217][ T5373] ? lockdep_hardirqs_on+0x94/0x140 [ 117.886470][ T5373] do_syscall_64+0x4c/0xa0 [ 117.890926][ T5373] ? clear_bhb_loop+0x30/0x80 [ 117.895752][ T5373] ? clear_bhb_loop+0x30/0x80 [ 117.900590][ T5373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.906610][ T5373] RIP: 0033:0x7f60666e8cb9 [ 117.911068][ T5373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.930717][ T5373] RSP: 002b:00007f6064923028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.939189][ T5373] RAX: ffffffffffffffda RBX: 00007f6066964090 RCX: 00007f60666e8cb9 [ 117.947207][ T5373] RDX: 0000000004000081 RSI: 0000200000000000 RDI: 0000000000000004 [ 117.955222][ T5373] RBP: 00007f6064923090 R08: 0000000000000000 R09: 0000000000000000 [ 117.963243][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.971254][ T5373] R13: 00007f6066964128 R14: 00007f6066964090 R15: 00007ffc39407b98 [ 117.979376][ T5373] [ 118.024204][ T5381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.657133][ T5405] team0: Port device team_slave_0 removed [ 119.663605][ T5405] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 119.794588][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 120.702447][ T5433] device syzkaller0 entered promiscuous mode [ 121.404047][ T5451] netlink: 'syz.0.333': attribute type 10 has an invalid length. [ 122.123210][ T5465] team0: Port device team_slave_0 removed [ 122.130509][ T5465] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 122.906388][ T5473] netlink: 13439 bytes leftover after parsing attributes in process `syz.1.340'. [ 123.019896][ T5480] device pim6reg1 entered promiscuous mode [ 123.061092][ T5484] FAULT_INJECTION: forcing a failure. [ 123.061092][ T5484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.137484][ T5484] CPU: 0 PID: 5484 Comm: syz.4.343 Not tainted syzkaller #0 [ 123.144852][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.154957][ T5484] Call Trace: [ 123.158298][ T5484] [ 123.161266][ T5484] dump_stack_lvl+0x188/0x250 [ 123.166021][ T5484] ? show_regs_print_info+0x20/0x20 [ 123.171279][ T5484] ? load_image+0x400/0x400 [ 123.175839][ T5484] ? __lock_acquire+0x7d10/0x7d10 [ 123.180904][ T5484] ? __lock_acquire+0x7d10/0x7d10 [ 123.185988][ T5484] should_fail+0x38c/0x4c0 [ 123.190476][ T5484] _copy_from_user+0x2e/0x170 [ 123.195225][ T5484] ____sys_sendmsg+0x30a/0x8f0 [ 123.200139][ T5484] ? __sys_sendmsg_sock+0x30/0x30 [ 123.205229][ T5484] ? import_iovec+0x6f/0xa0 [ 123.209785][ T5484] ___sys_sendmsg+0x236/0x2e0 [ 123.214634][ T5484] ? __sys_sendmsg+0x2a0/0x2a0 [ 123.219553][ T5484] __se_sys_sendmsg+0x1af/0x290 [ 123.224453][ T5484] ? __x64_sys_sendmsg+0x80/0x80 [ 123.229426][ T5484] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 123.235590][ T5484] ? lockdep_hardirqs_on+0x94/0x140 [ 123.240971][ T5484] do_syscall_64+0x4c/0xa0 [ 123.245419][ T5484] ? clear_bhb_loop+0x30/0x80 [ 123.250124][ T5484] ? clear_bhb_loop+0x30/0x80 [ 123.254846][ T5484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.260774][ T5484] RIP: 0033:0x7fb5a3278cb9 [ 123.265229][ T5484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.284876][ T5484] RSP: 002b:00007fb5a14b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.293345][ T5484] RAX: ffffffffffffffda RBX: 00007fb5a34f4090 RCX: 00007fb5a3278cb9 [ 123.301365][ T5484] RDX: 0000000004000081 RSI: 0000200000000000 RDI: 0000000000000004 [ 123.309476][ T5484] RBP: 00007fb5a14b3090 R08: 0000000000000000 R09: 0000000000000000 [ 123.317492][ T5484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.325651][ T5484] R13: 00007fb5a34f4128 R14: 00007fb5a34f4090 R15: 00007fff15b1d7e8 [ 123.333804][ T5484] [ 123.792665][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 124.583769][ T5510] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.351'. [ 125.198080][ T1430] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 126.935969][ T5538] delete_channel: no stack [ 127.673566][ T5566] netlink: 'syz.3.369': attribute type 9 has an invalid length. [ 127.747598][ T5566] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.369'. [ 128.318989][ T5602] netlink: 'syz.1.376': attribute type 3 has an invalid length. [ 128.406746][ T5602] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.376'. [ 130.936038][ T5655] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.980437][ T5656] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 131.032543][ T5656] device hsr_slave_0 left promiscuous mode [ 131.070313][ T5656] device hsr_slave_1 left promiscuous mode [ 131.324834][ T5647] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.383995][ T5647] netlink: 1 bytes leftover after parsing attributes in process `syz.3.391'. [ 131.412754][ T5651] netlink: 'syz.0.393': attribute type 21 has an invalid length. [ 131.420567][ T5651] netlink: 156 bytes leftover after parsing attributes in process `syz.0.393'. [ 131.431880][ T5660] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 131.453775][ T5660] team0: Port device wlan1 added [ 132.480500][ T5700] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 132.772353][ T5712] netlink: 'syz.3.411': attribute type 10 has an invalid length. [ 132.848573][ T5712] device hsr_slave_0 left promiscuous mode [ 133.027719][ T5712] device hsr_slave_1 left promiscuous mode [ 133.570119][ T5719] netlink: 'syz.3.411': attribute type 10 has an invalid length. [ 133.616042][ T5719] team0: Port device wlan1 added [ 133.785592][ T155] wlan1: Trigger new scan to find an IBSS to join [ 133.815729][ T5752] netlink: 14 bytes leftover after parsing attributes in process `syz.0.422'. [ 133.978770][ T5758] netlink: 'syz.2.425': attribute type 12 has an invalid length. [ 134.095296][ T5758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.425'. [ 134.151921][ T5754] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 134.537540][ T5785] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.433'. [ 136.480385][ T5824] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 136.593042][ T5823] netlink: 112 bytes leftover after parsing attributes in process `syz.0.445'. [ 136.799052][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 137.150323][ T5842] netlink: 'syz.4.451': attribute type 2 has an invalid length. [ 137.210560][ T5842] netlink: 'syz.4.451': attribute type 8 has an invalid length. [ 137.301270][ T5842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.451'. [ 137.493867][ T5860] netlink: 'syz.3.452': attribute type 9 has an invalid length. [ 137.608481][ T5860] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.452'. [ 137.870627][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.877214][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.035904][ T5854] netlink: 'syz.1.454': attribute type 21 has an invalid length. [ 138.051440][ T5854] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.103256][ T5854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.111192][ T5854] IPv6: NLM_F_CREATE should be set when creating new route [ 138.118576][ T5854] IPv6: NLM_F_CREATE should be set when creating new route [ 138.834062][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 138.847320][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 139.524861][ T5886] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 139.833521][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 140.078291][ T4275] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 140.221000][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.221562][ T4275] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 141.247464][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.606156][ T5916] netlink: 104344 bytes leftover after parsing attributes in process `syz.4.470'. [ 142.253022][ T5923] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.565874][ T5923] netlink: 1 bytes leftover after parsing attributes in process `syz.0.472'. [ 142.725803][ T5930] netlink: 'syz.4.474': attribute type 2 has an invalid length. [ 142.812271][ T5930] netlink: 'syz.4.474': attribute type 8 has an invalid length. [ 142.824369][ T5930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.474'. [ 142.842249][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 143.042423][ T5947] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.136535][ T5949] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.477'. [ 143.625096][ T5959] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 143.753027][ T5959] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.480'. [ 144.076605][ T5971] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 144.141415][ T5970] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 144.265478][ T5970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.485'. [ 145.435297][ T5998] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.788003][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 145.914814][ T6009] netlink: 'syz.4.496': attribute type 19 has an invalid length. [ 146.004953][ T6009] netlink: 40 bytes leftover after parsing attributes in process `syz.4.496'. [ 146.063772][ T6016] netlink: 'syz.1.497': attribute type 3 has an invalid length. [ 146.085778][ T6011] netlink: 'syz.4.496': attribute type 19 has an invalid length. [ 146.114766][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.4.496'. [ 146.123900][ T6003] device bridge_slave_1 left promiscuous mode [ 146.130579][ T6016] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.497'. [ 146.163606][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.277320][ T6003] device bridge_slave_0 left promiscuous mode [ 146.312058][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.834978][ T155] wlan1: Trigger new scan to find an IBSS to join [ 146.853680][ T6030] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 146.864684][ T6030] syzkaller0: owner set to 0 [ 147.354782][ T6044] netlink: 'syz.4.507': attribute type 21 has an invalid length. [ 147.396813][ T6044] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 147.824746][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 148.020337][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 148.378650][ T6052] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.125385][ T6068] netlink: 'syz.3.513': attribute type 9 has an invalid length. [ 149.133104][ T6068] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.513'. [ 149.242638][ T6071] netlink: 'syz.4.514': attribute type 4 has an invalid length. [ 149.304164][ T6071] netlink: 152 bytes leftover after parsing attributes in process `syz.4.514'. [ 149.443793][ T6071] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 149.580292][ T6075] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.516'. [ 149.786799][ T145] wlan1: Trigger new scan to find an IBSS to join [ 150.166933][ T6094] delete_channel: no stack [ 150.197219][ T6094] delete_channel: no stack [ 150.378064][ T6097] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.868348][ T155] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 151.302382][ T6112] delete_channel: no stack [ 151.324913][ T6111] tap0: tun_chr_ioctl cmd 2147767511 [ 151.380427][ T6115] tap0: tun_chr_ioctl cmd 35108 [ 151.842571][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 152.604668][ T6138] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 152.834781][ T145] wlan1: Trigger new scan to find an IBSS to join [ 152.848548][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 153.286090][ T6151] netlink: 'syz.4.542': attribute type 21 has an invalid length. [ 153.562563][ T6151] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.542'. [ 154.835085][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 156.786975][ T6185] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 156.877188][ T6190] netlink: 'syz.0.554': attribute type 4 has an invalid length. [ 157.100233][ T6190] netlink: 'syz.0.554': attribute type 3 has an invalid length. [ 157.109356][ T6190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.554'. [ 157.149713][ T6192] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.555'. [ 157.319759][ T6203] netlink: 'syz.4.558': attribute type 21 has an invalid length. [ 157.355016][ T6203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.558'. [ 157.858058][ T6240] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 157.913054][ T6240] netlink: 'syz.4.567': attribute type 3 has an invalid length. [ 157.952324][ T6240] netlink: 132 bytes leftover after parsing attributes in process `syz.4.567'. [ 158.365959][ T6244] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 158.871826][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 158.874340][ T4275] wlan1: Trigger new scan to find an IBSS to join [ 159.985403][ T6295] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 160.087744][ T4275] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 160.432367][ T6303] netlink: 156 bytes leftover after parsing attributes in process `syz.0.585'. [ 160.745918][ T6318] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.588'. [ 160.819062][ T6322] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.589'. [ 160.835770][ T155] wlan1: Trigger new scan to find an IBSS to join [ 161.655987][ T6343] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 162.835343][ T144] wlan1: Trigger new scan to find an IBSS to join [ 163.157255][ T6384] netlink: 'syz.4.608': attribute type 12 has an invalid length. [ 163.204649][ T6384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.608'. [ 163.575287][ T6393] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.612'. [ 163.786486][ T144] wlan1: Trigger new scan to find an IBSS to join [ 163.974832][ T6399] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 164.009310][ T6397] delete_channel: no stack [ 164.134271][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 164.145512][ T6407] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.618'. [ 164.174776][ T6408] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.618'. [ 164.242143][ T6406] netlink: 'syz.0.616': attribute type 9 has an invalid length. [ 164.318157][ T6406] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.616'. [ 164.504637][ T6411] netlink: 'syz.0.616': attribute type 9 has an invalid length. [ 164.512348][ T6411] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.616'. [ 164.760778][ T6427] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 164.780365][ T6427] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 164.792676][ T6427] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 164.832844][ T6427] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 164.915803][ T6430] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 165.019686][ T6434] netlink: 'syz.4.627': attribute type 21 has an invalid length. [ 165.038007][ T6432] syz.2.626 (6432) used obsolete PPPIOCDETACH ioctl [ 165.081101][ T6434] netlink: 128 bytes leftover after parsing attributes in process `syz.4.627'. [ 165.157359][ T6434] netlink: 3 bytes leftover after parsing attributes in process `syz.4.627'. [ 165.464105][ T6444] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.785570][ T144] wlan1: Trigger new scan to find an IBSS to join [ 165.792515][ T144] wlan1: Trigger new scan to find an IBSS to join [ 166.836814][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 167.576023][ T6506] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 167.817180][ T9] wlan1: Trigger new scan to find an IBSS to join [ 167.970942][ T6515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.649'. [ 168.588233][ T6541] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.655'. [ 168.638572][ T6540] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 168.765717][ T6547] netlink: 'syz.1.659': attribute type 3 has an invalid length. [ 168.773932][ T6547] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.659'. [ 169.061645][ T6560] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 169.201307][ T6558] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.673'. [ 169.707302][ T6587] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 169.814818][ T4330] wlan1: Trigger new scan to find an IBSS to join [ 169.815858][ T6587] netlink: 55 bytes leftover after parsing attributes in process `syz.1.672'. [ 170.331581][ T6618] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.390256][ T6617] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.681'. [ 171.026405][ T6633] delete_channel: no stack [ 171.236244][ T6345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.784806][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 172.373596][ T6659] netlink: 'syz.2.694': attribute type 3 has an invalid length. [ 172.402302][ T6659] netlink: 152 bytes leftover after parsing attributes in process `syz.2.694'. [ 172.744869][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 172.845603][ T4330] wlan1: Trigger new scan to find an IBSS to join [ 174.327214][ T6661] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 174.336939][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 175.063833][ T6676] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.699'. [ 176.026927][ T6705] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.428706][ T6724] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.711'. [ 176.779634][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 176.828389][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 177.260606][ T6757] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.739677][ T6775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.731'. [ 177.804811][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 177.812508][ T6775] netlink: 14 bytes leftover after parsing attributes in process `syz.3.731'. [ 177.969721][ T6781] netlink: 'syz.3.731': attribute type 10 has an invalid length. [ 177.996382][ T6781] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.731'. [ 178.038291][ T6777] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.733'. [ 178.715034][ T6820] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.923763][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 180.103604][ T6867] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.745889][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 180.984363][ T6881] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.766'. [ 180.984819][ T4332] Bluetooth: hci0: command 0x0406 tx timeout [ 181.047024][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 181.075076][ T4332] Bluetooth: hci2: command 0x0406 tx timeout [ 181.111730][ T4332] Bluetooth: hci4: command 0x0406 tx timeout [ 181.140318][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 181.365938][ T6895] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.769'. [ 181.553575][ T6902] netlink: 'syz.4.771': attribute type 9 has an invalid length. [ 181.601104][ T6902] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.771'. [ 181.723809][ T6904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.771'. [ 181.784789][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 182.192788][ T6924] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 182.744641][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 182.825026][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 183.231219][ T6945] device wlan0 entered promiscuous mode [ 183.391251][ T6941] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.786'. [ 183.518401][ T6959] netlink: 'syz.4.790': attribute type 4 has an invalid length. [ 183.546742][ T6959] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.790'. [ 183.750513][ T6965] netlink: 'syz.4.790': attribute type 9 has an invalid length. [ 183.784887][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 183.855957][ T6965] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.790'. [ 183.927465][ T6959] netlink: 'syz.4.790': attribute type 9 has an invalid length. [ 183.940012][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 183.967869][ T6959] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.790'. [ 184.755864][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 184.834995][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 185.453139][ T7011] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.809'. [ 185.592181][ T7014] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 185.692561][ T7021] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 185.881179][ T7022] netlink: 'syz.3.812': attribute type 17 has an invalid length. [ 185.935917][ T7022] netlink: 152 bytes leftover after parsing attributes in process `syz.3.812'. [ 185.963341][ T7022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.846608][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 187.805308][ T144] wlan1: Trigger new scan to find an IBSS to join [ 187.811892][ T144] wlan1: Trigger new scan to find an IBSS to join [ 187.826721][ T7066] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.877602][ T7074] FAULT_INJECTION: forcing a failure. [ 187.877602][ T7074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.003238][ T7074] CPU: 1 PID: 7074 Comm: syz.0.826 Not tainted syzkaller #0 [ 188.012544][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.022741][ T7074] Call Trace: [ 188.026068][ T7074] [ 188.029052][ T7074] dump_stack_lvl+0x188/0x250 [ 188.034020][ T7074] ? show_regs_print_info+0x20/0x20 [ 188.039410][ T7074] ? load_image+0x400/0x400 [ 188.043982][ T7074] ? __lock_acquire+0x7d10/0x7d10 [ 188.049048][ T7074] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 188.055108][ T7074] should_fail+0x38c/0x4c0 [ 188.059593][ T7074] _copy_from_user+0x2e/0x170 [ 188.064329][ T7074] iovec_from_user+0x142/0x370 [ 188.069165][ T7074] __import_iovec+0x70/0x490 [ 188.073834][ T7074] import_iovec+0x6f/0xa0 [ 188.078511][ T7074] ___sys_sendmsg+0x1fd/0x2e0 [ 188.083267][ T7074] ? __sys_sendmsg+0x2a0/0x2a0 [ 188.088115][ T7074] ? trace_event_raw_event_lock+0x270/0x270 [ 188.094047][ T7074] ? vfs_write+0x8b2/0xd60 [ 188.098566][ T7074] __se_sys_sendmsg+0x1af/0x290 [ 188.103477][ T7074] ? __x64_sys_sendmsg+0x80/0x80 [ 188.108460][ T7074] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 188.114614][ T7074] ? lockdep_hardirqs_on+0x94/0x140 [ 188.119872][ T7074] do_syscall_64+0x4c/0xa0 [ 188.124422][ T7074] ? clear_bhb_loop+0x30/0x80 [ 188.129242][ T7074] ? clear_bhb_loop+0x30/0x80 [ 188.134120][ T7074] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.140048][ T7074] RIP: 0033:0x7efe27825cb9 [ 188.144594][ T7074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.164502][ T7074] RSP: 002b:00007efe25a60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.172968][ T7074] RAX: ffffffffffffffda RBX: 00007efe27aa1090 RCX: 00007efe27825cb9 [ 188.181022][ T7074] RDX: 0000000004000081 RSI: 0000200000000000 RDI: 0000000000000003 [ 188.189128][ T7074] RBP: 00007efe25a60090 R08: 0000000000000000 R09: 0000000000000000 [ 188.197133][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.205145][ T7074] R13: 00007efe27aa1128 R14: 00007efe27aa1090 R15: 00007ffc900a20e8 [ 188.213335][ T7074] [ 188.339253][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 188.488082][ T7088] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.830'. [ 188.656891][ T7094] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.832'. [ 189.294723][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 189.581965][ T7115] netlink: 830 bytes leftover after parsing attributes in process `syz.3.837'. [ 189.588838][ T7118] netlink: 'syz.2.839': attribute type 4 has an invalid length. [ 189.619282][ T7118] netlink: 'syz.2.839': attribute type 8 has an invalid length. [ 189.646067][ T7118] netlink: 132044 bytes leftover after parsing attributes in process `syz.2.839'. [ 189.659594][ T7120] IPv6: Can't replace route, no match found [ 189.689070][ T7111] device wlan0 entered promiscuous mode [ 190.563743][ T7148] netlink: 10 bytes leftover after parsing attributes in process `syz.2.848'. [ 191.837499][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 191.838461][ T144] wlan1: Trigger new scan to find an IBSS to join [ 192.332141][ T7185] FAULT_INJECTION: forcing a failure. [ 192.332141][ T7185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.633292][ T7185] CPU: 0 PID: 7185 Comm: syz.3.857 Not tainted syzkaller #0 [ 192.640637][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.650722][ T7185] Call Trace: [ 192.654033][ T7185] [ 192.656985][ T7185] dump_stack_lvl+0x188/0x250 [ 192.661703][ T7185] ? show_regs_print_info+0x20/0x20 [ 192.666928][ T7185] ? load_image+0x400/0x400 [ 192.671479][ T7185] ? __lock_acquire+0x7d10/0x7d10 [ 192.676533][ T7185] ? vfs_write+0x8b2/0xd60 [ 192.680987][ T7185] should_fail+0x38c/0x4c0 [ 192.685446][ T7185] _copy_from_user+0x2e/0x170 [ 192.690169][ T7185] __sys_bpf+0x26d/0x6f0 [ 192.694445][ T7185] ? bpf_link_show_fdinfo+0x380/0x380 [ 192.699962][ T7185] ? vtime_user_exit+0x2c8/0x3e0 [ 192.704946][ T7185] __x64_sys_bpf+0x78/0x90 [ 192.709404][ T7185] do_syscall_64+0x4c/0xa0 [ 192.713843][ T7185] ? clear_bhb_loop+0x30/0x80 [ 192.718627][ T7185] ? clear_bhb_loop+0x30/0x80 [ 192.723339][ T7185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.729404][ T7185] RIP: 0033:0x7f60666e8cb9 [ 192.733837][ T7185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.753572][ T7185] RSP: 002b:00007f6064944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.762105][ T7185] RAX: ffffffffffffffda RBX: 00007f6066963fa0 RCX: 00007f60666e8cb9 [ 192.770114][ T7185] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 192.778240][ T7185] RBP: 00007f6064944090 R08: 0000000000000000 R09: 0000000000000000 [ 192.786246][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.794243][ T7185] R13: 00007f6066964038 R14: 00007f6066963fa0 R15: 00007ffc39407b98 [ 192.802258][ T7185] [ 192.901444][ T7192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.858'. [ 193.296549][ T7194] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 193.315518][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 193.419269][ T7194] netlink: 'syz.2.858': attribute type 8 has an invalid length. [ 193.541254][ T7194] netlink: 'syz.2.858': attribute type 9 has an invalid length. [ 193.624718][ T7194] netlink: 'syz.2.858': attribute type 10 has an invalid length. [ 193.676590][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 193.970659][ T7210] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.629123][ T7231] netlink: 'syz.4.870': attribute type 10 has an invalid length. [ 194.748577][ T7231] team0: Port device macvlan1 added [ 195.003938][ T7250] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 195.101527][ T7250] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.878'. [ 195.445395][ T7257] FAULT_INJECTION: forcing a failure. [ 195.445395][ T7257] name failslab, interval 1, probability 0, space 0, times 1 [ 195.549747][ T7257] CPU: 1 PID: 7257 Comm: syz.2.880 Not tainted syzkaller #0 [ 195.557107][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.567369][ T7257] Call Trace: [ 195.570702][ T7257] [ 195.573658][ T7257] dump_stack_lvl+0x188/0x250 [ 195.578390][ T7257] ? show_regs_print_info+0x20/0x20 [ 195.583623][ T7257] ? load_image+0x400/0x400 [ 195.588159][ T7257] ? __might_sleep+0xf0/0xf0 [ 195.592772][ T7257] ? __lock_acquire+0x7d10/0x7d10 [ 195.597843][ T7257] should_fail+0x38c/0x4c0 [ 195.602472][ T7257] should_failslab+0x5/0x20 [ 195.606998][ T7257] slab_pre_alloc_hook+0x51/0xc0 [ 195.611963][ T7257] kmem_cache_alloc_node_trace+0x4a/0x300 [ 195.617709][ T7257] ? __get_vm_area_node+0x119/0x2d0 [ 195.622944][ T7257] __get_vm_area_node+0x119/0x2d0 [ 195.627999][ T7257] __vmalloc_node_range+0xef/0x8b0 [ 195.633128][ T7257] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 195.638699][ T7257] ? end_current_label_crit_section+0x170/0x170 [ 195.644961][ T7257] ? __lock_acquire+0x7d10/0x7d10 [ 195.650004][ T7257] ? __lock_acquire+0x13bc/0x7d10 [ 195.655048][ T7257] ? trace_event_raw_event_lock+0x270/0x270 [ 195.660971][ T7257] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 195.666536][ T7257] __vmalloc+0x76/0x80 [ 195.670631][ T7257] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 195.676287][ T7257] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 195.681684][ T7257] bpf_prog_alloc+0x1a/0x1e0 [ 195.686293][ T7257] bpf_prog_load+0x7c6/0x1510 [ 195.691154][ T7257] ? map_freeze+0x350/0x350 [ 195.695774][ T7257] ? __might_fault+0xb7/0x110 [ 195.700491][ T7257] ? __might_fault+0xb3/0x110 [ 195.705290][ T7257] ? bpf_lsm_bpf+0x5/0x10 [ 195.709637][ T7257] ? security_bpf+0x7a/0xa0 [ 195.714166][ T7257] __sys_bpf+0x532/0x6f0 [ 195.718612][ T7257] ? bpf_link_show_fdinfo+0x380/0x380 [ 195.724010][ T7257] ? vtime_user_exit+0x2c8/0x3e0 [ 195.728984][ T7257] __x64_sys_bpf+0x78/0x90 [ 195.733441][ T7257] do_syscall_64+0x4c/0xa0 [ 195.737880][ T7257] ? clear_bhb_loop+0x30/0x80 [ 195.742572][ T7257] ? clear_bhb_loop+0x30/0x80 [ 195.747270][ T7257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.753186][ T7257] RIP: 0033:0x7f8cc7bf6cb9 [ 195.757718][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.777346][ T7257] RSP: 002b:00007f8cc5e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.785794][ T7257] RAX: ffffffffffffffda RBX: 00007f8cc7e71fa0 RCX: 00007f8cc7bf6cb9 [ 195.793903][ T7257] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 195.801993][ T7257] RBP: 00007f8cc5e52090 R08: 0000000000000000 R09: 0000000000000000 [ 195.810117][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.818178][ T7257] R13: 00007f8cc7e72038 R14: 00007f8cc7e71fa0 R15: 00007ffe30b9f128 [ 195.826175][ T7257] [ 195.832307][ T9] wlan1: Trigger new scan to find an IBSS to join [ 196.087110][ T7257] syz.2.880: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 196.147145][ T7266] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.883'. [ 196.163786][ T7257] CPU: 0 PID: 7257 Comm: syz.2.880 Not tainted syzkaller #0 [ 196.171121][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.181199][ T7257] Call Trace: [ 196.184497][ T7257] [ 196.187440][ T7257] dump_stack_lvl+0x188/0x250 [ 196.192139][ T7257] ? rcu_lock_release+0x5/0x20 [ 196.196916][ T7257] ? show_regs_print_info+0x20/0x20 [ 196.202131][ T7257] ? load_image+0x400/0x400 [ 196.206651][ T7257] ? __rcu_read_unlock+0x78/0xd0 [ 196.211694][ T7257] warn_alloc+0x243/0x320 [ 196.216049][ T7257] ? zone_watermark_ok_safe+0x240/0x240 [ 196.221652][ T7257] ? __get_vm_area_node+0x2b5/0x2d0 [ 196.226882][ T7257] __vmalloc_node_range+0x2b1/0x8b0 [ 196.232104][ T7257] ? end_current_label_crit_section+0x170/0x170 [ 196.238360][ T7257] ? __lock_acquire+0x7d10/0x7d10 [ 196.243416][ T7257] ? __lock_acquire+0x13bc/0x7d10 [ 196.248563][ T7257] ? trace_event_raw_event_lock+0x270/0x270 [ 196.254482][ T7257] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 196.260054][ T7257] __vmalloc+0x76/0x80 [ 196.264139][ T7257] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 196.269698][ T7257] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 196.275094][ T7257] bpf_prog_alloc+0x1a/0x1e0 [ 196.279785][ T7257] bpf_prog_load+0x7c6/0x1510 [ 196.284490][ T7257] ? map_freeze+0x350/0x350 [ 196.289033][ T7257] ? __might_fault+0xb7/0x110 [ 196.293744][ T7257] ? __might_fault+0xb3/0x110 [ 196.298426][ T7257] ? bpf_lsm_bpf+0x5/0x10 [ 196.302762][ T7257] ? security_bpf+0x7a/0xa0 [ 196.307271][ T7257] __sys_bpf+0x532/0x6f0 [ 196.311515][ T7257] ? bpf_link_show_fdinfo+0x380/0x380 [ 196.316931][ T7257] ? vtime_user_exit+0x2c8/0x3e0 [ 196.321872][ T7257] __x64_sys_bpf+0x78/0x90 [ 196.326300][ T7257] do_syscall_64+0x4c/0xa0 [ 196.330719][ T7257] ? clear_bhb_loop+0x30/0x80 [ 196.335394][ T7257] ? clear_bhb_loop+0x30/0x80 [ 196.340069][ T7257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.345960][ T7257] RIP: 0033:0x7f8cc7bf6cb9 [ 196.350383][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.370073][ T7257] RSP: 002b:00007f8cc5e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.378491][ T7257] RAX: ffffffffffffffda RBX: 00007f8cc7e71fa0 RCX: 00007f8cc7bf6cb9 [ 196.386550][ T7257] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 196.394521][ T7257] RBP: 00007f8cc5e52090 R08: 0000000000000000 R09: 0000000000000000 [ 196.402496][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.410476][ T7257] R13: 00007f8cc7e72038 R14: 00007f8cc7e71fa0 R15: 00007ffe30b9f128 [ 196.418461][ T7257] [ 196.455965][ T7257] Mem-Info: [ 196.459142][ T7257] active_anon:270 inactive_anon:22096 isolated_anon:0 [ 196.459142][ T7257] active_file:14816 inactive_file:39455 isolated_file:0 [ 196.459142][ T7257] unevictable:768 dirty:203 writeback:0 [ 196.459142][ T7257] slab_reclaimable:20328 slab_unreclaimable:107526 [ 196.459142][ T7257] mapped:29630 shmem:18034 pagetables:638 bounce:0 [ 196.459142][ T7257] kernel_misc_reclaimable:0 [ 196.459142][ T7257] free:1348858 free_pcp:10647 free_cma:0 [ 196.520184][ T7257] Node 0 active_anon:1048kB inactive_anon:86376kB active_file:59064kB inactive_file:157820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118520kB dirty:808kB writeback:0kB shmem:68460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11396kB pagetables:2552kB all_unreclaimable? no [ 196.620083][ T7257] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 196.744862][ T155] wlan1: Trigger new scan to find an IBSS to join [ 196.762323][ T7257] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.907786][ T7257] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 196.915027][ T7257] Node 0 DMA32 free:1476436kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1044kB inactive_anon:79476kB active_file:59064kB inactive_file:157820kB unevictable:1536kB writepending:808kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:35776kB local_pcp:21492kB free_cma:0kB [ 197.084811][ T9] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 197.198852][ T7257] lowmem_reserve[]: 0 0 0 0 0 [ 197.295316][ T7257] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.747004][ T7302] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.895'. [ 197.889010][ T7257] lowmem_reserve[]: 0 0 0 0 0 [ 197.953501][ T7257] Node 1 Normal free:3913992kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6276kB local_pcp:3096kB free_cma:0kB [ 198.084778][ T7257] lowmem_reserve[]: 0 0 0 0 0 [ 198.154523][ T7257] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.303495][ T7257] Node 0 DMA32: 217*4kB (UM) 41*8kB (UME) 122*16kB (UE) 2005*32kB (UME) 982*64kB (UME) 448*128kB (UME) 199*256kB (UME) 69*512kB (UM) 27*1024kB (UM) 13*2048kB (UME) 282*4096kB (UM) = 1483116kB [ 198.397826][ T7257] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 198.574155][ T7257] Node 1 Normal: 138*4kB (UME) 36*8kB (UME) 24*16kB (UME) 156*32kB (UME) 65*64kB (UME) 21*128kB (UE) 12*256kB (UM) 1*512kB (U) 2*1024kB (UE) 2*2048kB (ME) 950*4096kB (M) = 3913992kB [ 198.742597][ T7257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.859301][ T7257] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.957216][ T7257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.004868][ T7257] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.072384][ T7257] 65542 total pagecache pages [ 199.091471][ T7257] 0 pages in swap cache [ 199.175245][ T7257] Swap cache stats: add 0, delete 0, find 0/0 [ 199.252546][ T7257] Free swap = 124996kB [ 199.309195][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.315603][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.325005][ T7257] Total swap = 124996kB [ 199.329203][ T7257] 2097051 pages RAM [ 199.333023][ T7257] 0 pages HighMem/MovableOnly [ 199.461511][ T7257] 411488 pages reserved [ 199.517230][ T7257] 0 pages cma reserved [ 200.877857][ T7361] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.910'. [ 201.789694][ T4330] wlan1: Trigger new scan to find an IBSS to join [ 202.793400][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 203.833485][ T7414] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.926'. [ 204.966355][ T7448] netlink: 'syz.2.933': attribute type 27 has an invalid length. [ 205.034641][ T7448] C: renamed from team_slave_0 [ 205.112950][ T7446] netlink: 'syz.1.936': attribute type 19 has an invalid length. [ 205.275883][ T7455] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 205.333531][ T7455] netlink: 5 bytes leftover after parsing attributes in process `syz.4.937'. [ 205.635716][ T7459] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 205.731198][ T7459] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.938'. [ 205.780201][ T7460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.938'. [ 206.359904][ T7465] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.940'. [ 207.650563][ T7521] netlink: 156 bytes leftover after parsing attributes in process `syz.3.956'. [ 207.702197][ T7529] netlink: 'syz.0.960': attribute type 10 has an invalid length. [ 207.760924][ T7529] device hsr0 entered promiscuous mode [ 207.943912][ T7529] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.302841][ T7554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.964'. [ 208.360508][ T7554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.964'. [ 208.387456][ T7548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.964'. [ 208.662394][ T7568] netlink: 'syz.3.968': attribute type 13 has an invalid length. [ 208.685741][ T7568] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.968'. [ 209.779157][ T7596] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.978'. [ 209.869217][ T7599] netlink: 180 bytes leftover after parsing attributes in process `syz.3.979'. [ 210.273318][ T7612] netlink: 15 bytes leftover after parsing attributes in process `syz.3.984'. [ 210.676128][ T7631] device wlan0 left promiscuous mode [ 210.767244][ T7628] device wlan0 entered promiscuous mode [ 210.810474][ T7631] netlink: 'syz.4.990': attribute type 9 has an invalid length. [ 210.838203][ T7631] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.990'. [ 211.660142][ T7657] __nla_validate_parse: 1 callbacks suppressed [ 211.660162][ T7657] netlink: 180 bytes leftover after parsing attributes in process `syz.3.997'. [ 211.722721][ T7661] netlink: 'syz.4.999': attribute type 2 has an invalid length. [ 211.733180][ T7661] netlink: 'syz.4.999': attribute type 4 has an invalid length. [ 211.751239][ T7661] netlink: 'syz.4.999': attribute type 8 has an invalid length. [ 211.759372][ T7661] netlink: 'syz.4.999': attribute type 9 has an invalid length. [ 211.769682][ T7661] netlink: 'syz.4.999': attribute type 10 has an invalid length. [ 211.797132][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 211.806447][ T7662] netlink: 'syz.4.999': attribute type 2 has an invalid length. [ 211.819463][ T7662] netlink: 'syz.4.999': attribute type 4 has an invalid length. [ 211.827822][ T7662] netlink: 'syz.4.999': attribute type 8 has an invalid length. [ 211.835840][ T7662] netlink: 'syz.4.999': attribute type 9 has an invalid length. [ 211.843764][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 212.049686][ T7665] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1000'. [ 213.067277][ T7690] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1007'. [ 213.763384][ T7712] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1013'. [ 213.910599][ T7715] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1015'. [ 214.870126][ T7729] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1019'. [ 216.321661][ T7758] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.222479][ T7789] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1036'. [ 218.254732][ T7795] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1038'. [ 218.745070][ T144] wlan1: Trigger new scan to find an IBSS to join [ 219.266977][ T7833] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1051'. [ 219.465470][ T7836] device wlan0 entered promiscuous mode [ 219.672789][ T7850] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.1057'. [ 219.828999][ T7853] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 220.088334][ T7861] validate_nla: 3 callbacks suppressed [ 220.088351][ T7861] netlink: 'syz.4.1059': attribute type 21 has an invalid length. [ 220.179982][ T7861] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1059'. [ 221.008969][ T7874] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1065'. [ 221.473171][ T7893] device syzkaller0 entered promiscuous mode [ 222.002014][ T7908] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1072'. [ 223.226797][ T7927] netlink: 'syz.2.1077': attribute type 17 has an invalid length. [ 223.246940][ T7927] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1077'. [ 223.317145][ T7927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.333196][ T4330] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 223.342530][ T7939] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1079'. [ 223.488720][ T7944] netlink: 'syz.4.1086': attribute type 27 has an invalid length. [ 223.522595][ T7944] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1086'. [ 223.784865][ T144] wlan1: Trigger new scan to find an IBSS to join [ 224.068724][ T7942] netlink: 144056 bytes leftover after parsing attributes in process `syz.3.1083'. [ 224.280497][ T7961] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1087'. [ 224.320760][ T7961] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.1087'. [ 224.341234][ T7961] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1087'. [ 224.391976][ T7964] device wlan0 entered promiscuous mode [ 224.613593][ T7983] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1094'. [ 224.675924][ T7978] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1091'. [ 224.902174][ T7991] netlink: 'syz.0.1096': attribute type 10 has an invalid length. [ 225.844278][ T8020] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1104'. [ 225.866656][ T8016] netlink: 'syz.0.1103': attribute type 3 has an invalid length. [ 225.883813][ T8020] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 226.746000][ T144] wlan1: Trigger new scan to find an IBSS to join [ 226.771941][ T8035] device wlan0 entered promiscuous mode [ 227.012868][ T8056] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.071510][ T8058] netlink: 'syz.0.1112': attribute type 17 has an invalid length. [ 227.121808][ T8058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.715055][ T4330] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 228.784106][ T8116] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.756603][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 233.618769][ T8197] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.883959][ T8236] device pim6reg1 entered promiscuous mode [ 235.196104][ T8245] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 235.436691][ T8245] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.536161][ T8245] bond0: (slave team0): Enslaving as an active interface with an up link [ 235.794820][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 235.798458][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 236.477686][ T8272] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 236.585607][ T8272] __nla_validate_parse: 4 callbacks suppressed [ 236.585624][ T8272] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1187'. [ 237.101816][ T8296] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1193'. [ 237.824264][ T8332] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 238.255719][ T8340] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1206'. [ 238.454766][ T8342] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1207'. [ 238.882912][ T8371] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 238.893173][ T8370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.927620][ T8367] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1217'. [ 239.373126][ T8382] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1222'. [ 240.744840][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 241.862239][ T4330] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 242.094089][ T8411] netlink: 'syz.4.1231': attribute type 5 has an invalid length. [ 242.296587][ T8412] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1232'. [ 242.318449][ T8423] netlink: 'syz.2.1235': attribute type 10 has an invalid length. [ 242.336575][ T8423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.359187][ T8423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.384520][ T8423] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 242.400403][ T8426] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1236'. [ 242.516018][ T8429] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 242.746844][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 242.988906][ T8449] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1243'. [ 243.146869][ T8457] netlink: 'syz.3.1248': attribute type 19 has an invalid length. [ 243.231318][ T8457] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1248'. [ 243.395691][ T8470] netlink: 'syz.3.1252': attribute type 39 has an invalid length. [ 243.599168][ T8471] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1251'. [ 243.766630][ T8480] netlink: 'syz.0.1254': attribute type 3 has an invalid length. [ 243.785625][ T8480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1254'. [ 244.035672][ T8487] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.836883][ T155] wlan1: Trigger new scan to find an IBSS to join [ 244.950157][ T8533] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 245.710405][ T8557] netlink: 'syz.2.1278': attribute type 2 has an invalid length. [ 245.754731][ T8557] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1278'. [ 245.784784][ T4330] wlan1: Trigger new scan to find an IBSS to join [ 245.879914][ T8556] device syzkaller0 entered promiscuous mode [ 246.271471][ T8580] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 246.768581][ T8594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 246.836320][ T144] wlan1: Trigger new scan to find an IBSS to join [ 246.956878][ T155] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 247.118364][ T8598] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1293'. [ 247.217005][ T8598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.296609][ T8598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.367738][ T8598] bond0 (unregistering): Released all slaves [ 247.504959][ T8605] netlink: 'syz.4.1293': attribute type 10 has an invalid length. [ 247.540683][ T8605] team0: Device ipvlan1 failed to register rx_handler [ 247.687482][ T8631] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 247.879221][ T8622] can: request_module (can-proto-0) failed. [ 247.916720][ T8626] can: request_module (can-proto-0) failed. [ 248.552370][ T8656] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1309'. [ 249.270668][ T8684] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.166586][ T8703] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1326'. [ 250.749133][ T8716] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1328'. [ 251.068961][ T8718] device syzkaller0 entered promiscuous mode [ 251.130867][ T8723] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 251.375745][ T8731] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 251.785357][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 251.785482][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 252.156786][ T8756] netlink: 'syz.3.1341': attribute type 4 has an invalid length. [ 252.198701][ T8759] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.1342'. [ 252.213852][ T8756] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1341'. [ 252.270733][ T8756] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 252.372153][ T8759] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1342'. [ 252.659643][ T8769] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.808609][ T6345] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 253.069606][ T8776] netlink: 'syz.0.1347': attribute type 29 has an invalid length. [ 253.100426][ T8775] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1348'. [ 253.150713][ T8776] netlink: 'syz.0.1347': attribute type 29 has an invalid length. [ 253.246791][ T8776] netlink: 'syz.0.1347': attribute type 29 has an invalid length. [ 253.393448][ T8776] netlink: 'syz.0.1347': attribute type 3 has an invalid length. [ 253.442008][ T8776] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 253.678525][ T8776] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1347'. [ 254.269598][ T8810] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 254.687427][ T8823] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1362'. [ 255.770112][ T8848] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 256.174273][ T8861] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1376'. [ 256.578930][ T8874] netlink: 'syz.2.1379': attribute type 10 has an invalid length. [ 256.690585][ T8874] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1379'. [ 256.773191][ T8871] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1377'. [ 256.824835][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 256.831460][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 256.840261][ T8880] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1381'. [ 257.687006][ T8904] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 257.701217][ T8901] netlink: 'syz.1.1385': attribute type 10 has an invalid length. [ 257.785132][ T8898] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1386'. [ 257.829553][ T8901] team0 (unregistering): Port device team_slave_1 removed [ 257.904015][ T8901] team0 (unregistering): Port device wlan1 removed [ 258.072438][ T8910] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1389'. [ 258.601045][ T8933] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1397'. [ 258.685677][ T8931] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 259.150141][ T8944] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 259.296457][ T8940] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1410'. [ 259.436099][ T8947] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 259.678944][ T8954] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1403'. [ 260.534714][ T8983] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 260.750516][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.757014][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.105558][ T8998] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1418'. [ 261.539274][ T9001] netlink: 'syz.3.1420': attribute type 5 has an invalid length. [ 261.814566][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 261.821258][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 261.857804][ T9016] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1424'. [ 261.995675][ T9025] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 262.756181][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 264.571866][ T1430] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 264.655722][ T9025] team0 (unregistering): Port device team_slave_1 removed [ 264.721169][ T9025] team0 (unregistering): Port device macvlan1 removed [ 265.044165][ T9049] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.372793][ T9058] device syzkaller0 entered promiscuous mode [ 265.636863][ T9068] netlink: 'syz.1.1441': attribute type 9 has an invalid length. [ 265.708264][ T9068] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1441'. [ 265.742373][ T9079] delete_channel: no stack [ 265.755344][ T9079] delete_channel: no stack [ 266.724587][ T9091] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 266.825269][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 267.432120][ T9091] team0 (unregistering): Port device team_slave_0 removed [ 267.739975][ T9091] team0 (unregistering): Port device team_slave_1 removed [ 267.794720][ T155] wlan1: Trigger new scan to find an IBSS to join [ 267.856736][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 268.136203][ T9096] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 268.154378][ T9096] netlink: 'syz.3.1450': attribute type 4 has an invalid length. [ 268.162609][ T9096] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1450'. [ 268.217063][ T9107] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 269.113432][ T9131] netlink: 'syz.0.1461': attribute type 7 has an invalid length. [ 269.132547][ T9131] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1461'. [ 269.134271][ T9138] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 269.408895][ T9140] netlink: 'syz.4.1463': attribute type 10 has an invalid length. [ 270.335146][ T9159] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 270.744717][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 272.225879][ T9199] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 272.348705][ T9205] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 272.425936][ T9205] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 272.745579][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 272.756944][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1486'. [ 272.779057][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1486'. [ 272.787971][ T9212] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1487'. [ 272.800757][ T9214] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1486'. [ 273.795127][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 274.330893][ T9237] device vcan0 entered promiscuous mode [ 274.348190][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.454307][ T9236] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1494'. [ 274.744775][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 275.692316][ T9259] netlink: 'syz.4.1503': attribute type 5 has an invalid length. [ 275.789198][ T144] wlan1: Trigger new scan to find an IBSS to join [ 275.930529][ T9260] netlink: 'syz.4.1503': attribute type 10 has an invalid length. [ 276.745878][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 276.946654][ T9277] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1508'. [ 277.571760][ T9284] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 278.381139][ T9292] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1510'. [ 278.752142][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 279.784949][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 280.046691][ T9323] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1521'. [ 280.387734][ T9332] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 280.972285][ T9346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1526'. [ 281.150075][ T9346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1526'. [ 281.224238][ T9344] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1526'. [ 281.322686][ T9345] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 281.360490][ T9345] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1528'. [ 282.253473][ T9367] netlink: 2759 bytes leftover after parsing attributes in process `syz.3.1533'. [ 283.130923][ T9395] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1543'. [ 283.166724][ T9395] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1543'. [ 284.827171][ T9448] netlink: 'syz.2.1558': attribute type 28 has an invalid length. [ 284.835650][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 284.885496][ T9448] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1558'. [ 284.998726][ T9448] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1558'. [ 285.011456][ T9424] netlink: 'syz.1.1548': attribute type 10 has an invalid length. [ 285.099874][ T9424] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1548'. [ 285.466360][ T9466] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 286.085474][ T9478] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1565'. [ 286.240833][ T9487] netlink: 'syz.1.1568': attribute type 2 has an invalid length. [ 286.306370][ T9487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1568'. [ 286.799354][ T9523] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 287.794710][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 287.881914][ T9555] IPv6: pim6reg1: Disabled Multicast RS [ 288.531859][ T9581] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 288.952498][ T9598] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1598'. [ 289.704858][ T9633] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 289.955870][ T9642] netlink: 'syz.1.1613': attribute type 10 has an invalid length. [ 291.351447][ T9687] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 291.805780][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 292.099039][ T9711] netlink: 'syz.2.1636': attribute type 46 has an invalid length. [ 292.319322][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1636'. [ 292.412144][ T9717] netlink: 'syz.1.1638': attribute type 2 has an invalid length. [ 292.425158][ T9717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1638'. [ 292.445426][ T9722] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1639'. [ 293.669195][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1652'. [ 293.737771][ T9762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.058401][ T9781] netlink: 'syz.3.1659': attribute type 28 has an invalid length. [ 294.541899][ T9788] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1661'. [ 294.624819][ T9792] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1660'. [ 295.056527][ T9804] netlink: 'syz.2.1664': attribute type 10 has an invalid length. [ 295.084854][ T9804] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1664'. [ 295.302417][ T9811] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1668'. [ 295.577595][ T9833] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1675'. [ 296.872278][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 297.137967][ T9876] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1690'. [ 297.584755][ T9889] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 297.650792][ T9889] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1695'. [ 297.957931][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 298.550055][ T9921] IPv6: Can't replace route, no match found [ 298.625409][ T9922] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1705'. [ 299.670149][ T9956] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1719'. [ 300.173272][ T9972] FAULT_INJECTION: forcing a failure. [ 300.173272][ T9972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.232179][ T9972] CPU: 0 PID: 9972 Comm: syz.0.1727 Not tainted syzkaller #0 [ 300.239797][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.250055][ T9972] Call Trace: [ 300.253443][ T9972] [ 300.256402][ T9972] dump_stack_lvl+0x188/0x250 [ 300.261114][ T9972] ? show_regs_print_info+0x20/0x20 [ 300.266342][ T9972] ? load_image+0x400/0x400 [ 300.270873][ T9972] ? __lock_acquire+0x7d10/0x7d10 [ 300.275919][ T9972] should_fail+0x38c/0x4c0 [ 300.280689][ T9972] _copy_from_user+0x2e/0x170 [ 300.285502][ T9972] __copy_msghdr_from_user+0xc9/0x630 [ 300.290987][ T9972] ? verify_lock_unused+0x140/0x140 [ 300.296220][ T9972] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 300.301636][ T9972] ___sys_sendmsg+0x19a/0x2e0 [ 300.306367][ T9972] ? __sys_sendmsg+0x2a0/0x2a0 [ 300.311263][ T9972] ? ktime_get_real_ts64+0x440/0x440 [ 300.316583][ T9972] __se_sys_sendmsg+0x1af/0x290 [ 300.321452][ T9972] ? __x64_sys_sendmsg+0x80/0x80 [ 300.326500][ T9972] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 300.332510][ T9972] ? lockdep_hardirqs_on+0x94/0x140 [ 300.337725][ T9972] do_syscall_64+0x4c/0xa0 [ 300.342239][ T9972] ? clear_bhb_loop+0x30/0x80 [ 300.347060][ T9972] ? clear_bhb_loop+0x30/0x80 [ 300.351775][ T9972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.357695][ T9972] RIP: 0033:0x7efe27825cb9 [ 300.362133][ T9972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.381937][ T9972] RSP: 002b:00007efe25a81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.390373][ T9972] RAX: ffffffffffffffda RBX: 00007efe27aa0fa0 RCX: 00007efe27825cb9 [ 300.398450][ T9972] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 300.406442][ T9972] RBP: 00007efe25a81090 R08: 0000000000000000 R09: 0000000000000000 [ 300.415038][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.423025][ T9972] R13: 00007efe27aa1038 R14: 00007efe27aa0fa0 R15: 00007ffc900a20e8 [ 300.431024][ T9972] [ 301.074136][ T9992] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 301.208706][ T9992] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1730'. [ 301.914140][ T9997] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1733'. [ 301.940625][T10000] netlink: 'syz.0.1734': attribute type 21 has an invalid length. [ 301.964722][T10000] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1734'. [ 301.977434][T10000] netlink: 'syz.0.1734': attribute type 4 has an invalid length. [ 302.136542][T10005] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1735'. [ 302.153022][T10010] sctp: [Deprecated]: syz.1.1739 (pid 10010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.153022][T10010] Use struct sctp_sack_info instead [ 302.206708][T10012] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.419843][T10033] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1747'. [ 303.879183][T10057] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1754'. [ 304.637843][T10035] netlink: 'syz.3.1745': attribute type 9 has an invalid length. [ 304.651229][T10035] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1745'. [ 304.753005][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 305.123619][T10091] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 306.321620][T10092] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1762'. [ 306.917438][T10091] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1763'. [ 307.165379][T10127] netlink: 'syz.0.1776': attribute type 21 has an invalid length. [ 307.379437][T10130] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1777'. [ 307.589236][T10131] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1774'. [ 308.724039][T10162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1789'. [ 308.737039][T10169] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1790'. [ 309.278169][T10196] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 309.810075][ T145] wlan1: Trigger new scan to find an IBSS to join [ 309.968152][T10210] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1803'. [ 309.994775][T10212] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1804'. [ 310.863193][T10235] netlink: 'syz.1.1812': attribute type 21 has an invalid length. [ 311.001575][T10235] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1812'. [ 311.049228][ T145] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 311.140061][T10235] netlink: 'syz.1.1812': attribute type 4 has an invalid length. [ 311.325200][T10241] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 311.828266][T10261] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1818'. [ 313.000567][T10272] netlink: 'syz.4.1823': attribute type 9 has an invalid length. [ 313.020594][T10272] netlink: 196764 bytes leftover after parsing attributes in process `syz.4.1823'. [ 313.560719][T10285] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1829'. [ 313.699361][T10291] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1833'. [ 313.824693][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 315.208159][T10328] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1845'. [ 315.820005][T10355] device syzkaller0 entered promiscuous mode [ 316.195641][T10362] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1855'. [ 316.361614][T10362] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1855'. [ 316.436645][T10369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1857'. [ 316.725873][T10379] netlink: 'syz.4.1857': attribute type 9 has an invalid length. [ 316.775426][T10379] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1857'. [ 317.904325][T10375] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1858'. [ 318.268302][T10407] netlink: 'syz.0.1867': attribute type 29 has an invalid length. [ 318.303945][T10407] netlink: 'syz.0.1867': attribute type 29 has an invalid length. [ 318.332241][T10407] netlink: 'syz.0.1867': attribute type 29 has an invalid length. [ 318.382607][T10409] netlink: 'syz.0.1867': attribute type 29 has an invalid length. [ 318.599475][T10417] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 318.791471][T10420] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1870'. [ 318.829162][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 319.502636][T10434] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1873'. [ 319.750854][T10438] IPv6: Can't replace route, no match found [ 320.052040][ T1430] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 320.221931][T10441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1876'. [ 320.481461][T10465] netlink: 'syz.2.1876': attribute type 9 has an invalid length. [ 320.617600][T10465] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1876'. [ 320.826266][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 321.227790][T10480] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1888'. [ 321.299174][T10477] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1887'. [ 322.025222][T10503] FAULT_INJECTION: forcing a failure. [ 322.025222][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.965013][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.971401][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.119927][T10503] CPU: 0 PID: 10503 Comm: syz.1.1898 Not tainted syzkaller #0 [ 323.127553][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.137728][T10503] Call Trace: [ 323.141037][T10503] [ 323.143992][T10503] dump_stack_lvl+0x188/0x250 [ 323.148706][T10503] ? show_regs_print_info+0x20/0x20 [ 323.153927][T10503] ? load_image+0x400/0x400 [ 323.158466][T10503] ? __lock_acquire+0x7d10/0x7d10 [ 323.163525][T10503] should_fail+0x38c/0x4c0 [ 323.167972][T10503] _copy_to_user+0x2e/0x130 [ 323.172500][T10503] simple_read_from_buffer+0xe3/0x150 [ 323.177907][T10503] proc_fail_nth_read+0x1a6/0x220 [ 323.182958][T10503] ? proc_fault_inject_write+0x310/0x310 [ 323.188642][T10503] ? fsnotify_perm+0x254/0x560 [ 323.193528][T10503] ? proc_fault_inject_write+0x310/0x310 [ 323.199185][T10503] vfs_read+0x301/0xd60 [ 323.203375][T10503] ? kernel_read+0x1e0/0x1e0 [ 323.207993][T10503] ? __fget_files+0x40f/0x480 [ 323.212701][T10503] ? mutex_lock_nested+0x17/0x20 [ 323.217748][T10503] ? __fdget_pos+0x2bf/0x370 [ 323.222350][T10503] ? ksys_read+0x71/0x260 [ 323.226702][T10503] ksys_read+0x152/0x260 [ 323.230966][T10503] ? vfs_write+0xd60/0xd60 [ 323.235413][T10503] ? lockdep_hardirqs_on+0x94/0x140 [ 323.240644][T10503] do_syscall_64+0x4c/0xa0 [ 323.245079][T10503] ? clear_bhb_loop+0x30/0x80 [ 323.249782][T10503] ? clear_bhb_loop+0x30/0x80 [ 323.254586][T10503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.260592][T10503] RIP: 0033:0x7fb1fb31358e [ 323.265034][T10503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 323.284675][T10503] RSP: 002b:00007fb1f95adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.293247][T10503] RAX: ffffffffffffffda RBX: 00007fb1f95ae6c0 RCX: 00007fb1fb31358e [ 323.301245][T10503] RDX: 000000000000000f RSI: 00007fb1f95ae0a0 RDI: 0000000000000004 [ 323.309242][T10503] RBP: 00007fb1f95ae090 R08: 0000000000000000 R09: 0000000000000000 [ 323.317240][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.325233][T10503] R13: 00007fb1fb5ce038 R14: 00007fb1fb5cdfa0 R15: 00007ffd3b669498 [ 323.333252][T10503] [ 324.386622][T10524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1901'. [ 325.167000][T10529] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1902'. [ 325.300825][T10533] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 325.918304][T10545] device syzkaller0 entered promiscuous mode [ 326.407399][T10561] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1911'. [ 326.826128][T10560] delete_channel: no stack [ 326.830915][T10560] delete_channel: no stack [ 327.784542][ T155] wlan1: Trigger new scan to find an IBSS to join [ 327.867151][T10609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1924'. [ 328.006607][T10609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1924'. [ 328.221313][T10603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1924'. [ 330.186441][T10633] netlink: 'syz.4.1932': attribute type 21 has an invalid length. [ 330.321536][T10638] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1934'. [ 331.833635][ T1430] wlan1: Trigger new scan to find an IBSS to join [ 333.664373][ T145] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 334.004770][T10663] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1944'. [ 334.382604][T10662] delete_channel: no stack [ 334.445386][T10662] delete_channel: no stack [ 334.633100][T10676] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1948'. [ 334.643047][T10681] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.667433][T10687] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1949'. [ 334.946272][T10702] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 334.969836][T10703] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 335.392840][T10726] netlink: 'syz.4.1962': attribute type 29 has an invalid length. [ 335.457893][T10726] netlink: 'syz.4.1962': attribute type 29 has an invalid length. [ 335.537544][T10729] netlink: 'syz.4.1962': attribute type 29 has an invalid length. [ 335.805080][T10733] netlink: 'syz.4.1962': attribute type 29 has an invalid length. [ 336.409091][T10743] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1964'. [ 336.581924][T10754] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1968'. [ 336.750054][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 336.821325][T10765] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.121524][T10773] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.1974'. [ 337.168150][T10773] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 337.470084][T10782] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1977'. [ 337.643628][T10787] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1979'. [ 337.932611][T10793] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1980'. [ 338.700878][T10810] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1987'. [ 340.844040][T10849] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1998'. [ 340.878370][T10856] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1999'. [ 340.878402][T10856] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 340.942924][T10860] pimreg: tun_chr_ioctl cmd 21531 [ 341.023116][T10865] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2004'. [ 341.211524][T10873] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 341.606427][T10887] netlink: 'syz.3.2010': attribute type 27 has an invalid length. [ 341.649220][T10887] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2010'. [ 341.702331][T10890] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2012'. [ 342.097054][T10915] netlink: 'syz.0.2020': attribute type 29 has an invalid length. [ 342.185277][T10916] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2021'. [ 342.210986][T10915] netlink: 'syz.0.2020': attribute type 29 has an invalid length. [ 342.628829][T10918] netlink: 'syz.0.2020': attribute type 29 has an invalid length. [ 342.766759][T10932] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 342.797371][T10934] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2026'. [ 343.221107][T10954] netlink: 'syz.0.2030': attribute type 29 has an invalid length. [ 343.255802][T10953] netlink: 'syz.0.2030': attribute type 29 has an invalid length. [ 343.264780][T10954] netlink: 'syz.0.2030': attribute type 29 has an invalid length. [ 343.295751][T10954] netlink: 'syz.0.2030': attribute type 29 has an invalid length. [ 343.456752][T10962] netlink: 166 bytes leftover after parsing attributes in process `syz.2.2035'. [ 343.739972][T10972] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2038'. [ 343.851213][T10976] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2039'. [ 344.311748][T10991] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.224128][T11031] netlink: 'syz.0.2057': attribute type 4 has an invalid length. [ 345.493653][T11031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 345.782245][T11035] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.965498][T11039] __nla_validate_parse: 2 callbacks suppressed [ 345.969380][T11039] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2059'. [ 346.357449][T11052] netlink: 'syz.4.2063': attribute type 5 has an invalid length. [ 346.614594][T11059] validate_nla: 3 callbacks suppressed [ 346.614613][T11059] netlink: 'syz.1.2064': attribute type 29 has an invalid length. [ 346.816687][T11065] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2066'. [ 347.315870][T11092] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.956317][ T145] wlan1: Trigger new scan to find an IBSS to join [ 348.494726][T11128] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2083'. [ 349.287043][T11149] device syzkaller0 entered promiscuous mode [ 349.466684][T11156] netlink: 98936 bytes leftover after parsing attributes in process `syz.2.2093'. [ 349.956373][T11165] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 350.485587][T11185] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2100'. [ 350.524217][T11184] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 350.989564][T11204] netlink: 'syz.3.2107': attribute type 6 has an invalid length. [ 351.175907][T11212] netlink: 'syz.0.2109': attribute type 5 has an invalid length. [ 351.384914][T11216] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.544472][T11222] device wlan0 left promiscuous mode [ 352.177461][T11212] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 352.355961][T11238] netlink: 'syz.3.2116': attribute type 2 has an invalid length. [ 352.382237][T11238] netlink: 'syz.3.2116': attribute type 7 has an invalid length. [ 352.400604][T11238] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.2116'. [ 352.407797][T11212] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 352.444921][T11227] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2114'. [ 352.454160][T11215] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2113'. [ 353.457964][T11283] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2128'. [ 353.467888][T11285] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.830621][ T145] wlan1: Trigger new scan to find an IBSS to join [ 353.868273][T11293] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2131'. [ 354.438170][T11300] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2131'. [ 354.886142][T11310] netlink: 'syz.4.2137': attribute type 10 has an invalid length. [ 355.549011][T11331] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2143'. [ 356.618646][T11364] netlink: 'syz.3.2152': attribute type 21 has an invalid length. [ 356.631323][T11364] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2152'. [ 356.641679][T11364] netlink: 'syz.3.2152': attribute type 4 has an invalid length. [ 356.650575][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2153'. [ 356.766512][T11374] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.863225][T11380] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2159'. [ 357.795875][ T145] wlan1: Trigger new scan to find an IBSS to join [ 358.231811][ C1] [ 358.231819][ C1] ================================ [ 358.231824][ C1] WARNING: inconsistent lock state [ 358.231830][ C1] syzkaller #0 Not tainted [ 358.231838][ C1] -------------------------------- [ 358.231842][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 358.231850][ C1] syz.2.2166/11403 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 358.231874][ C1] ffff88805d095b20 (&htab->lockdep_key){....}-{2:2}, at: htab_lru_map_delete_elem+0x1b1/0x640 [ 358.231918][ C1] {INITIAL USE} state was registered at: [ 358.231925][ C1] lock_acquire+0x19e/0x400 [ 358.231941][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 358.231959][ C1] htab_lru_map_update_elem+0x37a/0xc40 [ 358.231972][ C1] bpf_map_update_value+0x57d/0x650 [ 358.231986][ C1] map_update_elem+0x626/0x770 [ 358.232000][ C1] __sys_bpf+0x46b/0x6f0 [ 358.232013][ C1] __x64_sys_bpf+0x78/0x90 [ 358.232026][ C1] do_syscall_64+0x4c/0xa0 [ 358.232039][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.232052][ C1] irq event stamp: 6010 [ 358.232058][ C1] hardirqs last enabled at (6009): [] noist_exc_debug+0xee/0x120 [ 358.232076][ C1] hardirqs last disabled at (6010): [] irqentry_enter+0xf/0x50 [ 358.232094][ C1] softirqs last enabled at (5600): [] __irq_exit_rcu+0x13b/0x230 [ 358.232111][ C1] softirqs last disabled at (5575): [] __irq_exit_rcu+0x13b/0x230 [ 358.232129][ C1] [ 358.232129][ C1] other info that might help us debug this: [ 358.232134][ C1] Possible unsafe locking scenario: [ 358.232134][ C1] [ 358.232137][ C1] CPU0 [ 358.232140][ C1] ---- [ 358.232143][ C1] lock(&htab->lockdep_key); [ 358.232152][ C1] [ 358.232154][ C1] lock(&htab->lockdep_key); [ 358.232163][ C1] [ 358.232163][ C1] *** DEADLOCK *** [ 358.232163][ C1] [ 358.232167][ C1] 1 lock held by syz.2.2166/11403: [ 358.232175][ C1] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 358.232212][ C1] [ 358.232212][ C1] stack backtrace: [ 358.232217][ C1] CPU: 1 PID: 11403 Comm: syz.2.2166 Not tainted syzkaller #0 [ 358.232231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.232240][ C1] Call Trace: [ 358.232245][ C1] <#DB> [ 358.232250][ C1] dump_stack_lvl+0x188/0x250 [ 358.232271][ C1] ? show_regs_print_info+0x20/0x20 [ 358.232293][ C1] ? print_usage_bug+0x42a/0x690 [ 358.232308][ C1] ? verify_lock_unused+0x18/0x140 [ 358.232327][ C1] lock_acquire+0x2c3/0x400 [ 358.232348][ C1] ? htab_lru_map_delete_elem+0x1b1/0x640 [ 358.232363][ C1] ? read_lock_is_recursive+0x10/0x10 [ 358.232381][ C1] ? look_up_lock_class+0x71/0x110 [ 358.232398][ C1] ? verify_lock_unused+0x18/0x140 [ 358.232417][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 358.232433][ C1] ? htab_lru_map_delete_elem+0x1b1/0x640 [ 358.232447][ C1] ? _raw_spin_lock+0x40/0x40 [ 358.232466][ C1] ? htab_map_hash+0x269/0x6d0 [ 358.232481][ C1] htab_lru_map_delete_elem+0x1b1/0x640 [ 358.232501][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xc00 [ 358.232518][ C1] bpf_overflow_handler+0x3fd/0x4a0 [ 358.232537][ C1] ? perf_event_switch_output+0x730/0x730 [ 358.232558][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 358.232576][ C1] __perf_event_overflow+0x364/0x530 [ 358.232595][ C1] perf_bp_event+0x276/0x320 [ 358.232614][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 358.232645][ C1] ? rcu_lock_acquire+0x9/0x30 [ 358.232661][ C1] ? read_lock_is_recursive+0x10/0x10 [ 358.232683][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 358.232703][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 358.232744][ C1] notify_die+0x141/0x1a0 [ 358.232761][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 358.232782][ C1] ? trace_hardirqs_off_finish+0x24/0x1f0 [ 358.232801][ C1] notify_debug+0x20/0x30 [ 358.232818][ C1] exc_debug+0xcf/0x130 [ 358.232834][ C1] asm_exc_debug+0x1a/0x40 [ 358.232847][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 358.232873][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 358.232886][ C1] RSP: 0000:ffffc9000319f640 EFLAGS: 00040806 [ 358.232899][ C1] RAX: 0000200000000300 RBX: 0000000000000000 RCX: ffff8880614ad940 [ 358.232910][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 358.232920][ C1] RBP: 0000000000000001 R08: 000000000000007f R09: 0000000000000000 [ 358.232930][ C1] R10: dffffc0000000000 R11: fffff52000633f27 R12: 0000200000000300 [ 358.232941][ C1] R13: 00007fffffffeff0 R14: 00000000ffffffff R15: dffffc0000000000 [ 358.232961][ C1] [ 358.232966][ C1] [ 358.232970][ C1] perf_callchain_user+0x40e/0xfd0 [ 358.232993][ C1] ? get_callchain_entry+0x181/0x3b0 [ 358.233009][ C1] get_perf_callchain+0x33d/0x460 [ 358.233025][ C1] ? put_callchain_entry+0xb0/0xb0 [ 358.233042][ C1] ? __perf_event_header__init_id+0x3f0/0x500 [ 358.233059][ C1] perf_prepare_sample+0x352/0x1cd0 [ 358.233080][ C1] ? perf_callchain+0x190/0x190 [ 358.233099][ C1] perf_event_output_forward+0x185/0x2e0 [ 358.233117][ C1] ? perf_get_page_size+0x430/0x430 [ 358.233139][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 358.233156][ C1] __perf_event_overflow+0x364/0x530 [ 358.233175][ C1] perf_swevent_hrtimer+0x41b/0x5b0 [ 358.233193][ C1] ? cpu_clock_event_read+0x50/0x50 [ 358.233222][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 358.233240][ C1] ? _raw_spin_unlock+0x40/0x40 [ 358.233256][ C1] ? debug_object_deactivate+0x62/0x390 [ 358.233278][ C1] ? cpu_clock_event_read+0x50/0x50 [ 358.233291][ C1] __hrtimer_run_queues+0x4ad/0xb70 [ 358.233320][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 358.233337][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 358.233357][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 358.233387][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 358.233405][ C1] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 358.233421][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 358.233436][ C1] RIP: 0033:0x7f8cc7bd5afd [ 358.233449][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 358.233460][ C1] RSP: 002b:00007f8cc5e518a8 EFLAGS: 00000283 [ 358.233472][ C1] RAX: 0000000000000300 RBX: 00007f8cc5e51de0 RCX: 2f666c65732f636f [ 358.233482][ C1] RDX: 0000200000000300 RSI: 00007f8cc7cb61a0 RDI: 0000200000000300 [ 358.233492][ C1] RBP: 0000200000000300 R08: 00007f8cc5e52010 R09: 00000000ffffffff [ 358.233501][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 358.233511][ C1] R13: 0000000000000073 R14: 00007f8cc7c60204 R15: 00007f8cc5e51ea0 [ 358.233529][ C1] [ 359.504737][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00