last executing test programs: 34.330030097s ago: executing program 2 (id=3096): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x6, 0x7}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x3}, {0x10040002, 0x0, 0x7, 0x5}], 0x10, 0x80}, 0x94) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r2, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='cgroup.freeze\x00', 0x100002, 0x0) r8 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r8, 0x0, 0x4000) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.030099018s ago: executing program 2 (id=3100): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a2e", 0x11}], 0x1}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002480)={r0, &(0x7f0000001480)="89ec12b75550cb9de78339e9eb31d9ff553b73ecad6761ff894d980f1302a2bdf8a01fd641e1352573a526f4526eb5f7d74420abe49428edf58894dc4f792998ac1f3eabf88887d1ad02d0ccb321095689ce050bcf6222d23a0d6f72d1a144e175591ecee80366119f3adcf7c649bd62f09594e05709b8eef25e5840a9206463d956ca8a66ce063dd5dec41a6324c61ee55f91f8e4b3aa849bd40c45067cc85a65e3111039802d10c6dd8a5516f29fc15f663d598edc82576854db6e526910c989ae89cf34769db5b8cbb441def7516b5a8beaf727daf8cce21c81586a4df19b0478bf4a3a2796a11d81ef703557566a84ea8b65072d32f59923ce6beb91bc33cb553981aea30d8eb5e83f404f85c327f8b911460a571c1e25977222c733fe69ef9380a49b6941bab60c05cf9682fdb9cb86361ad46886a86467a489f26f57e1605d8a9fd562f0655b8e58cb7dce7864b5bd654eb82bfe67d802817350e11efbbc22fa53febb82671113385f349cd6a3f0130a2ba068c007d82952fcc2ba420af624b535b0ebc077cd6fb0d81d46a53efc8dc0a2f8b3846fd2b01eb476eb95fbb2f764c4dc095a6c3a10ea434fcae5da7f165f215c0417d1bf7040246fe1418b50dc46ef6e9b91b8f54f0915edffe49fcfa7d47f0bff961d1d0c057146f930f3db0de640723411e9ec57b8e9ccb25c53dd668b9c3ca7c66345e688ea3946078ea9bc03df60916168a1b25edce9eba115be1781299a8d08388063a996ab42670d139a60ead66cd49a38aa0c12ad5795a09ccd9b13705ba2ed831f149775bf2b1ce392e871a4701c573ce6028a199ab27d418fde67b302e654164e593dd0c3f80251c774ba9f84c9e5ea11ec6da529e173372f0ea7bb5fba0bb4aa224b62d65acf440fea4b0dd68d34acfe1ea56a78b11a4f17d09ac9d9d8b600624b005247df525d3a38b92a80853272a27cd2d580411fcab8033427ffdc9479a982bce494ac5b339de44824c216b70c9b67076e2c443221e4bd9ef9268a83164d8fb2355163bef59a313b4d113c6bfce22769960d1715526d06caf41cb8acbef99cbf65940dc137ef77c41d6ab78d41d03b9fddd80866f4e61592bbe2e9cabc7c21b045fab42ac448e6b5a03743c00334a5888dfdaec298fd9288c5cf38b6b6b902775f9ff39a185b18d53b07fcbf6f739049efcb2aaf076ff7f09ed766b67a0a51ee1cd5ce7ed37a118d0bc0909b3c558fa9c294eaf1bb620e7f12bba2ef7d5d34b4a1a392d007b7d4a911fc1a7118ba79b8cd5f8f25567a2abfb4947ef29b51881015c1591178d9b6a5fcba3e3344582dc8cfcaac940fc389f1e529e75d35f416ccb3f37bfe41c40b01efa966eea8b208b758bb379c6e3ec985b1e4caefe05e9829c1b0373b57d71a6d89ba9e57f3c726adf9db905f4bb63c2aefd2810e1c1b969e552b09ca0cb731e2d44e88f3bda93ceb894a6f8cd89610d3c9343b76fd81f4ab811f6458433bd6842d4d9bde19c5910eaf299a83d199c7f1b4365561cd08a6ec82bdf089cf7f3e04bcd6b8250d6ea3ce2abcf2d100a3f8547d026a42a6f75ec990f659d36b0a4e5782003f0769d9e73bd9beeb8c9554a4ab1b13f811ffe6eb3beb2aa2fd8b1c4ce5ece756da99896fe20b37432f9ea2cb4504b4e99e902c51ee78f97b73b73feccf2fd1ebbbd89ddca2abc73f9ba156416aa7e20e55819d95fe8cc8ccfd5c847e2875af0fd26f2162bbf59467b22e4f6cc761aab41b98cbfd6a8db28b7cac588ad65b3f1977eeff0402a273cb86522871e34661719eba3ec879f5d82eee9a847067aa7404f3b198ed6b1e974bd38210eb59e2b0e3029c4065207f35a6a329bcdf3496dfeb4712658962d7c552863c00dacfaab8d1b12ca977c76013e7901d03d41503f1a25143f5723cf99ad242f7d64932207583771ea92e0863377e29c0786715be348fab12e2973ba2985d4eba819d0a3a6ccafc848a892c358de8b0d57c0a44e25ed4fc46a56e793899ec3bfb1ea411b4259d0c949c00cf81ffd15b8ab678064c01745811217640baa3a882e3af2f8aa6968766c62a8cf97779451215b2e34d2b387e4aab1147589276b988606b0390e4189e8c2fa3d6035e88656e6a02f97ec37b1cccd51184cbca1dd8e1f7d7173e6ada31b4c9760f1ac4fb85435f09cd6d9e8594b5f6e8079743a26d3db12476559092d23ae8c765a15f9a958c988e11db02489e8bb4a5f7bedcb7d214e1f341901960cecca6aa8f4b130e01a95d566e648a4910c479535771a3f07233465a2dc4e784ffbe6dd993c7680364dff929b91d80a96840205a95b753d2c356c0d14c304afaab8d2d068d185b07f0a08a9005cb58d54ae4c116983955cf11ba499c6ebf7b37bfa205ed91f0362823bcba392360e86d4aab7b376b2a8b74d0d2ff830bf509b6431a506fea06371377148d3206b28be69ef03fad6565b76306db67ba5efe60234a7e31964c3282347445a4ac50ef773af238159f86e13ba2b703113647fe32ad19adf927fffcc445909021e3a6470f56960952a518bae104962799a1737550acda16538ce69360109fcac22f4cec049f64415c4a825b36c74dc3dc05557386b7633656b110847168347f6d6bc99dcf33d7bcccabad31bede9453d1ce3ab4c5fbe7ca0241cc4c49d1de0db8b7c2d738ec78b1575b45b25eb3d6e6f0e5829bce63ac0480857b15edf975ed13a006e2103642bef2b66964dead8d2ca16560b0832a86778d39def84c3d5f2fbe1eb271b01d89039777298b8b096a1a92036c44d66be46954a93fce620a9e914a6699c92a986255fce7ab8d9e946231952b3c401e55e2227ac9da9bf3a013db5771fe405d352090239f1084cc6f70706448be0515154787d4166e08e10cfe41ba893d93ffa7062ace6f68baa06cc8733f506e4dde96bc5c34de9e90342716acd97dee9eaecef785279ae5790a19980035c5c03104a32c94e5324ee1e39c36b8c5d68318eea2843948da7ddaa249492b5685a9347700e7a033dbc5722c4421f45d9f3cd8395ab1deb20ad910efb70f90312f0c526a0b276178bdfca54cf3406f7501c185e46def60a9774458cdbf0e57e055301f42de03e96981017c73df57ea830fc9eafa94ee00cae5aa81e9bf71a68aebe29af6b0dcf6dc2b3e928eefe964444b21eded3eab05c4e96193a125605f629697e3c4d626905c890006958e34edc19bf695156939a4391302306b055b5d78c5307a781dd7257db59047acef2c2aa987a9a6735fc0c2bf4041fa7cb1dffdc5c57f464a43c1569ab8759fce178055a54503f9337c87fb0a994456f43a037d67387b4fc2f84c281c74cd68ad7e5f3dad86b5386bf7db41336b1489839aa047ee0dd5b6c6084f7d6048d7412032d96a0ffdcdb98a0d0a39464c96a776c36bbb95d1158c851471056b999d39208e81d1c07e1c11f2ce4c83abfb18336c9ab71c74ca75473c47a34512bafcb5c0013f7cc2aaf200521a9bcf9416b2c05b083329b9bdc38ee6e25ef1429732f453c7cc2a5d4cc31b866e61345122de9d4565d6d94ac6e7ef519a422c8b40ff4e8c161374ff6878a71a06941846c6eedeb422bbd652214c7abf9ce1c7dd170c4f6ecb34197b2a37e19801206f9ca7401b51170abe2e16cb801258c9156bfe0ea3041b4329635e8faadfad98bd3e4546133430481681e286224f169f02c4e43537f607155bef6578d984e2886fc82cf89ad71eefc3866b8cca4eb27fb058a173f59681dc5ad12ba0d55dcc331decc90277aee8a619bb7d4aab50476a3e17e5dccacf8c704538836fc35a7c9998a05012a753b98fb79680af21b41e6232b5fadcfbcfa2527cf3f8e363e9c181ec2090949efe0a2c95016cde69003abbcfab5a89df057cfc90c9f596fde997c011fb1ca721ab6257fe5a6a9f2d27adcfd9f14ec72b9085d54bdb0c4ccb5c40faeca4cf98cc0d9a6df3c92f88bb861eeffe9a484261be0c0d3fe51b0b460eae9cacac8898f50edf71bf045ec42d9174f8fd9bdb39cf0b3a7c4f0a4f03b9bebe5d8dfecc91b0c9657ba5c0fb425380053df5473e4cdba2691d09b177789b8b88bad816c715a03c51648e2120e0f0f65c0706245873a5890448984a3012ff2a0e753ef0999cf0a7757ea1205072eb181f22cdd66269d08e2f3e4c5ebf767e28d74374d85b3bd004d20ad77db4d332bba7a4b60d6db8c026b2f73c3d4cb91a188f60959dc983609570e94089c8aea96c393fe234f7d1b4d1d8753c93cf2669770b73011b4101ffa370379262de811b115a9d2caa9955c8b02c33177c767b91fb73317bd4098233c547a249155053891300860da6a18458cd4c16309dbb30dbd522ed84154d099e6af135c6fda8a9f2286da0df43de7cebbddb0acf0bc77a4b9cf2a9491f7a787f35e114c716f23f545301eae8cdfe1b1ec6dcd97a0e39a25d59151d84bb351c00fe5e3f6f2afef238386d5098ef2216836b716ae0b8580178f217cca4ae6574c5bd94c276af15b02457f323e13dff3da00cea9fe200affa5198b1dd61131c769d00d645bf2fe4e1c594c8da08590d9332d81a2df93df68d581544166ce3050790de15757da7c91607cd973fb83711be1ae172cabb6c2a9d0c759f562cab366e809c78f131b9dd7b76b0e14a8be6f70bd18b14b67016d1a2dc98abf33d7dbc40a9823fe3ca982b9730b05ea6e675b10552d617c49542f8b43d4a94eca69d3b408363fae2189d7c24311591f198de9e2d0e1a6682ffbb93a69289e97e9cfbebff284e15da643aaaf4a1f96bcc9a98e6a509050a2cefd362bd9b954eee8fb765ca28b934cfa2aa96f4297b4913b8cdfe97da0c0b9e248a364400e7d519fd2088182563dd316e3e7d8593edea14687fe73580ff39e3cdc6b2ce6ee3b48022aecfaf060687905fdd43037b56d6a6249f5ff819061ee0f737a8806d4e4fa0f0cf6fadd0833da84e191de784b41c4b3bc557aa919426aec0adbac8411642d63052d302658f6013ea0bdf16b62b986d2d8e1406fcafdbc550f0305ca34ef35622e622c810a396ec3424e9045e833c6100ab367c675b797b21175246afbf11f444aff9119bc2c0574e5df0a220768a76209d6fef115bd83675e7c3e59c3c89920cdae09dd07f52f8e4dd3cafb7ed2715293551b3b055822d56dab63cf0152be6a1a41a1a6a51a754424026ebd09c1b5b95303cbe9775d0656d5eda71ca4b68cd2905d69c01cc42d19bcd34286c6e87b45ddb9d74d6016dac3c36b9c92186963433e2f7676a611400fac005072270cd9d4d20c9ed76e3e0029e9880a05d91745a625abc5ff677458d0af529e0b8da9fe89013e6f21942ee1d61a71b96d99b81c0f9a13a1c6826579d5dd55edf20343a24133090740f502f43149a0630ae6708f9804a04b107d3f49af435d2f5f16b28fbb02f7a54a02ad18f292ab24119a399a94406b3c65a7dd1f723eb2d5a1447ffca2b556e13f20d8d7bc479fbfd17c0ccb621560bef8c8a4d09ef536239957d86147904e5b129e536c30eb680184762e06492e676fa36ef394cc68272e6ed4ebb115c52aa6df181153d963bf564366588c1f9d070bf219258e802e9830b875b3d01abc732e5b7684e418c2f73c7b255ed23b048dbc5c3ebdbd2e7e72b5ac38d5331cc1a87006c758e03d45c7da09d705e5d55b3ebf1a7aab283ac348daa1ba6a52d2760f2976b01156918413929c78df49c08192b0c55f6735d5cdf2daf83c3b0e93fe1d6ba1ba10a256310a4cdc2d5b45cd2e2df977b97e08e21579e8287840d2d98df421db725b3ecd1"}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003540)={&(0x7f0000000340)="4ad8ddd31fa9471136f636eed56f9bb1455b812c91a4ddb46e70571d301dff58d4a353217887a38fb129b02dfa44365d089e674f9ef91fb0068889d3a9fb9cccf554bfd16ae8f882b3d914c4e10fc863de56b06a5a6418c922a6fe42ffc15563452fb1d9649b87dd15dac0dba95f68bf821bf9c8cdd0c5ce1f4810ee49db8c6403650a61331fc9de2ab4d96b165901fc8b1a451931ad9d241b70ee74f4d6e735f15114c9d144fa484e3db8ccf38d91728367771020e187a658f58474ce32fefdf463aed3b1364d6aa6984f425178a68d010dc3a3b09315a84e3519f7e3", &(0x7f00000024c0)=""/4096, &(0x7f00000034c0)="a204e56818c73d9072027d9bd0557a5b997e27a1f7fb13fcdf7087553f3995fdb3bee1fb7d6e1ae3299d2cb111f68c", &(0x7f0000003500)="c6c5ddebd277f6e876aab8196bb21e8a6703bdd4a3aa7b3160ad736824d29735128dd43e1831a9ae4449e764dc930244d3cb15a1", 0x0, r0, 0x4}, 0x38) (async) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 32.56871761s ago: executing program 2 (id=3111): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) 32.250638995s ago: executing program 2 (id=3104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc2841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x20000, &(0x7f0000000340)="1d7e28fba5b820a0c92e947b299dc92b9c18752cfcdfbf39f1dbfee2dc0afa65ca80b4e28b59cc6616203c900f2717b286a1ade9b37bb3f2984ea570f33d6364b54b6eb9f6dfdbe92ed3d03726cd69c48076286d10b4f0f0f2638e2422d2d27e3a55b05c4f74b534b6ae38d7", 0x6c, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="81e51c73746562d2286d7727ed8a7ce0c68edae4813b155952367060aa8c53945a8f904f81aed8cdd0d5683f31659e9e1f912e7b9911325c6d091362990a8b85b205a322b9caeb4f3f1d9024bbc4fe6f99d9171df603c4a172ec5e2a42e82381810528") bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6004, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x7, 0x6, 0x9, 0x6, 0x0, 0x7, 0x810, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x4000, 0x9, 0xfff, 0x2, 0x6, 0x5, 0x1, 0x0, 0x7, 0x0, 0x5000000000}, r3, 0x10, r5, 0x19) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}], 0x1}, 0x12000) 31.013535704s ago: executing program 2 (id=3109): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0xc46, 0x5, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$kcm(r1, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[{0x10, 0x102, 0x4}, {0x10, 0x116, 0x1}, {0x4c8, 0x117, 0x5, "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"}, {0x30, 0x35, 0x1, "6379dd542c7842d3c36e0bd96611bad3001e472e49cbf63995ac9c28c689ee07"}, {0x48, 0x107, 0x400, "5a7edbc47b9cb24163ded6b6acf4bd8a3426726d0793d05ff54fe83c477a548ea56475b11aa8648a3a936bd92476eea3aadf"}], 0x560}, 0x44811) r3 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x6) socket$kcm(0x29, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffff7ffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="2d7069647320159f54e8d4456857bac9c9beff2223869e3278bfd9"], 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000080)) socket$kcm(0x11, 0x200000000000003, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 30.163902834s ago: executing program 2 (id=3116): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000a000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000880)={&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000440)="4ce691026414640acbdb62b6ff7c64a22fa427e5e2d4ba224ef022d2817f13a63a9e8fa1b4580a1c3116c940dcb08f8eb49d6afbfda53a41b553bb8a8fd9ba9c40d5f2a817f46edb47f99c53972a12bc94e95596160bcd0d41d0c7877c7f87cc4b813d115dfdc8320d4c746271b455c4f65342c1c2c9176a1bf852c7563fa194013a1d9798623c390a010ed9d784f8f7f2b9da5b277aee54e3f5cd", 0x9b}, {&(0x7f0000000540)="19810f14786571df0fa10f13663896b3e81790d12aeee2dd3885db0c7d83943624c39acf2f297423337ccf0fa548380f56255e2ce8d14d563b8f8ff285ac510cea263e11ee1ba2fea8c4873a8dd7f75f310385bdf193791b20a6982b9ca42d28794e8aff59c7705226afcfb82a67e969e0cf4daa0519956fce52b5ac4322d4e65613986df18b54a79ebb74e5e8433a85316464136c984c889f", 0x99}, {&(0x7f0000000600)="9b519382df8eae25906ddfb889b3c08a27408f171612d5c0ad713472200eee4669e6212fa575d81a4a146adb5cdc18d8070ceabb2336c562bffce998dd2257405a772cdc", 0x44}, {&(0x7f0000000680)="b67764933ce10fad9e5b822ea74ce868ece4bcdc0f0dd15778d12c1a1732f422b1760c31a3ff82406e29a73268e09b1e15962c5b456d254e332f1faafad00e21d011f2fe672b489d9632f830fdc656d6b28f135b79fa552e264e6a3ea4189a948fae88b8ab99e88917d8e3d617d67df06e2c141e4ccebb6aefd70bcb644fcb1ad93558", 0x83}], 0x4, &(0x7f0000000840)}, 0x44000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x100, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x1) recvmsg$kcm(r8, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x10020) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f00000008c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) 20.452610253s ago: executing program 0 (id=3167): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81005, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) close(r5) socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000) recvmsg$kcm(r7, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000022) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036a"], 0xfe33) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001040)="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", 0x429}, {&(0x7f0000000340)="19bd20d9c02fd940acfcd41ed4b5587cf4a0aab373e2b95182e4ced54e910ac5c6feb23c2e7586cddb8dfae7b4fe004bb6e3baa29d6db117ca9cfe7ac73b94ef6976ceeca4a02b3cd033bd767bcc4c06bd7e80488b7b3bf4363514c61fc70f031f09d12860502f0a303f87e89f10bc42d1c89d28513f75d7da0937c907564097b5a74f57acd0061f5d4eb48e8d", 0x8d}, {&(0x7f0000000280)="2df4020eaa0efa2115bc6d7660231a543cd195523496ae01e72fe7410eccb0c88387602d4e7af79d18a5fbaabcf18c93903afeb59f9ba25ea4fe32e49e02e9a16f407c2b13623a3f47c124bca7aa", 0x4e}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast2}}}], 0x70}, 0x4000800) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x78, 0x7, 0x7, 0x0, 0x3, 0x100, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000001c0), 0x9}, 0x560e, 0x8, 0x3ff, 0x9, 0x9, 0x5bd7, 0xf, 0x0, 0x9, 0x0, 0x5}, r9, 0x7, r6, 0x18) setsockopt$sock_attach_bpf(r8, 0x6, 0x21, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x9) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0) 18.485736046s ago: executing program 0 (id=3173): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x900, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000050000002900150006000e2603600e120900040044000500a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080) 18.415175869s ago: executing program 1 (id=3174): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x60) 18.414057239s ago: executing program 3 (id=3175): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x7, 0xf9, 0xf7, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x2, 0x7fffffff, 0x2, 0x8, 0x34a4, 0x2, 0x577e, 0x0, 0x4fde5e8b, 0x0, 0x3}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x119c21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r3 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0xa, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x8, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x7}, 0x4869, 0x6, 0xfffffffe, 0xf, 0x0, 0x5, 0x2000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) 18.158196192s ago: executing program 1 (id=3177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc2841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x20000, &(0x7f0000000340)="1d7e28fba5b820a0c92e947b299dc92b9c18752cfcdfbf39f1dbfee2dc0afa65ca80b4e28b59cc6616203c900f2717b286a1ade9b37bb3f2984ea570f33d6364b54b6eb9f6dfdbe92ed3d03726cd69c48076286d10b4f0f0f2638e2422d2d27e3a55b05c4f74b534b6ae38d7", 0x6c, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="81e51c73746562d2286d7727ed8a7ce0c68edae4813b155952367060aa8c53945a8f904f81aed8cdd0d5683f31659e9e1f912e7b9911325c6d091362990a8b85b205a322b9caeb4f3f1d9024bbc4fe6f99d9171df603c4a172ec5e2a42e82381810528") bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x7, 0x6, 0x9, 0x6, 0x0, 0x7, 0x810, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x4000, 0x9, 0xfff, 0x2, 0x6, 0x5, 0x1, 0x0, 0x7, 0x0, 0x5000000000}, r4, 0x10, r6, 0x19) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}], 0x1}, 0x12000) 17.957901121s ago: executing program 0 (id=3179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc2841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x20000, &(0x7f0000000340)="1d7e28fba5b820a0c92e947b299dc92b9c18752cfcdfbf39f1dbfee2dc0afa65ca80b4e28b59cc6616203c900f2717b286a1ade9b37bb3f2984ea570f33d6364b54b6eb9f6dfdbe92ed3d03726cd69c48076286d10b4f0f0f2638e2422d2d27e3a55b05c4f74b534b6ae38d7", 0x6c, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="81e51c73746562d2286d7727ed8a7ce0c68edae4813b155952367060aa8c53945a8f904f81aed8cdd0d5683f31659e9e1f912e7b9911325c6d091362990a8b85b205a322b9caeb4f3f1d9024bbc4fe6f99d9171df603c4a172ec5e2a42e82381810528") bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6004, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x7, 0x6, 0x9, 0x6, 0x0, 0x7, 0x810, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x4000, 0x9, 0xfff, 0x2, 0x6, 0x5, 0x1, 0x0, 0x7, 0x0, 0x5000000000}, r4, 0x10, r6, 0x19) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}], 0x1}, 0x12000) 17.872766825s ago: executing program 3 (id=3180): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0xfffffffffffffca6, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 17.590562128s ago: executing program 4 (id=3182): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81005, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) close(r5) socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000) recvmsg$kcm(r7, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000022) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036a"], 0xfe33) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001040)="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", 0x429}, {&(0x7f0000000340)="19bd20d9c02fd940acfcd41ed4b5587cf4a0aab373e2b95182e4ced54e910ac5c6feb23c2e7586cddb8dfae7b4fe004bb6e3baa29d6db117ca9cfe7ac73b94ef6976ceeca4a02b3cd033bd767bcc4c06bd7e80488b7b3bf4363514c61fc70f031f09d12860502f0a303f87e89f10bc42d1c89d28513f75d7da0937c907564097b5a74f57acd0061f5d4eb48e8d", 0x8d}, {&(0x7f0000000280)="2df4020eaa0efa2115bc6d7660231a543cd195523496ae01e72fe7410eccb0c88387602d4e7af79d18a5fbaabcf18c93903afeb59f9ba25ea4fe32e49e02e9a16f407c2b13623a3f47c124bca7aa", 0x4e}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast2}}}], 0x70}, 0x4000800) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x78, 0x7, 0x7, 0x0, 0x3, 0x100, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000001c0), 0x9}, 0x560e, 0x8, 0x3ff, 0x9, 0x9, 0x5bd7, 0xf, 0x0, 0x9, 0x0, 0x5}, r9, 0x7, r6, 0x18) setsockopt$sock_attach_bpf(r8, 0x6, 0x21, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x9) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0) 17.532591901s ago: executing program 3 (id=3183): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = getpid() r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x8, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x1, 0x8, 0x0, 0x0, 0xb766, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfff}, 0x800, 0x6, 0x2, 0x7, 0xc, 0x8, 0x8, 0x0, 0x1, 0x0, 0x3}, r6, 0xa, r7, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r9, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r10, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) setsockopt$sock_attach_bpf(r11, 0x0, 0x10, 0x0, 0x11) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x6, 0x1, 0x0, 0x4, 0x1, 0x200, [{0x5, 0x1, 0xf0000000}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x5f, 0x5f, 0x61]}}, &(0x7f00000006c0)=""/231, 0x38, 0xe7, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 16.942078079s ago: executing program 4 (id=3184): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad90200e006dcdf63951f215ce3bb9ad809d5e1ca", 0xb7}], 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64c9f4d4938037e784f869526f9aff94880f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000006105830000000000850000002700000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="14000c0016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) 16.827288355s ago: executing program 1 (id=3185): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32], 0x40) 16.438439513s ago: executing program 4 (id=3186): perf_event_open(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0xd4, 0x2d, &(0x7f0000000340)="2eb7a58174d8087d7f8ebc170889270c339a4f96474fbacaeb8676701d613b64c3cd3e900082f35c43617e3b15c41159ea65b32b2ef2b5c1af6b09cbae2a412908cdbc4c34e7c60b9de9a453dc63985d9d643d60b65d8633044819e597403936fcee7f4192085a692839e7e3c109e891be1217d2848e162d289018a20946147e0ae82c0673c1026c422adc57a19ef83c7e751912b076c04b8c0dc0b9414133cfa2f9fa54ff277ee022626f2f4e7cb32eebbfa8f5574b58bd5b000eb2ab104d6d73200bfcf0d9a8b1377aa033a3bf04ed1a967cfc", &(0x7f0000000440)=""/45, 0x2, 0x0, 0xa2, 0x5a, &(0x7f0000000540)="76d67185e5398cf9f5ce797149675e16e7219ce2dccca3db0ca7ce20e0cfce3e04a102903cdb1da708fb951cc61dbe3425a474b4d1d2a9f13ad03cdaacf612abe9bc93701dae6ebfe382f70c54b18382a1bf9a9bcc958047197c81e9a9054ac53104c360d46d0929d4260fa73ac6ed1859babbe843e48c8a64ba9fa20c8362b2058dbb0c3544524f5b5ee01a54bc5cb193117cf29e6b21b3953ebd8ec7c13dfdc079", &(0x7f0000000640)="bbc6cf0357c76286fdd9e2b189ff31e536879f17836d66f65d3c104d95602064a1fc0e70587647a320aa8e153b289199a9525af35c5521dd1e601f1f80325677e8209366d2c35267785344cc493987b24171db816c9e4bcc9436", 0x5, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socket$kcm(0xa, 0xd, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x7d403713ee32b5ea) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000c0000000000000000000000000000000001"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x0, 0x52}, 0x28) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 16.419897154s ago: executing program 0 (id=3187): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000000), 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0xffffffff, 0x0, 0x3, 0x7}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x101d0) 16.389844725s ago: executing program 1 (id=3188): socket$kcm(0x23, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x0) (fail_nth: 1) 16.270500681s ago: executing program 3 (id=3189): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x7, 0xf9, 0xf7, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x2, 0x7fffffff, 0x2, 0x8, 0x34a4, 0x2, 0x577e, 0x0, 0x4fde5e8b, 0x0, 0x3}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x119c21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r3 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0xa, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x8, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x7}, 0x4869, 0x6, 0xfffffffe, 0xf, 0x0, 0x5, 0x2000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) 16.162342176s ago: executing program 4 (id=3190): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0xfffffffffffffca6, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.802936583s ago: executing program 4 (id=3191): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x0, 0x4, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000000009, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_config_ext={0xff, 0x3862}, 0x100410, 0x200, 0x2, 0x1, 0x81, 0x9, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x6a, 0xa, 0xff00, 0x80ffff}, [@exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x65, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780), 0x0, 0x81, &(0x7f00000007c0)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000840), 0x8, 0x5e, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x7ff, 0x16, &(0x7f0000000340)=""/22, 0x0, 0x49, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xe, 0x200, 0x40}, 0x10, r4, 0x0, 0x2, 0x0, &(0x7f0000000a40)=[{0x1, 0x1, 0x7, 0x2}, {0x4, 0x3, 0x7, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r5, 0x20, &(0x7f00000008c0)={&(0x7f0000000780)=""/125, 0x7d, 0x0, &(0x7f0000000800)=""/159, 0x9f}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x4, 0x4, 0x8, 0xfffffffffffffffc, 0x10}, @ldst={0x1, 0x0, 0x2, 0x90cd486f4f97af18, 0x1, 0x80, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x6a, &(0x7f0000000400)=""/106, 0x41100, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x4, 0xed4}, 0x10, r8, 0x0, 0x4, &(0x7f0000000940)=[r1, r0, r10, r0, r6, 0x1], &(0x7f0000000980)=[{0x2, 0x3, 0x5, 0x1}, {0x1, 0x4, 0xc, 0x9}, {0x4, 0x5, 0x1, 0xc}, {0x7, 0x2, 0x5, 0x8}], 0x10, 0x5}, 0x94) 15.708196357s ago: executing program 0 (id=3192): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0xfffffffffffffca6, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 15.552227855s ago: executing program 0 (id=3193): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81005, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) close(r5) socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000) recvmsg$kcm(r7, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000022) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036a"], 0xfe33) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001040)="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", 0x429}, {&(0x7f0000000340)="19bd20d9c02fd940acfcd41ed4b5587cf4a0aab373e2b95182e4ced54e910ac5c6feb23c2e7586cddb8dfae7b4fe004bb6e3baa29d6db117ca9cfe7ac73b94ef6976ceeca4a02b3cd033bd767bcc4c06bd7e80488b7b3bf4363514c61fc70f031f09d12860502f0a303f87e89f10bc42d1c89d28513f75d7da0937c907564097b5a74f57acd0061f5d4eb48e8d", 0x8d}, {&(0x7f0000000280)="2df4020eaa0efa2115bc6d7660231a543cd195523496ae01e72fe7410eccb0c88387602d4e7af79d18a5fbaabcf18c93903afeb59f9ba25ea4fe32e49e02e9a16f407c2b13623a3f47c124bca7aa", 0x4e}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast2}}}], 0x70}, 0x4000800) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x78, 0x7, 0x7, 0x0, 0x3, 0x100, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000001c0), 0x9}, 0x560e, 0x8, 0x3ff, 0x9, 0x9, 0x5bd7, 0xf, 0x0, 0x9, 0x0, 0x5}, r9, 0x7, r6, 0x18) setsockopt$sock_attach_bpf(r8, 0x6, 0x21, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x9) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0) 15.418319211s ago: executing program 1 (id=3194): socket$kcm(0x23, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x0) 15.384529713s ago: executing program 3 (id=3195): socket$kcm(0x23, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xa080, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%pB \x00'}, 0x20) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) recvmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2, &(0x7f0000001a80)=""/219, 0xdb}, 0x63) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004000000"], 0x50) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0xd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9941}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)='%pi6 \x00'}, 0x20) 15.254317419s ago: executing program 4 (id=3196): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa21, 0x0, 0x498a, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d4", 0x1a}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000050000000800000003000013040000000f00000000000000010000800700000001000000050000000200000010010000050000000000000003000084010000000800000001000000060000000c00000001000000000000000e00000003000000010000000300000000000011030000000100000001000000110200000005000000070000000000001101000000070000000f0000000000001201000000"], 0x0, 0xb9, 0x0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000d8ece2e5b0bb524b60fca5ed0818d409ec0c3e17a28676488c3622c63fd5d4cdecce0ec6d180d5d1f4b0fb09ab3e1c920c26dac49ebc01d36a2cd1723cca826c5c5786547ff757ff3fdfb67b6fed66d82434620eba07353aaeadc8439112f2b6227b7631ec74ae77ae3ce7c18900c7aaa0e87f60176204fd8b3563a23041806a2ed531e31d407fc0", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="01000000000000000200"/27], 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc378554, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95f24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) r5 = socket$kcm(0x2, 0x5, 0x84) (rerun: 32) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6200, 0x3ffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r5, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x14, &(0x7f0000000000), 0x8) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 15.118240926s ago: executing program 1 (id=3197): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32], 0x40) 15.093864997s ago: executing program 3 (id=3198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc2841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x20000, &(0x7f0000000340)="1d7e28fba5b820a0c92e947b299dc92b9c18752cfcdfbf39f1dbfee2dc0afa65ca80b4e28b59cc6616203c900f2717b286a1ade9b37bb3f2984ea570f33d6364b54b6eb9f6dfdbe92ed3d03726cd69c48076286d10b4f0f0f2638e2422d2d27e3a55b05c4f74b534b6ae38d7", 0x6c, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="81e51c73746562d2286d7727ed8a7ce0c68edae4813b155952367060aa8c53945a8f904f81aed8cdd0d5683f31659e9e1f912e7b9911325c6d091362990a8b85b205a322b9caeb4f3f1d9024bbc4fe6f99d9171df603c4a172ec5e2a42e82381810528") bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6004, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x7, 0x6, 0x9, 0x6, 0x0, 0x7, 0x810, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x4000, 0x9, 0xfff, 0x2, 0x6, 0x5, 0x1, 0x0, 0x7, 0x0, 0x5000000000}, r4, 0x10, r6, 0x19) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}], 0x1}, 0x12000) 0s ago: executing program 32 (id=3193): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81005, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) close(r5) socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000) recvmsg$kcm(r7, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000022) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036a"], 0xfe33) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001040)="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", 0x429}, {&(0x7f0000000340)="19bd20d9c02fd940acfcd41ed4b5587cf4a0aab373e2b95182e4ced54e910ac5c6feb23c2e7586cddb8dfae7b4fe004bb6e3baa29d6db117ca9cfe7ac73b94ef6976ceeca4a02b3cd033bd767bcc4c06bd7e80488b7b3bf4363514c61fc70f031f09d12860502f0a303f87e89f10bc42d1c89d28513f75d7da0937c907564097b5a74f57acd0061f5d4eb48e8d", 0x8d}, {&(0x7f0000000280)="2df4020eaa0efa2115bc6d7660231a543cd195523496ae01e72fe7410eccb0c88387602d4e7af79d18a5fbaabcf18c93903afeb59f9ba25ea4fe32e49e02e9a16f407c2b13623a3f47c124bca7aa", 0x4e}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast2}}}], 0x70}, 0x4000800) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x78, 0x7, 0x7, 0x0, 0x3, 0x100, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000001c0), 0x9}, 0x560e, 0x8, 0x3ff, 0x9, 0x9, 0x5bd7, 0xf, 0x0, 0x9, 0x0, 0x5}, r9, 0x7, r6, 0x18) setsockopt$sock_attach_bpf(r8, 0x6, 0x21, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x9) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 342.269376][T10439] RSP: 002b:00007f5cf5080fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.277779][T10439] RAX: ffffffffffffffda RBX: 00007f5cf50816c0 RCX: 00007f5cf415e98e [ 342.285737][T10439] RDX: 000000000000000f RSI: 00007f5cf50810a0 RDI: 000000000000000c [ 342.293697][T10439] RBP: 00007f5cf5081090 R08: 0000000000000000 R09: 0000000000000000 [ 342.301653][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.309612][T10439] R13: 00007f5cf4426038 R14: 00007f5cf4425fa0 R15: 00007ffe029f3738 [ 342.317587][T10439] [ 342.474838][T10449] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2042'. [ 342.556768][T10451] netlink: 'syz.2.2043': attribute type 2 has an invalid length. [ 342.587877][T10451] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 342.611471][T10451] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2043'. [ 342.652495][T10451] sctp: [Deprecated]: syz.2.2043 (pid 10451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.652495][T10451] Use struct sctp_sack_info instead [ 342.672530][ T8277] wlan1: Trigger new scan to find an IBSS to join [ 342.937421][T10465] netlink: 'syz.2.2047': attribute type 2 has an invalid length. [ 342.964615][T10465] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2047'. [ 343.040938][T10465] netlink: 'syz.2.2047': attribute type 27 has an invalid length. [ 343.077273][T10465] netlink: 'syz.2.2047': attribute type 4 has an invalid length. [ 343.100437][T10465] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2047'. [ 343.135553][T10465] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 343.181807][T10468] netlink: 194220 bytes leftover after parsing attributes in process `syz.2.2047'. [ 343.204407][T10475] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2050'. [ 343.210231][T10468] netlink: get zone limit has 8 unknown bytes [ 343.620508][ T8277] wlan1: Creating new IBSS network, BSSID be:f6:ef:8f:0b:81 [ 343.655275][T10479] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2054'. [ 343.688952][T10487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.066478][T10499] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.186682][T10500] netlink: 'syz.2.2060': attribute type 10 has an invalid length. [ 344.293067][T10510] FAULT_INJECTION: forcing a failure. [ 344.293067][T10510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.294490][T10500] device ipvlan1 entered promiscuous mode [ 344.319589][T10500] bridge0: port 3(ipvlan1) entered blocking state [ 344.326569][T10510] CPU: 0 PID: 10510 Comm: syz.4.2066 Not tainted syzkaller #0 [ 344.334046][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.344105][T10510] Call Trace: [ 344.347389][T10510] [ 344.347518][T10500] bridge0: port 3(ipvlan1) entered disabled state [ 344.350312][T10510] dump_stack_lvl+0x188/0x24e [ 344.350339][T10510] ? show_regs_print_info+0x12/0x12 [ 344.350357][T10510] ? load_image+0x410/0x410 [ 344.350381][T10510] ? __lock_acquire+0x7c40/0x7c40 [ 344.350402][T10510] ? tomoyo_path_number_perm+0x205/0x650 [ 344.350430][T10510] ? tomoyo_path_number_perm+0x5a4/0x650 [ 344.350453][T10510] should_fail_ex+0x390/0x4c0 [ 344.363174][T10500] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 344.366683][T10510] _copy_from_user+0x2c/0x170 [ 344.366711][T10510] wext_handle_ioctl+0xc4/0x1d0 [ 344.417129][T10510] ? call_commit_handler+0xf0/0xf0 [ 344.422253][T10510] sock_ioctl+0x143/0x700 [ 344.426589][T10510] ? sock_poll+0x420/0x420 [ 344.431025][T10510] ? bpf_lsm_file_ioctl+0x5/0x10 [ 344.435980][T10510] ? security_file_ioctl+0x7c/0xa0 [ 344.441105][T10510] ? sock_poll+0x420/0x420 [ 344.445537][T10510] __se_sys_ioctl+0xfa/0x170 [ 344.450149][T10510] do_syscall_64+0x4c/0xa0 [ 344.454572][T10510] ? clear_bhb_loop+0x60/0xb0 [ 344.459253][T10510] ? clear_bhb_loop+0x60/0xb0 [ 344.463937][T10510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.469857][T10510] RIP: 0033:0x7f1d9099e159 [ 344.474281][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.493897][T10510] RSP: 002b:00007f1d917c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.502320][T10510] RAX: ffffffffffffffda RBX: 00007f1d90c25fa0 RCX: 00007f1d9099e159 [ 344.510301][T10510] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 344.518282][T10510] RBP: 00007f1d917c4090 R08: 0000000000000000 R09: 0000000000000000 [ 344.526264][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.534238][T10510] R13: 00007f1d90c26038 R14: 00007f1d90c25fa0 R15: 00007ffef05e3e08 [ 344.542229][T10510] [ 345.470971][T10534] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.997097][T10552] __nla_validate_parse: 5 callbacks suppressed [ 345.997114][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'. [ 346.246160][T10556] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2084'. [ 346.321620][T10556] netlink: 'syz.0.2084': attribute type 10 has an invalid length. [ 346.357688][T10556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2084'. [ 346.394108][T10556] device ipvlan1 entered promiscuous mode [ 346.433317][T10556] bridge0: port 3(ipvlan1) entered blocking state [ 346.462826][T10556] bridge0: port 3(ipvlan1) entered disabled state [ 346.497296][T10556] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 346.837866][T10580] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2091'. [ 347.128143][T10581] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.264425][T10593] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.2094'. [ 348.395407][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2105'. [ 348.701023][T10631] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2105'. [ 348.731808][T10631] netlink: 'syz.1.2105': attribute type 10 has an invalid length. [ 348.747592][T10631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2105'. [ 348.764642][T10631] device ipvlan1 entered promiscuous mode [ 348.797819][T10631] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 348.851006][T10636] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.449518][T10645] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2111'. [ 352.870365][T10658] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.521449][T10680] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.804913][T10692] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2126'. [ 356.834575][T10715] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.938247][T10720] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 357.440261][T10735] netlink: 'syz.1.2139': attribute type 16 has an invalid length. [ 357.448256][T10735] netlink: 'syz.1.2139': attribute type 3 has an invalid length. [ 357.456556][T10735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2139'. [ 357.618714][T10740] FAULT_INJECTION: forcing a failure. [ 357.618714][T10740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.719289][T10737] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2142'. [ 357.741634][T10740] CPU: 1 PID: 10740 Comm: syz.4.2141 Not tainted syzkaller #0 [ 357.749124][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.759178][T10740] Call Trace: [ 357.762530][T10740] [ 357.765511][T10740] dump_stack_lvl+0x188/0x24e [ 357.770283][T10740] ? show_regs_print_info+0x12/0x12 [ 357.775506][T10740] ? load_image+0x410/0x410 [ 357.780011][T10740] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 357.786197][T10740] should_fail_ex+0x390/0x4c0 [ 357.790931][T10740] _copy_from_user+0x2c/0x170 [ 357.795631][T10740] map_update_elem+0x473/0x6a0 [ 357.800426][T10740] __sys_bpf+0x4ec/0x780 [ 357.804662][T10740] ? bpf_link_show_fdinfo+0x380/0x380 [ 357.810040][T10740] ? lock_chain_count+0x20/0x20 [ 357.814944][T10740] __x64_sys_bpf+0x78/0x90 [ 357.819353][T10740] do_syscall_64+0x4c/0xa0 [ 357.823755][T10740] ? clear_bhb_loop+0x60/0xb0 [ 357.828420][T10740] ? clear_bhb_loop+0x60/0xb0 [ 357.833086][T10740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.839015][T10740] RIP: 0033:0x7f1d9099e159 [ 357.843453][T10740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.863097][T10740] RSP: 002b:00007f1d917c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.871514][T10740] RAX: ffffffffffffffda RBX: 00007f1d90c25fa0 RCX: 00007f1d9099e159 [ 357.879472][T10740] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000002 [ 357.887430][T10740] RBP: 00007f1d917c4090 R08: 0000000000000000 R09: 0000000000000000 [ 357.895389][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.903346][T10740] R13: 00007f1d90c26038 R14: 00007f1d90c25fa0 R15: 00007ffef05e3e08 [ 357.911319][T10740] [ 358.391793][T10760] netlink: 'syz.1.2151': attribute type 3 has an invalid length. [ 358.441220][T10760] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2151'. [ 358.777465][T10776] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2155'. [ 359.166872][T10784] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2159'. [ 359.620469][ T8274] wlan1: Trigger new scan to find an IBSS to join [ 359.642562][T10798] netlink: 'syz.4.2163': attribute type 10 has an invalid length. [ 359.734900][T10798] device bridge_slave_1 left promiscuous mode [ 359.761948][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.818220][T10807] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2167'. [ 359.849189][T10809] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2168'. [ 360.201972][T10824] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2172'. [ 360.215628][T10820] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2170'. [ 360.247261][T10820] netlink: zone id is out of range [ 360.265297][T10820] netlink: zone id is out of range [ 360.290163][T10820] netlink: zone id is out of range [ 360.306323][T10820] netlink: zone id is out of range [ 360.330246][T10820] netlink: zone id is out of range [ 360.350203][T10820] netlink: zone id is out of range [ 360.387925][T10820] netlink: zone id is out of range [ 360.422752][T10820] netlink: zone id is out of range [ 360.465851][T10820] netlink: zone id is out of range [ 360.493051][T10820] netlink: zone id is out of range [ 360.643121][T10837] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.182263][T10843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2178'. [ 361.207679][T10843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2178'. [ 361.236147][T10843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2178'. [ 361.275427][T10843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2178'. [ 361.337194][T10847] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2181'. [ 363.623696][ T8268] wlan1: Trigger new scan to find an IBSS to join [ 364.546936][T10890] __nla_validate_parse: 2 callbacks suppressed [ 364.547047][T10890] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2194'. [ 364.588401][ T8272] wlan1: Creating new IBSS network, BSSID 3a:ba:49:3d:55:83 [ 365.113755][T10899] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.173018][T10908] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2200'. [ 365.273492][T10915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'. [ 365.368533][T10915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'. [ 365.391538][T10916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'. [ 365.576284][T10915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'. [ 365.637621][T10927] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.824631][T10933] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2211'. [ 366.553591][T10952] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.078915][T10963] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2219'. [ 367.231707][T10970] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2226'. [ 367.361381][T10979] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.701250][T10994] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 368.341603][T11009] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2238'. [ 368.394894][T11013] netlink: 'syz.0.2239': attribute type 3 has an invalid length. [ 368.403769][T11015] netlink: 'syz.2.2242': attribute type 13 has an invalid length. [ 368.811677][T11027] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.620572][ T8272] wlan1: Trigger new scan to find an IBSS to join [ 369.973032][T11044] FAULT_INJECTION: forcing a failure. [ 369.973032][T11044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.020135][T11044] CPU: 0 PID: 11044 Comm: syz.0.2253 Not tainted syzkaller #0 [ 370.027624][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.037697][T11044] Call Trace: [ 370.040982][T11044] [ 370.043915][T11044] dump_stack_lvl+0x188/0x24e [ 370.048606][T11044] ? show_regs_print_info+0x12/0x12 [ 370.053819][T11044] ? load_image+0x410/0x410 [ 370.058341][T11044] ? __lock_acquire+0x7c40/0x7c40 [ 370.063388][T11044] should_fail_ex+0x390/0x4c0 [ 370.068092][T11044] _copy_from_user+0x2c/0x170 [ 370.072873][T11044] __sys_bpf+0x2ea/0x780 [ 370.077139][T11044] ? bpf_link_show_fdinfo+0x380/0x380 [ 370.082548][T11044] ? lock_chain_count+0x20/0x20 [ 370.087414][T11044] __x64_sys_bpf+0x78/0x90 [ 370.091832][T11044] do_syscall_64+0x4c/0xa0 [ 370.096260][T11044] ? clear_bhb_loop+0x60/0xb0 [ 370.100951][T11044] ? clear_bhb_loop+0x60/0xb0 [ 370.105640][T11044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.111549][T11044] RIP: 0033:0x7f5cf419e159 [ 370.115975][T11044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.135588][T11044] RSP: 002b:00007f5cf5081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.140789][T11055] __nla_validate_parse: 2 callbacks suppressed [ 370.140817][T11055] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2254'. [ 370.143997][T11044] RAX: ffffffffffffffda RBX: 00007f5cf4425fa0 RCX: 00007f5cf419e159 [ 370.144014][T11044] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 370.144025][T11044] RBP: 00007f5cf5081090 R08: 0000000000000000 R09: 0000000000000000 [ 370.144037][T11044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.144047][T11044] R13: 00007f5cf4426038 R14: 00007f5cf4425fa0 R15: 00007ffe029f3738 [ 370.144073][T11044] [ 370.606106][T11064] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2259'. [ 370.837908][T11074] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 371.757418][T11104] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2271'. [ 372.339254][T11119] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2278'. [ 372.355493][T11121] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 372.428661][T11123] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2279'. [ 372.536774][T11123] device hsr_slave_0 left promiscuous mode [ 372.995718][T11123] device hsr_slave_1 left promiscuous mode [ 373.500108][T11145] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2286'. [ 373.620370][ T8270] wlan1: Trigger new scan to find an IBSS to join [ 375.935884][T11157] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2292'. [ 376.266047][T11167] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 376.568104][T11175] netlink: 'syz.4.2297': attribute type 3 has an invalid length. [ 376.581081][ T8277] wlan1: Trigger new scan to find an IBSS to join [ 376.631351][T11175] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2297'. [ 376.978241][T11184] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2300'. [ 377.750330][T11199] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 378.342860][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.349229][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.394430][T11218] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2313'. [ 378.981497][T11221] delete_channel: no stack [ 379.048709][T11232] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2327'. [ 379.612379][T11238] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 380.545994][T11262] netlink: 'syz.0.2330': attribute type 28 has an invalid length. [ 380.572113][T11268] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2332'. [ 380.655211][T11262] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2330'. [ 381.334611][T11289] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.621571][ T8274] wlan1: Trigger new scan to find an IBSS to join [ 381.881189][T11303] netlink: 'syz.3.2344': attribute type 10 has an invalid length. [ 382.039402][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.108232][T11303] device bridge_slave_1 left promiscuous mode [ 382.156699][T11309] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2346'. [ 382.196405][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.251603][T11303] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 382.335381][T11310] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 382.351929][T11312] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2347'. [ 382.720852][ T4288] Bluetooth: hci3: unexpected event 0x01 length: 151 > 1 [ 383.517925][T11343] netlink: 'syz.3.2359': attribute type 21 has an invalid length. [ 383.682250][T11345] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2360'. [ 383.787683][T11348] netlink: 'syz.1.2361': attribute type 10 has an invalid length. [ 383.903932][T11348] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 384.253466][T11360] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2362'. [ 384.661010][ T8272] wlan1: Trigger new scan to find an IBSS to join [ 385.254931][T11384] netlink: 'syz.0.2372': attribute type 2 has an invalid length. [ 385.315073][T11384] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2372'. [ 385.503116][T11392] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2374'. [ 386.812681][ T8272] wlan1: Creating new IBSS network, BSSID 96:1e:34:31:68:ee [ 387.911474][T11416] netlink: 'syz.2.2378': attribute type 10 has an invalid length. [ 388.388868][T11416] device bridge_slave_1 left promiscuous mode [ 388.403809][T11416] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.587122][T11416] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 388.806355][T11425] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2381'. [ 389.157753][T11439] FAULT_INJECTION: forcing a failure. [ 389.157753][T11439] name failslab, interval 1, probability 0, space 0, times 0 [ 389.207487][T11439] CPU: 0 PID: 11439 Comm: syz.0.2385 Not tainted syzkaller #0 [ 389.214981][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.225051][T11439] Call Trace: [ 389.228332][T11439] [ 389.231266][T11439] dump_stack_lvl+0x188/0x24e [ 389.235959][T11439] ? show_regs_print_info+0x12/0x12 [ 389.241176][T11439] ? load_image+0x410/0x410 [ 389.245700][T11439] ? __might_sleep+0xd0/0xd0 [ 389.245864][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2386'. [ 389.250364][T11439] ? __lock_acquire+0x7c40/0x7c40 [ 389.250396][T11439] should_fail_ex+0x390/0x4c0 [ 389.250424][T11439] should_failslab+0x5/0x20 [ 389.250487][T11439] slab_pre_alloc_hook+0x59/0x300 [ 389.278657][T11439] kmem_cache_alloc_node+0x5a/0x310 [ 389.283868][T11439] ? __alloc_skb+0xf9/0x7d0 [ 389.288443][T11439] __alloc_skb+0xf9/0x7d0 [ 389.292782][T11439] netlink_sendmsg+0x654/0xbd0 [ 389.297588][T11439] ? netlink_getsockopt+0x550/0x550 [ 389.302777][T11439] ? apparmor_socket_sendmsg+0x16c/0x330 [ 389.308466][T11439] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 389.313767][T11439] ? security_socket_sendmsg+0x7c/0xa0 [ 389.319269][T11439] ? netlink_getsockopt+0x550/0x550 [ 389.324461][T11439] ____sys_sendmsg+0x5ed/0x9a0 [ 389.329219][T11439] ? __sys_sendmsg_sock+0x30/0x30 [ 389.334228][T11439] ? __import_iovec+0x306/0x510 [ 389.339089][T11439] ? import_iovec+0x6f/0xa0 [ 389.343585][T11439] ___sys_sendmsg+0x2a2/0x360 [ 389.348251][T11439] ? __sys_sendmsg+0x2a0/0x2a0 [ 389.353016][T11439] ? __lock_acquire+0x7c40/0x7c40 [ 389.358045][T11439] __se_sys_sendmsg+0x1c3/0x2b0 [ 389.362893][T11439] ? __x64_sys_sendmsg+0x80/0x80 [ 389.367836][T11439] ? lockdep_hardirqs_on+0x94/0x140 [ 389.373029][T11439] do_syscall_64+0x4c/0xa0 [ 389.377433][T11439] ? clear_bhb_loop+0x60/0xb0 [ 389.382103][T11439] ? clear_bhb_loop+0x60/0xb0 [ 389.386767][T11439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.392652][T11439] RIP: 0033:0x7f5cf419e159 [ 389.397060][T11439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.416657][T11439] RSP: 002b:00007f5cf5081028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.425062][T11439] RAX: ffffffffffffffda RBX: 00007f5cf4425fa0 RCX: 00007f5cf419e159 [ 389.433022][T11439] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 389.440983][T11439] RBP: 00007f5cf5081090 R08: 0000000000000000 R09: 0000000000000000 [ 389.448954][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.456918][T11439] R13: 00007f5cf4426038 R14: 00007f5cf4425fa0 R15: 00007ffe029f3738 [ 389.464891][T11439] [ 389.555237][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'. [ 391.151851][T11459] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2391'. [ 394.731463][T11479] netlink: 'syz.3.2399': attribute type 27 has an invalid length. [ 394.757013][T11479] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2399'. [ 394.881130][T11479] device sit0 entered promiscuous mode [ 397.455161][T11513] netlink: 'syz.0.2410': attribute type 10 has an invalid length. [ 397.506589][T11513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2410'. [ 397.527250][T11514] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2409'. [ 397.620605][T11513] bridge0: port 3(ipvlan1) entered blocking state [ 397.661766][T11513] bridge0: port 3(ipvlan1) entered disabled state [ 397.728326][T11513] net_ratelimit: 5 callbacks suppressed [ 397.728440][T11513] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 397.761185][T11515] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2411'. [ 398.562529][T11542] FAULT_INJECTION: forcing a failure. [ 398.562529][T11542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.706260][T11542] CPU: 1 PID: 11542 Comm: syz.1.2420 Not tainted syzkaller #0 [ 398.713766][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.723829][T11542] Call Trace: [ 398.727118][T11542] [ 398.730062][T11542] dump_stack_lvl+0x188/0x24e [ 398.734759][T11542] ? show_regs_print_info+0x12/0x12 [ 398.739973][T11542] ? load_image+0x410/0x410 [ 398.744498][T11542] ? __lock_acquire+0x7c40/0x7c40 [ 398.749553][T11542] ? perf_trace_lock_acquire+0x101/0x3f0 [ 398.755211][T11542] should_fail_ex+0x390/0x4c0 [ 398.759915][T11542] _copy_from_user+0x2c/0x170 [ 398.764634][T11542] kstrtouint_from_user+0xda/0x170 [ 398.769771][T11542] ? kstrtol_from_user+0x190/0x190 [ 398.774921][T11542] proc_fail_nth_write+0x8b/0x200 [ 398.779988][T11542] ? proc_fail_nth_read+0x220/0x220 [ 398.785210][T11542] ? common_file_perm+0x171/0x1c0 [ 398.790258][T11542] ? proc_fail_nth_read+0x220/0x220 [ 398.795477][T11542] vfs_write+0x2dc/0x9a0 [ 398.799849][T11542] ? file_end_write+0x250/0x250 [ 398.804723][T11542] ? __fget_files+0x28/0x460 [ 398.809352][T11542] ? __fget_files+0x3fc/0x460 [ 398.814060][T11542] ? __fdget_pos+0x2ae/0x360 [ 398.818666][T11542] ? ksys_write+0x70/0x260 [ 398.823106][T11542] ksys_write+0x14d/0x260 [ 398.827458][T11542] ? __ia32_sys_read+0x80/0x80 [ 398.832245][T11542] ? lockdep_hardirqs_on+0x94/0x140 [ 398.837468][T11542] do_syscall_64+0x4c/0xa0 [ 398.841893][T11542] ? clear_bhb_loop+0x60/0xb0 [ 398.846582][T11542] ? clear_bhb_loop+0x60/0xb0 [ 398.851277][T11542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.857188][T11542] RIP: 0033:0x7fd87615e98e [ 398.861614][T11542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 398.881229][T11542] RSP: 002b:00007fd8770a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 398.889655][T11542] RAX: ffffffffffffffda RBX: 00007fd8770a46c0 RCX: 00007fd87615e98e [ 398.897635][T11542] RDX: 0000000000000001 RSI: 00007fd8770a40a0 RDI: 0000000000000006 [ 398.905624][T11542] RBP: 00007fd8770a4090 R08: 0000000000000000 R09: 0000000000000000 [ 398.913607][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.921592][T11542] R13: 00007fd876426038 R14: 00007fd876425fa0 R15: 00007ffe60a85eb8 [ 398.929590][T11542] [ 399.261121][T11550] netlink: 'syz.2.2422': attribute type 27 has an invalid length. [ 399.316220][T11550] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2422'. [ 399.593025][T11555] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2425'. [ 399.884522][T11557] netlink: 'syz.3.2424': attribute type 39 has an invalid length. [ 402.005444][T11593] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2436'. [ 402.290633][T11594] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 402.416937][T11601] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2439'. [ 404.506969][T11632] netlink: 'syz.4.2448': attribute type 39 has an invalid length. [ 404.844232][T11637] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2452'. [ 404.863168][T11640] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2454'. [ 405.071723][T11655] FAULT_INJECTION: forcing a failure. [ 405.071723][T11655] name failslab, interval 1, probability 0, space 0, times 0 [ 405.105616][T11655] CPU: 1 PID: 11655 Comm: syz.1.2458 Not tainted syzkaller #0 [ 405.113112][T11655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.123188][T11655] Call Trace: [ 405.126487][T11655] [ 405.129440][T11655] dump_stack_lvl+0x188/0x24e [ 405.134148][T11655] ? show_regs_print_info+0x12/0x12 [ 405.139370][T11655] ? load_image+0x410/0x410 [ 405.143912][T11655] ? __might_sleep+0xd0/0xd0 [ 405.148527][T11655] ? __lock_acquire+0x7c40/0x7c40 [ 405.153586][T11655] should_fail_ex+0x390/0x4c0 [ 405.158294][T11655] should_failslab+0x5/0x20 [ 405.162818][T11655] slab_pre_alloc_hook+0x59/0x300 [ 405.167876][T11655] kmem_cache_alloc_node+0x5a/0x310 [ 405.173097][T11655] ? __alloc_skb+0xf9/0x7d0 [ 405.177635][T11655] __alloc_skb+0xf9/0x7d0 [ 405.181992][T11655] netlink_sendmsg+0x654/0xbd0 [ 405.186797][T11655] ? netlink_getsockopt+0x550/0x550 [ 405.192026][T11655] ? apparmor_socket_sendmsg+0x8a/0x330 [ 405.197603][T11655] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 405.202905][T11655] ? security_socket_sendmsg+0x7c/0xa0 [ 405.208384][T11655] ? netlink_getsockopt+0x550/0x550 [ 405.213606][T11655] ____sys_sendmsg+0x5ed/0x9a0 [ 405.218402][T11655] ? __sys_sendmsg_sock+0x30/0x30 [ 405.223434][T11655] ? __import_iovec+0x306/0x510 [ 405.228321][T11655] ? import_iovec+0x6f/0xa0 [ 405.232849][T11655] ___sys_sendmsg+0x2a2/0x360 [ 405.237557][T11655] ? __sys_sendmsg+0x2a0/0x2a0 [ 405.242374][T11655] ? __lock_acquire+0x7c40/0x7c40 [ 405.247467][T11655] __se_sys_sendmsg+0x1c3/0x2b0 [ 405.252337][T11655] ? __x64_sys_sendmsg+0x80/0x80 [ 405.257310][T11655] ? lockdep_hardirqs_on+0x94/0x140 [ 405.262534][T11655] do_syscall_64+0x4c/0xa0 [ 405.266960][T11655] ? clear_bhb_loop+0x60/0xb0 [ 405.271647][T11655] ? clear_bhb_loop+0x60/0xb0 [ 405.276339][T11655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.282243][T11655] RIP: 0033:0x7fd87619e159 [ 405.286670][T11655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.306288][T11655] RSP: 002b:00007fd8770a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.314723][T11655] RAX: ffffffffffffffda RBX: 00007fd876425fa0 RCX: 00007fd87619e159 [ 405.322708][T11655] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 405.330689][T11655] RBP: 00007fd8770a4090 R08: 0000000000000000 R09: 0000000000000000 [ 405.338667][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.346646][T11655] R13: 00007fd876426038 R14: 00007fd876425fa0 R15: 00007ffe60a85eb8 [ 405.354656][T11655] [ 405.706315][T11665] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2461'. [ 405.755391][T11665] netlink: zone id is out of range [ 405.781533][T11665] netlink: zone id is out of range [ 405.797033][T11665] netlink: zone id is out of range [ 405.814208][T11665] netlink: zone id is out of range [ 405.862418][T11665] netlink: zone id is out of range [ 405.890398][T11665] netlink: zone id is out of range [ 405.910287][T11665] netlink: zone id is out of range [ 405.949668][T11665] netlink: zone id is out of range [ 405.960412][T11665] netlink: zone id is out of range [ 405.990897][T11665] netlink: zone id is out of range [ 406.847832][T11690] netlink: 'syz.1.2470': attribute type 39 has an invalid length. [ 407.034587][T11685] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2468'. [ 407.165761][T11697] FAULT_INJECTION: forcing a failure. [ 407.165761][T11697] name failslab, interval 1, probability 0, space 0, times 0 [ 407.249034][T11697] CPU: 1 PID: 11697 Comm: syz.4.2471 Not tainted syzkaller #0 [ 407.256533][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.266599][T11697] Call Trace: [ 407.269882][T11697] [ 407.272821][T11697] dump_stack_lvl+0x188/0x24e [ 407.277520][T11697] ? show_regs_print_info+0x12/0x12 [ 407.282732][T11697] ? load_image+0x410/0x410 [ 407.287256][T11697] ? __might_sleep+0xd0/0xd0 [ 407.291868][T11697] ? __lock_acquire+0x7c40/0x7c40 [ 407.296916][T11697] should_fail_ex+0x390/0x4c0 [ 407.301617][T11697] should_failslab+0x5/0x20 [ 407.306126][T11697] slab_pre_alloc_hook+0x59/0x300 [ 407.311146][T11697] ? do_syscall_64+0x4c/0xa0 [ 407.315727][T11697] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.321794][T11697] kmem_cache_alloc_node+0x5a/0x310 [ 407.326986][T11697] ? __alloc_skb+0xf9/0x7d0 [ 407.331485][T11697] __alloc_skb+0xf9/0x7d0 [ 407.335809][T11697] netlink_dump+0x1e1/0xcd0 [ 407.340314][T11697] ? apparmor_capable+0x12c/0x190 [ 407.345335][T11697] ? netlink_lookup+0x200/0x200 [ 407.350184][T11697] ? __inet_diag_dump_start+0x805/0x970 [ 407.355861][T11697] __netlink_dump_start+0x52c/0x6f0 [ 407.361069][T11697] inet_diag_rcv_msg_compat+0x207/0x420 [ 407.366627][T11697] ? __inet_diag_dump+0x380/0x380 [ 407.371657][T11697] ? sock_diag_rcv_msg+0x137/0x5e0 [ 407.376823][T11697] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 407.382533][T11697] ? inet_diag_dump_start_compat+0x20/0x20 [ 407.388331][T11697] ? inet_diag_dump+0x50/0x50 [ 407.393006][T11697] ? trace_raw_output_contention_end+0xd0/0xd0 [ 407.399164][T11697] ? __inet_diag_dump+0x380/0x380 [ 407.404189][T11697] sock_diag_rcv_msg+0x3c7/0x5e0 [ 407.409123][T11697] netlink_rcv_skb+0x1ef/0x440 [ 407.413878][T11697] ? sock_diag_bind+0xa0/0xa0 [ 407.418550][T11697] ? netlink_ack+0x1160/0x1160 [ 407.423319][T11697] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.428515][T11697] sock_diag_rcv+0x26/0x40 [ 407.432929][T11697] netlink_unicast+0x7ad/0x920 [ 407.437697][T11697] netlink_sendmsg+0x8ad/0xbd0 [ 407.442466][T11697] ? netlink_getsockopt+0x550/0x550 [ 407.447659][T11697] ? apparmor_socket_sendmsg+0x8a/0x330 [ 407.453208][T11697] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 407.458482][T11697] ? security_socket_sendmsg+0x7c/0xa0 [ 407.463940][T11697] ? netlink_getsockopt+0x550/0x550 [ 407.469130][T11697] ____sys_sendmsg+0x5ed/0x9a0 [ 407.473895][T11697] ? __sys_sendmsg_sock+0x30/0x30 [ 407.478908][T11697] ? __import_iovec+0x306/0x510 [ 407.483765][T11697] ? import_iovec+0x6f/0xa0 [ 407.488266][T11697] ___sys_sendmsg+0x2a2/0x360 [ 407.492943][T11697] ? __sys_sendmsg+0x2a0/0x2a0 [ 407.497725][T11697] ? __lock_acquire+0x7c40/0x7c40 [ 407.502775][T11697] __se_sys_sendmsg+0x1c3/0x2b0 [ 407.507619][T11697] ? __x64_sys_sendmsg+0x80/0x80 [ 407.512577][T11697] ? lockdep_hardirqs_on+0x94/0x140 [ 407.517774][T11697] do_syscall_64+0x4c/0xa0 [ 407.522183][T11697] ? clear_bhb_loop+0x60/0xb0 [ 407.526851][T11697] ? clear_bhb_loop+0x60/0xb0 [ 407.531524][T11697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.537419][T11697] RIP: 0033:0x7f1d9099e159 [ 407.541830][T11697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.561439][T11697] RSP: 002b:00007f1d917a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.569849][T11697] RAX: ffffffffffffffda RBX: 00007f1d90c26090 RCX: 00007f1d9099e159 [ 407.577811][T11697] RDX: ff0f000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 407.585776][T11697] RBP: 00007f1d917a3090 R08: 0000000000000000 R09: 0000000000000000 [ 407.593735][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.601695][T11697] R13: 00007f1d90c26128 R14: 00007f1d90c26090 R15: 00007ffef05e3e08 [ 407.609678][T11697] [ 409.631083][T11745] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2489'. [ 410.143766][T11747] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2490'. [ 410.885537][T11774] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2507'. [ 413.438697][T11827] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2514'. [ 414.812182][T11849] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2530'. [ 415.930821][T11871] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2525'. [ 416.304005][T11871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.381248][T11871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.424553][T11871] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 416.474095][T11871] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 416.532196][T11871] bond0 (unregistering): Released all slaves [ 419.292260][T11947] device bridge_slave_0 left promiscuous mode [ 419.299049][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.868384][T11985] FAULT_INJECTION: forcing a failure. [ 420.868384][T11985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.941022][T11985] CPU: 1 PID: 11985 Comm: syz.1.2561 Not tainted syzkaller #0 [ 420.948791][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.958857][T11985] Call Trace: [ 420.962158][T11985] [ 420.965107][T11985] dump_stack_lvl+0x188/0x24e [ 420.969818][T11985] ? show_regs_print_info+0x12/0x12 [ 420.975040][T11985] ? load_image+0x410/0x410 [ 420.979572][T11985] ? __lock_acquire+0x7c40/0x7c40 [ 420.984622][T11985] ? snprintf+0xe5/0x140 [ 420.988927][T11985] should_fail_ex+0x390/0x4c0 [ 420.993640][T11985] _copy_to_user+0x2c/0x130 [ 420.998166][T11985] simple_read_from_buffer+0xe3/0x150 [ 421.003637][T11985] proc_fail_nth_read+0x1a6/0x220 [ 421.008690][T11985] ? proc_fault_inject_write+0x310/0x310 [ 421.014357][T11985] ? fsnotify_perm+0x248/0x550 [ 421.019145][T11985] ? proc_fault_inject_write+0x310/0x310 [ 421.024801][T11985] vfs_read+0x2db/0x960 [ 421.029019][T11985] ? kernel_read+0x1e0/0x1e0 [ 421.033640][T11985] ? __fget_files+0x28/0x460 [ 421.038262][T11985] ? __fget_files+0x3fc/0x460 [ 421.042981][T11985] ? __fdget_pos+0x2ae/0x360 [ 421.047769][T11985] ? ksys_read+0x70/0x260 [ 421.052130][T11985] ksys_read+0x14d/0x260 [ 421.056426][T11985] ? vfs_write+0x9a0/0x9a0 [ 421.060879][T11985] ? lockdep_hardirqs_on+0x94/0x140 [ 421.066108][T11985] do_syscall_64+0x4c/0xa0 [ 421.070544][T11985] ? clear_bhb_loop+0x60/0xb0 [ 421.075238][T11985] ? clear_bhb_loop+0x60/0xb0 [ 421.079938][T11985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.085853][T11985] RIP: 0033:0x7fd87615e98e [ 421.090296][T11985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.109923][T11985] RSP: 002b:00007fd8770a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.118373][T11985] RAX: ffffffffffffffda RBX: 00007fd8770a46c0 RCX: 00007fd87615e98e [ 421.126364][T11985] RDX: 000000000000000f RSI: 00007fd8770a40a0 RDI: 0000000000000005 [ 421.134354][T11985] RBP: 00007fd8770a4090 R08: 0000000000000000 R09: 0000000000000000 [ 421.142342][T11985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.150338][T11985] R13: 00007fd876426038 R14: 00007fd876425fa0 R15: 00007ffe60a85eb8 [ 421.158361][T11985] [ 421.963484][T12008] FAULT_INJECTION: forcing a failure. [ 421.963484][T12008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.195946][T12008] CPU: 1 PID: 12008 Comm: syz.0.2567 Not tainted syzkaller #0 [ 422.203455][T12008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.213521][T12008] Call Trace: [ 422.216815][T12008] [ 422.219758][T12008] dump_stack_lvl+0x188/0x24e [ 422.224465][T12008] ? show_regs_print_info+0x12/0x12 [ 422.229677][T12008] ? load_image+0x410/0x410 [ 422.234204][T12008] ? __lock_acquire+0x7c40/0x7c40 [ 422.239254][T12008] should_fail_ex+0x390/0x4c0 [ 422.243952][T12008] _copy_from_user+0x2c/0x170 [ 422.248639][T12008] iovec_from_user+0x143/0x360 [ 422.253431][T12008] __import_iovec+0x6c/0x510 [ 422.258036][T12008] import_iovec+0x6f/0xa0 [ 422.262363][T12008] ___sys_sendmsg+0x252/0x360 [ 422.267030][T12008] ? __sys_sendmsg+0x2a0/0x2a0 [ 422.271800][T12008] ? ktime_get+0x7b/0x270 [ 422.276211][T12008] ? trace_call_bpf+0xbf/0x6b0 [ 422.281030][T12008] __se_sys_sendmsg+0x1c3/0x2b0 [ 422.285867][T12008] ? perf_trace_preemptirq_template+0x268/0x320 [ 422.292128][T12008] ? __x64_sys_sendmsg+0x80/0x80 [ 422.297065][T12008] ? lockdep_hardirqs_on+0x94/0x140 [ 422.302257][T12008] do_syscall_64+0x4c/0xa0 [ 422.306659][T12008] ? clear_bhb_loop+0x60/0xb0 [ 422.311324][T12008] ? clear_bhb_loop+0x60/0xb0 [ 422.315987][T12008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.321871][T12008] RIP: 0033:0x7f5cf419e159 [ 422.326272][T12008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.345863][T12008] RSP: 002b:00007f5cf5081028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.354268][T12008] RAX: ffffffffffffffda RBX: 00007f5cf4425fa0 RCX: 00007f5cf419e159 [ 422.362229][T12008] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000007 [ 422.370188][T12008] RBP: 00007f5cf5081090 R08: 0000000000000000 R09: 0000000000000000 [ 422.378146][T12008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.386103][T12008] R13: 00007f5cf4426038 R14: 00007f5cf4425fa0 R15: 00007ffe029f3738 [ 422.394090][T12008] [ 423.592123][T12034] netlink: 'syz.1.2577': attribute type 2 has an invalid length. [ 426.313579][T12048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2581'. [ 426.322911][T12052] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2583'. [ 426.375913][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 429.418432][T12116] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2605'. [ 429.519567][T12116] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2605'. [ 429.551534][T12113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2605'. [ 429.806322][T12127] netlink: 'syz.2.2609': attribute type 10 has an invalid length. [ 430.478903][T12145] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.538983][T12148] FAULT_INJECTION: forcing a failure. [ 430.538983][T12148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.586911][T12148] CPU: 0 PID: 12148 Comm: syz.1.2617 Not tainted syzkaller #0 [ 430.594402][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.604470][T12148] Call Trace: [ 430.607755][T12148] [ 430.610696][T12148] dump_stack_lvl+0x188/0x24e [ 430.615402][T12148] ? show_regs_print_info+0x12/0x12 [ 430.620618][T12148] ? load_image+0x410/0x410 [ 430.625140][T12148] ? __lock_acquire+0x7c40/0x7c40 [ 430.630181][T12148] ? snprintf+0xe5/0x140 [ 430.634444][T12148] should_fail_ex+0x390/0x4c0 [ 430.639147][T12148] _copy_to_user+0x2c/0x130 [ 430.643666][T12148] simple_read_from_buffer+0xe3/0x150 [ 430.649055][T12148] proc_fail_nth_read+0x1a6/0x220 [ 430.654104][T12148] ? proc_fault_inject_write+0x310/0x310 [ 430.659759][T12148] ? fsnotify_perm+0x248/0x550 [ 430.664539][T12148] ? proc_fault_inject_write+0x310/0x310 [ 430.670186][T12148] vfs_read+0x2db/0x960 [ 430.674374][T12148] ? kernel_read+0x1e0/0x1e0 [ 430.678988][T12148] ? __fget_files+0x28/0x460 [ 430.683592][T12148] ? __fget_files+0x3fc/0x460 [ 430.688271][T12148] ? __fdget_pos+0x2ae/0x360 [ 430.692857][T12148] ? ksys_read+0x70/0x260 [ 430.697184][T12148] ksys_read+0x14d/0x260 [ 430.701422][T12148] ? vfs_write+0x9a0/0x9a0 [ 430.705834][T12148] ? lockdep_hardirqs_on+0x94/0x140 [ 430.711027][T12148] do_syscall_64+0x4c/0xa0 [ 430.715429][T12148] ? clear_bhb_loop+0x60/0xb0 [ 430.720097][T12148] ? clear_bhb_loop+0x60/0xb0 [ 430.724766][T12148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.730651][T12148] RIP: 0033:0x7fd87615e98e [ 430.735057][T12148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.754652][T12148] RSP: 002b:00007fd8770a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.763058][T12148] RAX: ffffffffffffffda RBX: 00007fd8770a46c0 RCX: 00007fd87615e98e [ 430.771017][T12148] RDX: 000000000000000f RSI: 00007fd8770a40a0 RDI: 0000000000000005 [ 430.778976][T12148] RBP: 00007fd8770a4090 R08: 0000000000000000 R09: 0000000000000000 [ 430.786935][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.794892][T12148] R13: 00007fd876426038 R14: 00007fd876425fa0 R15: 00007ffe60a85eb8 [ 430.802877][T12148] [ 431.532963][T12163] device syzkaller0 entered promiscuous mode [ 431.751716][T12173] FAULT_INJECTION: forcing a failure. [ 431.751716][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.790213][T12173] CPU: 0 PID: 12173 Comm: syz.0.2627 Not tainted syzkaller #0 [ 431.797721][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.807791][T12173] Call Trace: [ 431.811089][T12173] [ 431.814033][T12173] dump_stack_lvl+0x188/0x24e [ 431.818736][T12173] ? show_regs_print_info+0x12/0x12 [ 431.823956][T12173] ? load_image+0x410/0x410 [ 431.828493][T12173] ? __lock_acquire+0x7c40/0x7c40 [ 431.833543][T12173] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 431.839333][T12173] should_fail_ex+0x390/0x4c0 [ 431.844047][T12173] _copy_from_user+0x2c/0x170 [ 431.848753][T12173] ___sys_sendmsg+0x1c3/0x360 [ 431.853468][T12173] ? __sys_sendmsg+0x2a0/0x2a0 [ 431.858290][T12173] ? __lock_acquire+0x7c40/0x7c40 [ 431.863390][T12173] __se_sys_sendmsg+0x1c3/0x2b0 [ 431.868261][T12173] ? ct_nmi_exit+0x145/0x1c0 [ 431.872881][T12173] ? __x64_sys_sendmsg+0x80/0x80 [ 431.877867][T12173] ? lockdep_hardirqs_on+0x94/0x140 [ 431.883098][T12173] do_syscall_64+0x4c/0xa0 [ 431.887533][T12173] ? clear_bhb_loop+0x60/0xb0 [ 431.892231][T12173] ? clear_bhb_loop+0x60/0xb0 [ 431.896933][T12173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.902855][T12173] RIP: 0033:0x7f5cf419e159 [ 431.907291][T12173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.926912][T12173] RSP: 002b:00007f5cf5081028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.935353][T12173] RAX: ffffffffffffffda RBX: 00007f5cf4425fa0 RCX: 00007f5cf419e159 [ 431.943346][T12173] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000004 [ 431.951339][T12173] RBP: 00007f5cf5081090 R08: 0000000000000000 R09: 0000000000000000 [ 431.959329][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.967317][T12173] R13: 00007f5cf4426038 R14: 00007f5cf4425fa0 R15: 00007ffe029f3738 [ 431.975333][T12173] [ 432.595565][T12198] netlink: 'syz.3.2635': attribute type 19 has an invalid length. [ 432.653945][T12198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2635'. [ 433.014869][T12198] netlink: 'syz.3.2635': attribute type 12 has an invalid length. [ 433.110719][T12198] netlink: 'syz.3.2635': attribute type 15 has an invalid length. [ 433.335115][T12206] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 436.080238][T12238] netlink: 'syz.3.2647': attribute type 10 has an invalid length. [ 436.150139][T12238] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2647'. [ 436.189515][T12238] device hsr0 entered promiscuous mode [ 437.066440][T12263] FAULT_INJECTION: forcing a failure. [ 437.066440][T12263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.101477][T12259] FAULT_INJECTION: forcing a failure. [ 437.101477][T12259] name failslab, interval 1, probability 0, space 0, times 0 [ 437.119427][T12256] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 437.142433][T12263] CPU: 0 PID: 12263 Comm: syz.3.2656 Not tainted syzkaller #0 [ 437.148398][T12262] netlink: 'syz.0.2658': attribute type 2 has an invalid length. [ 437.149898][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.149910][T12263] Call Trace: [ 437.149917][T12263] [ 437.149925][T12263] dump_stack_lvl+0x188/0x24e [ 437.149952][T12263] ? show_regs_print_info+0x12/0x12 [ 437.168646][T12262] netlink: 'syz.0.2658': attribute type 8 has an invalid length. [ 437.170950][T12263] ? load_image+0x410/0x410 [ 437.170988][T12263] ? __lock_acquire+0x7c40/0x7c40 [ 437.171012][T12263] ? read_lock_is_recursive+0x10/0x10 [ 437.171038][T12263] should_fail_ex+0x390/0x4c0 [ 437.171068][T12263] _copy_to_user+0x2c/0x130 [ 437.175043][T12262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2658'. [ 437.178646][T12263] bpf_prog_test_run_syscall+0x33b/0x4b0 [ 437.178678][T12263] ? sock_gen_cookie+0x60/0x60 [ 437.178706][T12263] ? sock_gen_cookie+0x60/0x60 [ 437.239759][T12263] bpf_prog_test_run+0x31c/0x390 [ 437.244730][T12263] __sys_bpf+0x62b/0x780 [ 437.248992][T12263] ? bpf_link_show_fdinfo+0x380/0x380 [ 437.254405][T12263] ? lock_chain_count+0x20/0x20 [ 437.259284][T12263] __x64_sys_bpf+0x78/0x90 [ 437.263737][T12263] do_syscall_64+0x4c/0xa0 [ 437.268163][T12263] ? clear_bhb_loop+0x60/0xb0 [ 437.272840][T12263] ? clear_bhb_loop+0x60/0xb0 [ 437.277516][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.283410][T12263] RIP: 0033:0x7fef33b9e159 [ 437.287813][T12263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.307411][T12263] RSP: 002b:00007fef34990028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.315830][T12263] RAX: ffffffffffffffda RBX: 00007fef33e25fa0 RCX: 00007fef33b9e159 [ 437.323797][T12263] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 437.331761][T12263] RBP: 00007fef34990090 R08: 0000000000000000 R09: 0000000000000000 [ 437.339720][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.347679][T12263] R13: 00007fef33e26038 R14: 00007fef33e25fa0 R15: 00007fff41e7d908 [ 437.355651][T12263] [ 437.385068][T12259] CPU: 0 PID: 12259 Comm: syz.2.2657 Not tainted syzkaller #0 [ 437.392571][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.402637][T12259] Call Trace: [ 437.405926][T12259] [ 437.408867][T12259] dump_stack_lvl+0x188/0x24e [ 437.413567][T12259] ? show_regs_print_info+0x12/0x12 [ 437.418784][T12259] ? load_image+0x410/0x410 [ 437.423310][T12259] ? __might_sleep+0xd0/0xd0 [ 437.427913][T12259] ? __lock_acquire+0x7c40/0x7c40 [ 437.432962][T12259] should_fail_ex+0x390/0x4c0 [ 437.437665][T12259] should_failslab+0x5/0x20 [ 437.442178][T12259] slab_pre_alloc_hook+0x59/0x300 [ 437.447232][T12259] kmem_cache_alloc_node+0x5a/0x310 [ 437.452443][T12259] ? perf_trace_lock_acquire+0x101/0x3f0 [ 437.458092][T12259] ? __alloc_skb+0xf9/0x7d0 [ 437.462616][T12259] __alloc_skb+0xf9/0x7d0 [ 437.466964][T12259] __ip6_append_data+0x2b5e/0x3e30 [ 437.472141][T12259] ? __lock_acquire+0x7c40/0x7c40 [ 437.477200][T12259] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 437.482610][T12259] ? ip6_setup_cork+0xff0/0xff0 [ 437.487477][T12259] ? ip6_setup_cork+0xa4a/0xff0 [ 437.492336][T12259] ? lockdep_hardirqs_on+0x94/0x140 [ 437.497537][T12259] ip6_append_data+0x1c8/0x3d0 [ 437.502301][T12259] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 437.507581][T12259] rawv6_sendmsg+0x1221/0x1710 [ 437.512350][T12259] ? compat_rawv6_ioctl+0x60/0x60 [ 437.517380][T12259] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 437.523789][T12259] ? aa_sock_msg_perm+0x94/0x150 [ 437.528726][T12259] ? inet_sendmsg+0x7a/0x2a0 [ 437.533322][T12259] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 437.538596][T12259] ? inet_send_prepare+0x250/0x250 [ 437.543697][T12259] ____sys_sendmsg+0x5ed/0x9a0 [ 437.548455][T12259] ? __sys_sendmsg_sock+0x30/0x30 [ 437.553469][T12259] ? __import_iovec+0x306/0x510 [ 437.558349][T12259] ? import_iovec+0x6f/0xa0 [ 437.562858][T12259] ___sys_sendmsg+0x2a2/0x360 [ 437.567526][T12259] ? migrate_enable+0x148/0x220 [ 437.572434][T12259] ? __sys_sendmsg+0x2a0/0x2a0 [ 437.577228][T12259] __se_sys_sendmsg+0x1c3/0x2b0 [ 437.582074][T12259] ? __x64_sys_sendmsg+0x80/0x80 [ 437.587016][T12259] ? syscall_enter_from_user_mode+0x2a/0x80 [ 437.592904][T12259] do_syscall_64+0x4c/0xa0 [ 437.597309][T12259] ? clear_bhb_loop+0x60/0xb0 [ 437.601975][T12259] ? clear_bhb_loop+0x60/0xb0 [ 437.606643][T12259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.612533][T12259] RIP: 0033:0x7f281a79e159 [ 437.616942][T12259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.636537][T12259] RSP: 002b:00007f281b74d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.644945][T12259] RAX: ffffffffffffffda RBX: 00007f281aa25fa0 RCX: 00007f281a79e159 [ 437.652909][T12259] RDX: 0000000020008080 RSI: 00002000000001c0 RDI: 000000000000000b [ 437.660871][T12259] RBP: 00007f281b74d090 R08: 0000000000000000 R09: 0000000000000000 [ 437.668833][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.676793][T12259] R13: 00007f281aa26038 R14: 00007f281aa25fa0 R15: 00007ffe77c78e88 [ 437.684768][T12259] [ 439.577667][T12326] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 439.590921][T12326] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2680'. [ 439.683639][T12330] netlink: 'syz.2.2683': attribute type 21 has an invalid length. [ 439.764995][T12330] netlink: 'syz.2.2683': attribute type 7 has an invalid length. [ 439.781944][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.788288][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.862337][T12340] netlink: 'syz.3.2684': attribute type 10 has an invalid length. [ 439.879167][T12340] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2684'. [ 440.864985][T12382] FAULT_INJECTION: forcing a failure. [ 440.864985][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.897133][T12382] CPU: 0 PID: 12382 Comm: syz.0.2700 Not tainted syzkaller #0 [ 440.904624][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.914685][T12382] Call Trace: [ 440.917961][T12382] [ 440.920897][T12382] dump_stack_lvl+0x188/0x24e [ 440.925597][T12382] ? show_regs_print_info+0x12/0x12 [ 440.930814][T12382] ? load_image+0x410/0x410 [ 440.935338][T12382] ? __lock_acquire+0x7c40/0x7c40 [ 440.940386][T12382] ? __check_object_size+0x171/0xa70 [ 440.945680][T12382] should_fail_ex+0x390/0x4c0 [ 440.950375][T12382] _copy_from_user+0x2c/0x170 [ 440.955057][T12382] generic_map_update_batch+0x4dc/0x7f0 [ 440.960620][T12382] ? rcu_read_unlock+0xa0/0xa0 [ 440.965392][T12382] ? __fdget+0x17c/0x200 [ 440.969640][T12382] ? rcu_read_unlock+0xa0/0xa0 [ 440.974409][T12382] bpf_map_do_batch+0x475/0x5f0 [ 440.979265][T12382] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 440.984738][T12382] __sys_bpf+0x6f7/0x780 [ 440.988987][T12382] ? bpf_link_show_fdinfo+0x380/0x380 [ 440.994380][T12382] ? lock_chain_count+0x20/0x20 [ 440.999237][T12382] __x64_sys_bpf+0x78/0x90 [ 441.003659][T12382] do_syscall_64+0x4c/0xa0 [ 441.008074][T12382] ? clear_bhb_loop+0x60/0xb0 [ 441.012748][T12382] ? clear_bhb_loop+0x60/0xb0 [ 441.017421][T12382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.023341][T12382] RIP: 0033:0x7f5cf419e159 [ 441.027757][T12382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.047360][T12382] RSP: 002b:00007f5cf5081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.055774][T12382] RAX: ffffffffffffffda RBX: 00007f5cf4425fa0 RCX: 00007f5cf419e159 [ 441.063745][T12382] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 441.071713][T12382] RBP: 00007f5cf5081090 R08: 0000000000000000 R09: 0000000000000000 [ 441.079680][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.087649][T12382] R13: 00007f5cf4426038 R14: 00007f5cf4425fa0 R15: 00007ffe029f3738 [ 441.095627][T12382] [ 441.223433][T12390] FAULT_INJECTION: forcing a failure. [ 441.223433][T12390] name failslab, interval 1, probability 0, space 0, times 0 [ 441.259273][T12390] CPU: 1 PID: 12390 Comm: syz.3.2705 Not tainted syzkaller #0 [ 441.266777][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.276854][T12390] Call Trace: [ 441.280148][T12390] [ 441.283093][T12390] dump_stack_lvl+0x188/0x24e [ 441.287795][T12390] ? show_regs_print_info+0x12/0x12 [ 441.293011][T12390] ? load_image+0x410/0x410 [ 441.297537][T12390] ? verify_lock_unused+0x140/0x140 [ 441.302754][T12390] ? perf_trace_lock+0x301/0x390 [ 441.307723][T12390] should_fail_ex+0x390/0x4c0 [ 441.312440][T12390] should_failslab+0x5/0x20 [ 441.316961][T12390] slab_pre_alloc_hook+0x59/0x300 [ 441.322014][T12390] kmem_cache_alloc+0x56/0x2f0 [ 441.326791][T12390] ? skb_clone+0x1e7/0x370 [ 441.331222][T12390] skb_clone+0x1e7/0x370 [ 441.335473][T12390] __netlink_deliver_tap+0x3e4/0x7e0 [ 441.340771][T12390] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.345970][T12390] netlink_deliver_tap+0x19c/0x1b0 [ 441.351077][T12390] netlink_unicast+0x777/0x920 [ 441.355851][T12390] netlink_sendmsg+0x8ad/0xbd0 [ 441.360621][T12390] ? netlink_getsockopt+0x550/0x550 [ 441.365833][T12390] ? apparmor_socket_sendmsg+0x8a/0x330 [ 441.371391][T12390] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 441.376670][T12390] ? security_socket_sendmsg+0x7c/0xa0 [ 441.382129][T12390] ? netlink_getsockopt+0x550/0x550 [ 441.387325][T12390] ____sys_sendmsg+0x5ed/0x9a0 [ 441.392098][T12390] ? __sys_sendmsg_sock+0x30/0x30 [ 441.397114][T12390] ? __import_iovec+0x306/0x510 [ 441.401975][T12390] ? import_iovec+0x6f/0xa0 [ 441.406495][T12390] ___sys_sendmsg+0x2a2/0x360 [ 441.411187][T12390] ? __sys_sendmsg+0x2a0/0x2a0 [ 441.415976][T12390] ? __lock_acquire+0x7c40/0x7c40 [ 441.421031][T12390] __se_sys_sendmsg+0x1c3/0x2b0 [ 441.425879][T12390] ? __x64_sys_sendmsg+0x80/0x80 [ 441.430837][T12390] ? lockdep_hardirqs_on+0x94/0x140 [ 441.436036][T12390] do_syscall_64+0x4c/0xa0 [ 441.440448][T12390] ? clear_bhb_loop+0x60/0xb0 [ 441.445119][T12390] ? clear_bhb_loop+0x60/0xb0 [ 441.449797][T12390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.455697][T12390] RIP: 0033:0x7fef33b9e159 [ 441.460110][T12390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.479715][T12390] RSP: 002b:00007fef34990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.488127][T12390] RAX: ffffffffffffffda RBX: 00007fef33e25fa0 RCX: 00007fef33b9e159 [ 441.496095][T12390] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 441.504058][T12390] RBP: 00007fef34990090 R08: 0000000000000000 R09: 0000000000000000 [ 441.512021][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.519985][T12390] R13: 00007fef33e26038 R14: 00007fef33e25fa0 R15: 00007fff41e7d908 [ 441.527972][T12390] [ 443.777822][T12438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 443.817384][T12438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 443.855982][T12440] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 444.110560][T12453] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2723'. [ 444.365004][T12465] FAULT_INJECTION: forcing a failure. [ 444.365004][T12465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.404430][T12465] CPU: 0 PID: 12465 Comm: syz.0.2725 Not tainted syzkaller #0 [ 444.411930][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.421992][T12465] Call Trace: [ 444.425274][T12465] [ 444.428211][T12465] dump_stack_lvl+0x188/0x24e [ 444.432912][T12465] ? show_regs_print_info+0x12/0x12 [ 444.438126][T12465] ? load_image+0x410/0x410 [ 444.442643][T12465] ? __lock_acquire+0x7c40/0x7c40 [ 444.447681][T12465] should_fail_ex+0x390/0x4c0 [ 444.452371][T12465] _copy_to_user+0x2c/0x130 [ 444.456879][T12465] bpf_verifier_vlog+0x172/0x3a0 [ 444.461860][T12465] btf_verifier_log+0x1f0/0x2b0 [ 444.466825][T12465] ? btf_find_kptr+0xad0/0xad0 [ 444.471608][T12465] __btf_verifier_log_type+0x565/0x7d0 [ 444.477093][T12465] ? btf_int_show+0x27f0/0x27f0 [ 444.481961][T12465] ? __kmem_cache_alloc_node+0x19d/0x270 [ 444.487606][T12465] ? kvmalloc_node+0x6c/0x180 [ 444.492377][T12465] ? rcu_is_watching+0x11/0xa0 [ 444.497208][T12465] ? kvmalloc_node+0x6c/0x180 [ 444.501891][T12465] ? __kmalloc_node+0xe3/0x240 [ 444.506670][T12465] btf_ref_type_check_meta+0x76/0x420 [ 444.512054][T12465] btf_check_all_metas+0x35a/0xa50 [ 444.517179][T12465] btf_parse_type_sec+0xfc/0x1910 [ 444.522212][T12465] ? btf_check_sec_info+0x350/0x350 [ 444.527424][T12465] ? btf_verifier_log+0x2b0/0x2b0 [ 444.532459][T12465] ? btf_parse_str_sec+0x20a/0x2a0 [ 444.537633][T12465] btf_new_fd+0x3fe/0x760 [ 444.541988][T12465] __sys_bpf+0x612/0x780 [ 444.546241][T12465] ? bpf_link_show_fdinfo+0x380/0x380 [ 444.551633][T12465] ? lock_chain_count+0x20/0x20 [ 444.556500][T12465] __x64_sys_bpf+0x78/0x90 [ 444.560924][T12465] do_syscall_64+0x4c/0xa0 [ 444.565343][T12465] ? clear_bhb_loop+0x60/0xb0 [ 444.570023][T12465] ? clear_bhb_loop+0x60/0xb0 [ 444.574704][T12465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.580615][T12465] RIP: 0033:0x7f5cf419e159 [ 444.585037][T12465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.604646][T12465] RSP: 002b:00007f5cf5081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.613067][T12465] RAX: ffffffffffffffda RBX: 00007f5cf4425fa0 RCX: 00007f5cf419e159 [ 444.621044][T12465] RDX: 0000000000000028 RSI: 0000200000000580 RDI: 0000000000000012 [ 444.629017][T12465] RBP: 00007f5cf5081090 R08: 0000000000000000 R09: 0000000000000000 [ 444.636989][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.644960][T12465] R13: 00007f5cf4426038 R14: 00007f5cf4425fa0 R15: 00007ffe029f3738 [ 444.652953][T12465] [ 447.559446][T12514] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2742'. [ 449.256663][T12533] FAULT_INJECTION: forcing a failure. [ 449.256663][T12533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.276353][T12531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2745'. [ 449.305948][T12533] CPU: 1 PID: 12533 Comm: syz.4.2746 Not tainted syzkaller #0 [ 449.313440][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.323499][T12533] Call Trace: [ 449.326783][T12533] [ 449.329724][T12533] dump_stack_lvl+0x188/0x24e [ 449.334421][T12533] ? show_regs_print_info+0x12/0x12 [ 449.339629][T12533] ? load_image+0x410/0x410 [ 449.344154][T12533] ? __might_fault+0xa6/0x120 [ 449.348927][T12533] should_fail_ex+0x390/0x4c0 [ 449.353627][T12533] copyin+0x1b/0x120 [ 449.357546][T12533] _copy_from_iter+0x447/0x1130 [ 449.362421][T12533] ? copyout_mc+0x110/0x110 [ 449.366936][T12533] ? __virt_addr_valid+0x188/0x540 [ 449.372127][T12533] ? __virt_addr_valid+0x188/0x540 [ 449.377251][T12533] ? __virt_addr_valid+0x467/0x540 [ 449.382376][T12533] ? __phys_addr_symbol+0x2b/0x70 [ 449.387413][T12533] ? __check_object_size+0x4f6/0xa70 [ 449.392709][T12533] netlink_sendmsg+0x755/0xbd0 [ 449.397488][T12533] ? netlink_getsockopt+0x550/0x550 [ 449.402706][T12533] ? apparmor_socket_sendmsg+0x16c/0x330 [ 449.408353][T12533] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 449.413645][T12533] ? security_socket_sendmsg+0x7c/0xa0 [ 449.419119][T12533] ? netlink_getsockopt+0x550/0x550 [ 449.424329][T12533] ____sys_sendmsg+0x5ed/0x9a0 [ 449.429110][T12533] ? __sys_sendmsg_sock+0x30/0x30 [ 449.434144][T12533] ? __import_iovec+0x306/0x510 [ 449.439016][T12533] ? import_iovec+0x6f/0xa0 [ 449.443537][T12533] ___sys_sendmsg+0x2a2/0x360 [ 449.448224][T12533] ? __sys_sendmsg+0x2a0/0x2a0 [ 449.453016][T12533] ? __lock_acquire+0x7c40/0x7c40 [ 449.458077][T12533] __se_sys_sendmsg+0x1c3/0x2b0 [ 449.462941][T12533] ? __x64_sys_sendmsg+0x80/0x80 [ 449.467886][T12533] ? lockdep_hardirqs_on+0x94/0x140 [ 449.473076][T12533] do_syscall_64+0x4c/0xa0 [ 449.477480][T12533] ? clear_bhb_loop+0x60/0xb0 [ 449.482150][T12533] ? clear_bhb_loop+0x60/0xb0 [ 449.486813][T12533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.492702][T12533] RIP: 0033:0x7f1d9099e159 [ 449.497102][T12533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.516700][T12533] RSP: 002b:00007f1d917c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.525103][T12533] RAX: ffffffffffffffda RBX: 00007f1d90c25fa0 RCX: 00007f1d9099e159 [ 449.533068][T12533] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000004 [ 449.541032][T12533] RBP: 00007f1d917c4090 R08: 0000000000000000 R09: 0000000000000000 [ 449.549010][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.556978][T12533] R13: 00007f1d90c26038 R14: 00007f1d90c25fa0 R15: 00007ffef05e3e08 [ 449.564958][T12533] [ 449.755996][T12543] netlink: 'syz.2.2749': attribute type 1 has an invalid length. [ 449.809905][T12543] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2749'. [ 452.279559][T12571] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2758'. [ 453.392125][T12586] netlink: 'syz.0.2763': attribute type 10 has an invalid length. [ 453.441651][T12586] team0: Port device hsr_slave_0 added [ 453.530185][T12593] FAULT_INJECTION: forcing a failure. [ 453.530185][T12593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.564967][T12593] CPU: 0 PID: 12593 Comm: syz.1.2766 Not tainted syzkaller #0 [ 453.572472][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.582551][T12593] Call Trace: [ 453.585850][T12593] [ 453.588809][T12593] dump_stack_lvl+0x188/0x24e [ 453.593528][T12593] ? show_regs_print_info+0x12/0x12 [ 453.598766][T12593] ? load_image+0x410/0x410 [ 453.603320][T12593] ? __might_fault+0xa6/0x120 [ 453.608049][T12593] should_fail_ex+0x390/0x4c0 [ 453.612780][T12593] copyin+0x1b/0x120 [ 453.616720][T12593] _copy_from_iter+0x447/0x1130 [ 453.621636][T12593] ? copyout_mc+0x110/0x110 [ 453.626170][T12593] ? __virt_addr_valid+0x188/0x540 [ 453.631317][T12593] ? __virt_addr_valid+0x188/0x540 [ 453.636462][T12593] ? __virt_addr_valid+0x467/0x540 [ 453.641606][T12593] ? __phys_addr_symbol+0x2b/0x70 [ 453.646637][T12593] ? __check_object_size+0x4f6/0xa70 [ 453.651936][T12593] netlink_sendmsg+0x755/0xbd0 [ 453.656742][T12593] ? netlink_getsockopt+0x550/0x550 [ 453.661958][T12593] ? apparmor_socket_sendmsg+0x8a/0x330 [ 453.667516][T12593] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 453.672806][T12593] ? security_socket_sendmsg+0x7c/0xa0 [ 453.678269][T12593] ? netlink_getsockopt+0x550/0x550 [ 453.683476][T12593] ____sys_sendmsg+0x5ed/0x9a0 [ 453.688265][T12593] ? __sys_sendmsg_sock+0x30/0x30 [ 453.693290][T12593] ? __import_iovec+0x306/0x510 [ 453.698164][T12593] ? import_iovec+0x6f/0xa0 [ 453.702682][T12593] ___sys_sendmsg+0x2a2/0x360 [ 453.707378][T12593] ? __sys_sendmsg+0x2a0/0x2a0 [ 453.712189][T12593] ? ktime_get+0x7b/0x270 [ 453.716573][T12593] __se_sys_sendmsg+0x1c3/0x2b0 [ 453.721441][T12593] ? __x64_sys_sendmsg+0x80/0x80 [ 453.726415][T12593] ? lockdep_hardirqs_on+0x94/0x140 [ 453.731626][T12593] do_syscall_64+0x4c/0xa0 [ 453.736044][T12593] ? clear_bhb_loop+0x60/0xb0 [ 453.740725][T12593] ? clear_bhb_loop+0x60/0xb0 [ 453.745404][T12593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.751300][T12593] RIP: 0033:0x7fd87619e159 [ 453.755719][T12593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.775324][T12593] RSP: 002b:00007fd8770a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.783742][T12593] RAX: ffffffffffffffda RBX: 00007fd876425fa0 RCX: 00007fd87619e159 [ 453.791713][T12593] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 453.799682][T12593] RBP: 00007fd8770a4090 R08: 0000000000000000 R09: 0000000000000000 [ 453.807652][T12593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.815620][T12593] R13: 00007fd876426038 R14: 00007fd876425fa0 R15: 00007ffe60a85eb8 [ 453.823627][T12593] [ 454.309282][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.363021][T12598] netlink: 'syz.3.2767': attribute type 10 has an invalid length. [ 454.384625][T12598] device netdevsim0 entered promiscuous mode [ 454.882822][T12614] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2774'. [ 454.938458][T12614] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2774'. [ 455.655278][T12625] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2778'. [ 456.362820][T12631] device syzkaller0 entered promiscuous mode [ 456.523620][T12638] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2780'. [ 457.499686][T12644] FAULT_INJECTION: forcing a failure. [ 457.499686][T12644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.532431][T12644] CPU: 1 PID: 12644 Comm: syz.3.2782 Not tainted syzkaller #0 [ 457.539920][T12644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.549981][T12644] Call Trace: [ 457.553266][T12644] [ 457.556216][T12644] dump_stack_lvl+0x188/0x24e [ 457.560913][T12644] ? show_regs_print_info+0x12/0x12 [ 457.566121][T12644] ? load_image+0x410/0x410 [ 457.570618][T12644] ? __lock_acquire+0x7c40/0x7c40 [ 457.575646][T12644] should_fail_ex+0x390/0x4c0 [ 457.580347][T12644] _copy_from_user+0x2c/0x170 [ 457.585038][T12644] __copy_msghdr+0x384/0x560 [ 457.589650][T12644] ___sys_sendmsg+0x210/0x360 [ 457.594339][T12644] ? __sys_sendmsg+0x2a0/0x2a0 [ 457.599109][T12644] ? __lock_acquire+0x7c40/0x7c40 [ 457.604147][T12644] __se_sys_sendmsg+0x1c3/0x2b0 [ 457.608987][T12644] ? __x64_sys_sendmsg+0x80/0x80 [ 457.613925][T12644] ? lockdep_hardirqs_on+0x94/0x140 [ 457.619115][T12644] do_syscall_64+0x4c/0xa0 [ 457.623519][T12644] ? clear_bhb_loop+0x60/0xb0 [ 457.628181][T12644] ? clear_bhb_loop+0x60/0xb0 [ 457.632849][T12644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.638735][T12644] RIP: 0033:0x7fef33b9e159 [ 457.643138][T12644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.662733][T12644] RSP: 002b:00007fef34990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.671136][T12644] RAX: ffffffffffffffda RBX: 00007fef33e25fa0 RCX: 00007fef33b9e159 [ 457.679096][T12644] RDX: 326684230b85cfdc RSI: 0000200000000240 RDI: 0000000000000003 [ 457.687059][T12644] RBP: 00007fef34990090 R08: 0000000000000000 R09: 0000000000000000 [ 457.695020][T12644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.702983][T12644] R13: 00007fef33e26038 R14: 00007fef33e25fa0 R15: 00007fff41e7d908 [ 457.710953][T12644] [ 459.940386][T12674] netlink: 'syz.1.2794': attribute type 21 has an invalid length. [ 459.988234][T12677] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2793'. [ 460.813697][T12697] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2803'. [ 460.860300][T12697] net_ratelimit: 25 callbacks suppressed [ 460.860314][T12697] netlink: zone id is out of range [ 460.913567][T12697] netlink: zone id is out of range [ 460.932614][T12697] netlink: zone id is out of range [ 460.947289][T12697] netlink: zone id is out of range [ 460.974050][T12697] netlink: zone id is out of range [ 460.999901][T12697] netlink: zone id is out of range [ 461.030461][T12697] netlink: zone id is out of range [ 461.035882][T12697] netlink: zone id is out of range [ 461.070276][T12697] netlink: zone id is out of range [ 461.085944][T12697] netlink: zone id is out of range [ 461.114050][T12707] netlink: 'syz.1.2806': attribute type 10 has an invalid length. [ 461.265315][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2806'. [ 464.306474][T12732] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2814'. [ 464.396263][T12737] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.2817'. [ 464.650263][T12744] netlink: 'syz.4.2820': attribute type 29 has an invalid length. [ 464.670721][T12744] netlink: 'syz.4.2820': attribute type 16 has an invalid length. [ 464.685093][T12744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2820'. [ 465.454687][T12771] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2830'. [ 465.761689][T12784] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2833'. [ 466.315900][T12794] netlink: 'syz.1.2837': attribute type 14 has an invalid length. [ 466.344330][T12794] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2837'. [ 466.380983][T12803] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2839'. [ 466.417468][T12796] netlink: 'syz.3.2838': attribute type 21 has an invalid length. [ 466.839092][T12824] netlink: 'syz.2.2844': attribute type 10 has an invalid length. [ 466.873860][T12824] device vlan0 entered promiscuous mode [ 466.960106][T12826] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2846'. [ 467.571525][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.831723][T12849] device bridge_slave_0 left promiscuous mode [ 467.853654][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.039247][T12869] netlink: 'syz.4.2859': attribute type 21 has an invalid length. [ 468.269966][T12878] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2860'. [ 468.321303][T12881] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2861'. [ 468.784505][T12880] device syzkaller0 entered promiscuous mode [ 472.554154][T12924] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2878'. [ 472.564069][T12929] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2879'. [ 473.128962][ T4288] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 473.192751][T12948] device syzkaller0 left promiscuous mode [ 473.409508][T12952] netlink: 'syz.4.2888': attribute type 21 has an invalid length. [ 473.469929][T12952] netlink: 'syz.4.2888': attribute type 3 has an invalid length. [ 473.478156][T12952] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2888'. [ 474.051583][T12964] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2892'. [ 474.183278][T12970] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2893'. [ 475.636974][T13002] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2905'. [ 476.350580][T13028] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2911'. [ 476.645296][T13033] device bridge_slave_0 left promiscuous mode [ 476.663397][T13033] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.688791][T13031] netlink: 'syz.0.2916': attribute type 2 has an invalid length. [ 476.730001][T13038] netlink: 'syz.0.2916': attribute type 21 has an invalid length. [ 477.005314][T13045] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2920'. [ 478.273698][T13075] FAULT_INJECTION: forcing a failure. [ 478.273698][T13075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.353895][T13075] CPU: 0 PID: 13075 Comm: syz.3.2931 Not tainted syzkaller #0 [ 478.361387][T13075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.371449][T13075] Call Trace: [ 478.374738][T13075] [ 478.377679][T13075] dump_stack_lvl+0x188/0x24e [ 478.382374][T13075] ? show_regs_print_info+0x12/0x12 [ 478.387588][T13075] ? load_image+0x410/0x410 [ 478.392110][T13075] ? __lock_acquire+0x7c40/0x7c40 [ 478.397155][T13075] ? snprintf+0xe5/0x140 [ 478.401419][T13075] should_fail_ex+0x390/0x4c0 [ 478.406115][T13075] _copy_to_user+0x2c/0x130 [ 478.410638][T13075] simple_read_from_buffer+0xe3/0x150 [ 478.416027][T13075] proc_fail_nth_read+0x1a6/0x220 [ 478.421068][T13075] ? proc_fault_inject_write+0x310/0x310 [ 478.426703][T13075] ? fsnotify_perm+0x248/0x550 [ 478.431459][T13075] ? proc_fault_inject_write+0x310/0x310 [ 478.437080][T13075] vfs_read+0x2db/0x960 [ 478.441235][T13075] ? kernel_read+0x1e0/0x1e0 [ 478.445817][T13075] ? __fget_files+0x28/0x460 [ 478.450399][T13075] ? __fget_files+0x3fc/0x460 [ 478.455074][T13075] ? __fdget_pos+0x2ae/0x360 [ 478.459659][T13075] ? ksys_read+0x70/0x260 [ 478.463988][T13075] ksys_read+0x14d/0x260 [ 478.468228][T13075] ? vfs_write+0x9a0/0x9a0 [ 478.472643][T13075] ? lockdep_hardirqs_on+0x94/0x140 [ 478.477836][T13075] do_syscall_64+0x4c/0xa0 [ 478.482238][T13075] ? clear_bhb_loop+0x60/0xb0 [ 478.486903][T13075] ? clear_bhb_loop+0x60/0xb0 [ 478.491570][T13075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.497455][T13075] RIP: 0033:0x7fef33b5e98e [ 478.501857][T13075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 478.521449][T13075] RSP: 002b:00007fef3498ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.529847][T13075] RAX: ffffffffffffffda RBX: 00007fef349906c0 RCX: 00007fef33b5e98e [ 478.537804][T13075] RDX: 000000000000000f RSI: 00007fef349900a0 RDI: 0000000000000005 [ 478.545760][T13075] RBP: 00007fef34990090 R08: 0000000000000000 R09: 0000000000000000 [ 478.553721][T13075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.561681][T13075] R13: 00007fef33e26038 R14: 00007fef33e25fa0 R15: 00007fff41e7d908 [ 478.569649][T13075] [ 478.751684][T13081] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2933'. [ 479.226466][T13085] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2934'. [ 481.145080][T13105] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.2942'. [ 481.178265][T13105] netlink: 26901 bytes leftover after parsing attributes in process `syz.2.2942'. [ 481.248410][T13105] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.2942'. [ 481.697448][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 481.711615][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 481.719191][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 481.728507][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 481.736295][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 481.744212][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.373321][T13126] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2950'. [ 482.513170][T13129] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2948'. [ 482.547793][T13135] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2951'. [ 483.003790][T13115] chnl_net:caif_netlink_parms(): no params data found [ 483.257253][T13115] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.329239][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.349007][T13155] netlink: 'syz.0.2956': attribute type 29 has an invalid length. [ 483.371158][T13115] device bridge_slave_0 entered promiscuous mode [ 483.395485][T13155] netlink: 'syz.0.2956': attribute type 16 has an invalid length. [ 483.413740][T13155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2956'. [ 483.786461][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 484.068482][T13115] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.086374][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.094809][T13115] device bridge_slave_1 entered promiscuous mode [ 484.185075][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.230274][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.331047][T13115] team0: Port device team_slave_0 added [ 484.338831][T13115] team0: Port device team_slave_1 added [ 484.402147][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.409102][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.458179][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.566674][ T8274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.889906][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.916369][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.980064][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.032762][ T8274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.271401][T13190] netlink: 'syz.2.2963': attribute type 10 has an invalid length. [ 485.290243][T13190] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2963'. [ 485.312074][T13183] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2961'. [ 485.402343][ T8274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.439257][T13189] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2964'. [ 485.458635][T13115] device hsr_slave_0 entered promiscuous mode [ 485.476038][T13115] device hsr_slave_1 entered promiscuous mode [ 485.490815][T13115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.506483][T13115] Cannot create hsr debugfs directory [ 485.567207][ T8274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.862321][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 486.077674][T13207] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2968'. [ 487.940129][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 487.978497][T13236] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.2976'. [ 488.042787][T13236] netlink: 26901 bytes leftover after parsing attributes in process `syz.0.2976'. [ 488.111279][T13236] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.2976'. [ 488.544190][T13247] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2979'. [ 489.003427][T13115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.052484][T13115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.170557][T13115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.199498][T13115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 490.020336][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 490.430267][T13115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.440220][T13298] netlink: 'syz.2.2989': attribute type 21 has an invalid length. [ 492.917410][T13115] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.932503][T13320] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2994'. [ 492.957045][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 492.972750][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.020721][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.061588][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.091371][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.098489][ T8270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.170695][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 493.294694][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.315814][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.338523][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.345769][ T8270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.375158][T13327] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2995'. [ 493.387395][T13330] netlink: 'syz.2.2997': attribute type 1 has an invalid length. [ 493.418398][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 493.431802][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 493.463839][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 493.489838][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 493.532576][T13332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.540248][T13332] IPv6: NLM_F_CREATE should be set when creating new route [ 493.547541][T13332] IPv6: NLM_F_CREATE should be set when creating new route [ 493.554871][T13332] IPv6: NLM_F_CREATE should be set when creating new route [ 493.645167][T13330] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2997'. [ 493.820286][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 493.846813][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 493.879270][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 493.925496][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 493.958426][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.040429][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.081226][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.124134][T13115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.132944][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 495.154712][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.208927][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.216162][T13352] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3004'. [ 495.240305][T13353] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3003'. [ 495.285924][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.296520][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.326261][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 495.348342][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.362247][T13115] device veth0_vlan entered promiscuous mode [ 495.369182][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.458592][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.690604][T13115] device veth1_vlan entered promiscuous mode [ 496.716093][T13361] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3006'. [ 496.727881][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 496.786759][T13367] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 496.874181][T13372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3011'. [ 496.890316][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.912531][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.935936][T13115] device veth0_macvtap entered promiscuous mode [ 496.959060][T13372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3011'. [ 497.027663][T13375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3011'. [ 497.055894][T13372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3011'. [ 497.094740][T13115] device veth1_macvtap entered promiscuous mode [ 497.152830][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.200310][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.254153][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.286914][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.323043][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.343930][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.364190][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.390312][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.425861][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.470665][T13392] FAULT_INJECTION: forcing a failure. [ 497.470665][T13392] name failslab, interval 1, probability 0, space 0, times 0 [ 497.483829][T13392] CPU: 1 PID: 13392 Comm: syz.2.3016 Not tainted syzkaller #0 [ 497.491305][T13392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.501364][T13392] Call Trace: [ 497.504645][T13392] [ 497.507569][T13392] dump_stack_lvl+0x188/0x24e [ 497.512245][T13392] ? show_regs_print_info+0x12/0x12 [ 497.517431][T13392] ? load_image+0x410/0x410 [ 497.521925][T13392] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 497.527897][T13392] ? __lock_acquire+0x7c40/0x7c40 [ 497.532919][T13392] should_fail_ex+0x390/0x4c0 [ 497.537590][T13392] should_failslab+0x5/0x20 [ 497.542085][T13392] slab_pre_alloc_hook+0x59/0x300 [ 497.547103][T13392] kmem_cache_alloc+0x56/0x2f0 [ 497.551853][T13392] ? __build_skb+0x27/0x3b0 [ 497.556349][T13392] __build_skb+0x27/0x3b0 [ 497.560663][T13392] ? build_skb+0x14/0x230 [ 497.564978][T13392] build_skb+0x1e/0x230 [ 497.569121][T13392] bpf_prog_test_run_skb+0x38d/0x18e0 [ 497.574484][T13392] ? __fget_files+0x28/0x460 [ 497.579064][T13392] ? __fget_files+0x3fc/0x460 [ 497.583738][T13392] ? cpu_online+0xa0/0xa0 [ 497.588069][T13392] bpf_prog_test_run+0x31c/0x390 [ 497.593011][T13392] __sys_bpf+0x62b/0x780 [ 497.597246][T13392] ? bpf_link_show_fdinfo+0x380/0x380 [ 497.602620][T13392] ? lock_chain_count+0x20/0x20 [ 497.607471][T13392] __x64_sys_bpf+0x78/0x90 [ 497.611879][T13392] do_syscall_64+0x4c/0xa0 [ 497.616285][T13392] ? clear_bhb_loop+0x60/0xb0 [ 497.620947][T13392] ? clear_bhb_loop+0x60/0xb0 [ 497.625612][T13392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.631496][T13392] RIP: 0033:0x7f281a79e159 [ 497.635900][T13392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.655496][T13392] RSP: 002b:00007f281b74d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.663907][T13392] RAX: ffffffffffffffda RBX: 00007f281aa25fa0 RCX: 00007f281a79e159 [ 497.671880][T13392] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 497.679843][T13392] RBP: 00007f281b74d090 R08: 0000000000000000 R09: 0000000000000000 [ 497.687802][T13392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.695762][T13392] R13: 00007f281aa26038 R14: 00007f281aa25fa0 R15: 00007ffe77c78e88 [ 497.703738][T13392] [ 497.712936][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 497.739120][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 497.751278][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 497.770943][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 497.792672][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.811089][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.830245][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.855681][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.873678][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.896761][T13396] FAULT_INJECTION: forcing a failure. [ 497.896761][T13396] name failslab, interval 1, probability 0, space 0, times 0 [ 497.907838][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.909969][T13396] CPU: 0 PID: 13396 Comm: syz.4.3018 Not tainted syzkaller #0 [ 497.926948][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.937007][T13396] Call Trace: [ 497.938557][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.940279][T13396] [ 497.940288][T13396] dump_stack_lvl+0x188/0x24e [ 497.940314][T13396] ? show_regs_print_info+0x12/0x12 [ 497.940333][T13396] ? load_image+0x410/0x410 [ 497.940357][T13396] ? __might_sleep+0xd0/0xd0 [ 497.940376][T13396] ? __lock_acquire+0x7c40/0x7c40 [ 497.940397][T13396] ? aa_file_perm+0x3ea/0xf00 [ 497.940419][T13396] should_fail_ex+0x390/0x4c0 [ 497.940448][T13396] should_failslab+0x5/0x20 [ 497.940464][T13396] slab_pre_alloc_hook+0x59/0x300 [ 497.940486][T13396] ? kernfs_fop_write_iter+0x154/0x520 [ 497.968888][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.972739][T13396] __kmem_cache_alloc_node+0x4f/0x270 [ 497.972769][T13396] ? kernfs_fop_write_iter+0x154/0x520 [ 497.972789][T13396] __kmalloc+0xa3/0x240 [ 497.972816][T13396] kernfs_fop_write_iter+0x154/0x520 [ 497.972842][T13396] vfs_write+0x482/0x9a0 [ 497.972871][T13396] ? file_end_write+0x250/0x250 [ 497.972899][T13396] ? __fget_files+0x3fc/0x460 [ 497.972930][T13396] ? __fdget_pos+0x2ae/0x360 [ 497.972951][T13396] ? ksys_write+0x70/0x260 [ 497.972973][T13396] ksys_write+0x14d/0x260 [ 497.980751][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.982646][T13396] ? __ia32_sys_read+0x80/0x80 [ 497.987294][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.991772][T13396] ? lockdep_hardirqs_on+0x94/0x140 [ 497.991798][T13396] do_syscall_64+0x4c/0xa0 [ 497.991814][T13396] ? clear_bhb_loop+0x60/0xb0 [ 497.991831][T13396] ? clear_bhb_loop+0x60/0xb0 [ 497.991849][T13396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.991873][T13396] RIP: 0033:0x7f1d9099e159 [ 497.991889][T13396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.019198][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.022896][T13396] RSP: 002b:00007f1d917c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 498.022918][T13396] RAX: ffffffffffffffda RBX: 00007f1d90c25fa0 RCX: 00007f1d9099e159 [ 498.022931][T13396] RDX: 000000000000000a RSI: 0000200000000280 RDI: 0000000000000005 [ 498.022941][T13396] RBP: 00007f1d917c4090 R08: 0000000000000000 R09: 0000000000000000 [ 498.022951][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.022962][T13396] R13: 00007f1d90c26038 R14: 00007f1d90c25fa0 R15: 00007ffef05e3e08 [ 498.022989][T13396] [ 498.257769][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.276903][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.340411][T13115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.360609][T13115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.389215][T13115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.425053][T13115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.637425][T13403] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3020'. [ 498.692986][T13401] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3019'. [ 498.716850][T13408] netlink: 'syz.1.3021': attribute type 29 has an invalid length. [ 499.696972][T13408] netlink: 'syz.1.3021': attribute type 29 has an invalid length. [ 499.811478][ T8268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.860512][ T8268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.965038][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 500.082521][ T8272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.096567][T13424] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3032'. [ 500.147659][ T8272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.213639][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 500.581322][ T8268] wlan1: Trigger new scan to find an IBSS to join [ 501.032111][T13451] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3033'. [ 501.232527][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.238873][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.430456][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.446501][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.457277][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.475455][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.484183][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 501.494652][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.111959][T13465] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3037'. [ 503.246880][T13486] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3043'. [ 503.540245][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 503.903451][T13457] chnl_net:caif_netlink_parms(): no params data found [ 504.096316][T13503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3048'. [ 504.327768][T13457] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.349213][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.398523][T13457] device bridge_slave_0 entered promiscuous mode [ 504.423816][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.441812][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.449899][T13457] device bridge_slave_1 entered promiscuous mode [ 504.605098][ T8254] wlan1: Creating new IBSS network, BSSID da:fe:1d:a4:2c:9d [ 504.627677][ T8256] tipc: Subscription rejected, illegal request [ 504.670354][T13457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.699345][T13457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.932074][T13457] team0: Port device team_slave_0 added [ 504.975102][ T8274] device hsr_slave_0 left promiscuous mode [ 505.003730][ T8274] device hsr_slave_1 left promiscuous mode [ 505.013972][ T8274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.034021][ T8274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.075939][ T8274] device veth1_macvtap left promiscuous mode [ 505.110316][ T8274] device veth0_macvtap left promiscuous mode [ 505.620264][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 505.706131][ T8274] team0 (unregistering): Port device geneve1 removed [ 506.581094][ T8274] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 506.728242][ T8274] team0 (unregistering): Port device team_slave_1 removed [ 506.988442][ T8274] team0 (unregistering): Port device team_slave_0 removed [ 507.170280][ T8274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.339789][ T8274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.494017][ T8274] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 507.700173][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 507.883963][ T8274] bond0 (unregistering): Released all slaves [ 507.913408][T13457] team0: Port device team_slave_1 added [ 507.930351][T13524] device lo entered promiscuous mode [ 507.944769][T13524] net_ratelimit: 3549 callbacks suppressed [ 507.944779][T13524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.017874][T13457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.082390][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.180737][T13457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.193771][T13457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.212369][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.270069][T13457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.286398][T13542] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3060'. [ 508.687680][T13457] device hsr_slave_0 entered promiscuous mode [ 508.707525][T13457] device hsr_slave_1 entered promiscuous mode [ 508.730110][T13457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.737698][T13457] Cannot create hsr debugfs directory [ 509.069779][T13457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.334318][ T8234] tipc: Subscription rejected, illegal request [ 509.377815][T13457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.454882][T13457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.611606][T13457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.781587][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 512.602135][T13593] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 512.615234][T13457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.652860][T13457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.926324][T13457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.941813][T13457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.971292][T13602] netlink: 'syz.0.3078': attribute type 2 has an invalid length. [ 513.386425][T13457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.681676][T13625] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 513.947095][T13457] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.999005][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.040668][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.079793][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.110754][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.130674][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.137773][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.257286][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.285104][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.296088][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.315977][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.323135][ T8270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.375766][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.404650][T13635] mac80211_hwsim hwsim188 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 514.434117][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.465623][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.503501][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.538920][T13457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.566543][T13457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.653165][T13643] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3092'. [ 514.653253][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.684843][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.741021][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.766378][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 514.785123][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.799435][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 514.840918][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.850727][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.043092][T13660] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3095'. [ 516.013951][T13662] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3096'. [ 516.283480][T13667] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 516.405235][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.420473][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.432917][T13457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.575123][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 516.592690][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.621158][ T8254] wlan1: Trigger new scan to find an IBSS to join [ 516.633379][T13457] device veth0_vlan entered promiscuous mode [ 516.651486][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 516.660451][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.679044][T13457] device veth1_vlan entered promiscuous mode [ 516.694215][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.714268][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.722919][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 516.734890][T13680] mac80211_hwsim hwsim188 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 516.888611][T13457] device veth0_macvtap entered promiscuous mode [ 516.925823][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 516.947795][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 517.035680][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.131901][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 517.170901][T13457] device veth1_macvtap entered promiscuous mode [ 517.351775][T13693] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3105'. [ 517.378573][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.466482][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.497537][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.514463][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.524542][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.535202][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.545605][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.556409][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.586949][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.620829][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.664282][T13457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.751943][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 517.777539][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 517.837250][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.929250][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.973168][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.005799][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.026689][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.039622][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.058052][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.068264][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.079134][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.089539][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.100652][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.112983][T13457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.430566][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 518.449263][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 518.471902][T13702] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3107'. [ 518.518190][T13705] netlink: 3529 bytes leftover after parsing attributes in process `syz.0.3108'. [ 518.556666][T13705] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.3108'. [ 518.587456][ T8270] wlan1: Trigger new scan to find an IBSS to join [ 518.627312][T13705] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.3108'. [ 518.700773][T13457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.720166][T13457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.744592][T13457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.759337][T13457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.174866][ T8270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.185134][ T8270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.299424][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 519.588800][T13728] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3117'. [ 519.660916][ T8254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.668769][ T8254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.739161][T13725] netlink: 'syz.2.3116': attribute type 3 has an invalid length. [ 519.755478][T13725] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3116'. [ 519.781057][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.119944][T13733] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 520.407546][T13741] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 520.803353][T13749] netlink: 'syz.0.3123': attribute type 12 has an invalid length. [ 520.822685][T13749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3123'. [ 521.607132][T13764] IPv6: NLM_F_CREATE should be specified when creating new route [ 521.628940][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 521.638573][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 521.646702][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 521.660953][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 521.692566][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 521.702924][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 521.724286][T13764] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3129'. [ 521.938808][T13772] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 522.003465][T13772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.536112][T13765] chnl_net:caif_netlink_parms(): no params data found [ 522.580652][ T8256] wlan1: Trigger new scan to find an IBSS to join [ 522.587219][ T8256] wlan1: Trigger new scan to find an IBSS to join [ 522.672534][T13789] netlink: 'syz.1.3132': attribute type 3 has an invalid length. [ 522.716796][T13789] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3132'. [ 523.065764][T13791] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 523.128372][T13765] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.178954][T13765] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.189833][T13765] device bridge_slave_0 entered promiscuous mode [ 523.199002][T13765] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.206438][T13765] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.222419][T13765] device bridge_slave_1 entered promiscuous mode [ 523.277817][T13765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.325569][T13765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.416628][T13765] team0: Port device team_slave_0 added [ 523.441637][T13765] team0: Port device team_slave_1 added [ 523.563857][T13765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.571143][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.597716][T13765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.613473][T13765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.635862][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.711587][T13765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.782787][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 523.933231][T13812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3140'. [ 524.028216][T13812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3140'. [ 524.146854][T13765] device hsr_slave_0 entered promiscuous mode [ 524.252818][T13765] device hsr_slave_1 entered promiscuous mode [ 524.272500][T13765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.338084][T13765] Cannot create hsr debugfs directory [ 524.361347][T13817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3140'. [ 524.398263][T13816] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3141'. [ 524.532771][T13813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3140'. [ 524.982094][T13832] Dead loop on virtual device ip6_vti0, fix it urgently! [ 525.133153][T13765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.860499][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 527.194170][T13765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.240622][T13853] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 527.330139][T13858] IPv6: NLM_F_CREATE should be specified when creating new route [ 527.337968][T13858] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3153'. [ 527.562504][T13765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.630083][ T8270] wlan1: Trigger new scan to find an IBSS to join [ 527.948025][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 528.606969][T13765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 528.624436][T13765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 528.759853][T13765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 528.795631][ T8256] tipc: Subscription rejected, illegal request [ 528.814464][T13765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 528.952775][ T8274] device hsr_slave_0 left promiscuous mode [ 529.032435][ T8274] device hsr_slave_1 left promiscuous mode [ 529.040486][ T8274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.065417][ T8274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.148086][ T8274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.160141][ T8274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.259076][ T8274] device veth1_macvtap left promiscuous mode [ 529.268791][ T8274] device veth0_macvtap left promiscuous mode [ 529.280811][ T8274] device veth1_vlan left promiscuous mode [ 529.625124][ T8272] wlan1: Trigger new scan to find an IBSS to join [ 530.021090][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 530.206238][ T8274] team0 (unregistering): Port device team_slave_1 removed [ 530.246475][ T8274] team0 (unregistering): Port device team_slave_0 removed [ 530.286794][ T8274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.327071][ T8274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.368927][ T8274] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 530.657718][ T8274] bond0 (unregistering): Released all slaves [ 530.664344][ T8272] wlan1: Trigger new scan to find an IBSS to join [ 530.697051][T13898] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3168'. [ 530.713460][T13904] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 530.942879][T13765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.977025][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.019720][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.054653][T13765] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.086048][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.099510][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.116489][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.123650][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.142307][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.151080][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 531.161557][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.172152][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.179259][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.203305][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 531.238410][T13920] netlink: 'syz.0.3173': attribute type 4 has an invalid length. [ 531.266214][T13920] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3173'. [ 531.311085][T13920] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 531.580267][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 531.638845][ T8234] wlan1: Creating new IBSS network, BSSID 00:00:8d:ff:00:00 [ 531.647833][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.671299][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.716707][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.735584][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.766433][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.778169][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.831760][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.850601][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.874559][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.941068][T13765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.124089][T13940] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.300153][T13944] device bridge_slave_1 left promiscuous mode [ 532.315328][T13944] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.498396][T13944] device bridge_slave_0 left promiscuous mode [ 532.535783][T13944] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.260787][T13962] FAULT_INJECTION: forcing a failure. [ 533.260787][T13962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.355184][T13962] CPU: 0 PID: 13962 Comm: syz.1.3188 Not tainted syzkaller #0 [ 533.362691][T13962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.372758][T13962] Call Trace: [ 533.376041][T13962] [ 533.378981][T13962] dump_stack_lvl+0x188/0x24e [ 533.383676][T13962] ? show_regs_print_info+0x12/0x12 [ 533.388893][T13962] ? load_image+0x410/0x410 [ 533.393414][T13962] ? __lock_acquire+0x7c40/0x7c40 [ 533.398444][T13962] should_fail_ex+0x390/0x4c0 [ 533.403122][T13962] _copy_from_user+0x2c/0x170 [ 533.407788][T13962] ___sys_sendmsg+0x1c3/0x360 [ 533.412458][T13962] ? __sys_sendmsg+0x2a0/0x2a0 [ 533.417221][T13962] ? __lock_acquire+0x7c40/0x7c40 [ 533.422256][T13962] __se_sys_sendmsg+0x1c3/0x2b0 [ 533.427092][T13962] ? ct_nmi_exit+0x145/0x1c0 [ 533.431676][T13962] ? __x64_sys_sendmsg+0x80/0x80 [ 533.436616][T13962] ? lockdep_hardirqs_on+0x94/0x140 [ 533.441809][T13962] do_syscall_64+0x4c/0xa0 [ 533.446214][T13962] ? clear_bhb_loop+0x60/0xb0 [ 533.450880][T13962] ? clear_bhb_loop+0x60/0xb0 [ 533.455546][T13962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.461429][T13962] RIP: 0033:0x7f56ddd9e159 [ 533.465830][T13962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.485422][T13962] RSP: 002b:00007f56deccd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.493824][T13962] RAX: ffffffffffffffda RBX: 00007f56de025fa0 RCX: 00007f56ddd9e159 [ 533.501783][T13962] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 533.509741][T13962] RBP: 00007f56deccd090 R08: 0000000000000000 R09: 0000000000000000 [ 533.517701][T13962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.525658][T13962] R13: 00007f56de026038 R14: 00007f56de025fa0 R15: 00007ffc75538488 [ 533.533629][T13962] [ 533.580935][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.588404][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.602859][T13765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.745969][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.761719][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.828462][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.846846][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.862295][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.891341][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.932139][T13765] device veth0_vlan entered promiscuous mode [ 534.017982][T13765] device veth1_vlan entered promiscuous mode [ 534.070292][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 534.206952][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 534.216667][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 534.321675][T13765] device veth0_macvtap entered promiscuous mode [ 534.338563][T13981] netlink: 'syz.4.3196': attribute type 10 has an invalid length. [ 534.439085][T13983] netlink: 'syz.4.3196': attribute type 3 has an invalid length. [ 534.454922][T13981] team0: Port device netdevsim0 added [ 534.802610][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 534.977773][T13983] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3196'. [ 535.101492][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 562.031723][ T4275] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2661 jiffies s: 37597 root: 0x2/. [ 562.055439][ T4275] rcu: blocking rcu_node structures (internal RCU debug): [ 562.069047][ T4275] Sending NMI from CPU 0 to CPUs 1: [ 562.074545][ C1] NMI backtrace for cpu 1 [ 562.074554][ C1] CPU: 1 PID: 13982 Comm: syz.4.3196 Not tainted syzkaller #0 [ 562.074568][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.074576][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x60 [ 562.074664][ C1] Code: 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d 54 3c 80 7e 65 8b 15 55 3c 80 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 <83> b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b [ 562.074676][ C1] RSP: 0018:ffffc900001dfd38 EFLAGS: 00000046 [ 562.074689][ C1] RAX: ffffffff81a8af33 RBX: 0000000000000000 RCX: ffff888026afda00 [ 562.074699][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 562.074708][ C1] RBP: ffffc900001dfe70 R08: ffffc900001dfdf7 R09: ffffc900001dfde0 [ 562.074718][ C1] R10: dffffc0000000000 R11: fffff5200003bfbf R12: 1ffff9200003bfb8 [ 562.074728][ C1] R13: ffffc900001dfec0 R14: 0000000000000020 R15: ffff888073e09800 [ 562.074738][ C1] FS: 00007f1d917a36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 562.074751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.074761][ C1] CR2: 00007f5cf41eb840 CR3: 000000007f009000 CR4: 00000000003506e0 [ 562.074773][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 562.074781][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 562.074790][ C1] Call Trace: [ 562.074794][ C1] [ 562.074799][ C1] perf_output_begin_forward+0x7f3/0xa70 [ 562.074822][ C1] ? perf_prepare_sample+0x195f/0x2020 [ 562.074845][ C1] ? __perf_cgroup_move+0x150/0x150 [ 562.074863][ C1] ? verify_lock_unused+0x140/0x140 [ 562.074886][ C1] perf_event_output_forward+0x1ad/0x2f0 [ 562.074906][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 562.074925][ C1] ? perf_get_page_size+0x430/0x430 [ 562.074946][ C1] ? mark_lock+0x94/0x320 [ 562.074966][ C1] ? __lock_acquire+0x1465/0x7c40 [ 562.074985][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 562.075007][ C1] __perf_event_overflow+0x457/0x630 [ 562.075030][ C1] perf_swevent_overflow+0x19b/0x230 [ 562.075049][ C1] perf_swevent_event+0x458/0x570 [ 562.075071][ C1] ? perf_tp_event+0xc10/0xc10 [ 562.075090][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 562.075106][ C1] ? debug_object_activate+0x4f0/0x4f0 [ 562.075158][ C1] perf_tp_event+0x36b/0xc10 [ 562.075181][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 562.075220][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 562.075234][ C1] ? sched_clock_cpu+0x6e/0x260 [ 562.075252][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 562.075275][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 562.075296][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 562.075312][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 562.075332][ C1] ? __irq_exit_rcu+0x147/0x230 [ 562.075352][ C1] ? irq_exit_rcu+0x20/0x20 [ 562.075372][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 562.075386][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 562.075406][ C1] trace_hardirqs_on+0x24/0x40 [ 562.075423][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 562.075436][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 562.075457][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 1a 1c f7 65 8b 05 10 ca c5 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 562.075469][ C1] RSP: 0018:ffffc900001e05e0 EFLAGS: 00000206 [ 562.075480][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: a1efb25c1a56c100 [ 562.075490][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: 0000000000000001 [ 562.075499][ C1] RBP: ffffc900001e0670 R08: ffffffff90b0f337 R09: 1ffffffff2161e66 [ 562.075509][ C1] R10: dffffc0000000000 R11: fffffbfff2161e67 R12: dffffc0000000000 [ 562.075519][ C1] R13: dffffc0000000000 R14: ffff888035e945b8 R15: 1ffff9200003c0bc [ 562.075538][ C1] ? _raw_spin_unlock+0x40/0x40 [ 562.075556][ C1] ? __stack_depot_save+0x35/0x480 [ 562.075578][ C1] ref_tracker_alloc+0x2cb/0x490 [ 562.075597][ C1] ? ref_tracker_dir_print+0x150/0x150 [ 562.075614][ C1] ? dst_init+0xb1/0x400 [ 562.075659][ C1] ? dst_alloc+0x12a/0x160 [ 562.075674][ C1] ? icmp6_dst_alloc+0x7c/0x490 [ 562.075687][ C1] ? ndisc_send_skb+0x41b/0x1520 [ 562.075705][ C1] ? addrconf_rs_timer+0x367/0x640 [ 562.075723][ C1] ? call_timer_fn+0x1ac/0x670 [ 562.075738][ C1] ? __run_timers+0x56c/0x810 [ 562.075750][ C1] ? run_timer_softirq+0x63/0xf0 [ 562.075763][ C1] ? handle_softirqs+0x291/0x910 [ 562.075775][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 562.075787][ C1] ? irq_exit_rcu+0x5/0x20 [ 562.075798][ C1] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 562.075816][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 562.075830][ C1] ? generic_exec_single+0x427/0x4a0 [ 562.075870][ C1] ? smp_call_function_single+0x371/0x5a0 [ 562.075885][ C1] ? perf_install_in_context+0x5cf/0x930 [ 562.075898][ C1] ? slab_pre_alloc_hook+0x8c/0x300 [ 562.075916][ C1] ? rcu_is_watching+0x11/0xa0 [ 562.075938][ C1] dst_init+0xb1/0x400 [ 562.075953][ C1] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 562.075970][ C1] dst_alloc+0x12a/0x160 [ 562.075987][ C1] icmp6_dst_alloc+0x7c/0x490 [ 562.076000][ C1] ? icmpv6_flow_init+0x5e/0x120 [ 562.076018][ C1] ndisc_send_skb+0x41b/0x1520 [ 562.076039][ C1] ? ndisc_send_skb+0x1f0/0x1520 [ 562.076062][ C1] ? ndisc_mc_map+0x800/0x800 [ 562.076079][ C1] ? rcu_is_watching+0x11/0xa0 [ 562.076098][ C1] ? ndisc_alloc_skb+0xa6/0x450 [ 562.076129][ C1] addrconf_rs_timer+0x367/0x640 [ 562.076151][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 562.076175][ C1] call_timer_fn+0x1ac/0x670 [ 562.076188][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 562.076208][ C1] ? call_timer_fn+0xcf/0x670 [ 562.076221][ C1] ? __run_timers+0x810/0x810 [ 562.076238][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 562.076257][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 562.076275][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 562.076291][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 562.076312][ C1] __run_timers+0x56c/0x810 [ 562.076332][ C1] ? detach_timer+0x350/0x350 [ 562.076353][ C1] run_timer_softirq+0x63/0xf0 [ 562.076372][ C1] handle_softirqs+0x291/0x910 [ 562.076387][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 562.076402][ C1] ? do_softirq+0x210/0x210 [ 562.076414][ C1] ? hrtimer_interrupt+0x775/0x980 [ 562.076431][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 562.076445][ C1] __irq_exit_rcu+0x13b/0x230 [ 562.076458][ C1] ? irq_exit_rcu+0x20/0x20 [ 562.076476][ C1] irq_exit_rcu+0x5/0x20 [ 562.076488][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 562.076505][ C1] [ 562.076509][ C1] [ 562.076513][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 562.076527][ C1] RIP: 0010:generic_exec_single+0x427/0x4a0 [ 562.076543][ C1] Code: 75 11 e8 dc 13 0b 00 48 85 db 75 16 e8 d2 13 0b 00 eb 15 e8 cb 13 0b 00 e8 46 69 bb 08 48 85 db 74 ea e8 bc 13 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 44 25 00 00 00 00 00 43 c7 44 25 [ 562.076555][ C1] RSP: 0018:ffffc90003f0fa60 EFLAGS: 00000246 [ 562.076566][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888026afda00 [ 562.076575][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.076583][ C1] RBP: ffffc90003f0fb30 R08: ffffffff90b0f347 R09: 1ffffffff2161e68 [ 562.076594][ C1] R10: dffffc0000000000 R11: fffffbfff2161e69 R12: dffffc0000000000 [ 562.076604][ C1] R13: 1ffff920007e1f50 R14: 0000000000000000 R15: 1ffff920007e1f71 [ 562.076622][ C1] ? event_function+0x370/0x370 [ 562.076636][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 562.076655][ C1] ? smp_call_function_single+0xac/0x5a0 [ 562.076672][ C1] smp_call_function_single+0x371/0x5a0 [ 562.076687][ C1] ? event_function+0x370/0x370 [ 562.076701][ C1] ? flush_smp_call_function_queue+0x350/0x350 [ 562.076716][ C1] ? __mutex_trylock_common+0x15c/0x260 [ 562.076733][ C1] ? event_function+0x370/0x370 [ 562.076747][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 562.076769][ C1] perf_install_in_context+0x5cf/0x930 [ 562.076784][ C1] ? alloc_file_pseudo+0x1aa/0x200 [ 562.076800][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 562.076814][ C1] ? add_event_to_ctx+0x1260/0x1260 [ 562.076835][ C1] ? exclusive_event_installable+0xd3/0x2c0 [ 562.076848][ C1] ? perf_event__header_size+0x165/0x220 [ 562.076865][ C1] __se_sys_perf_event_open+0x128b/0x1ec0 [ 562.076882][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 562.076902][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 562.076918][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 562.076932][ C1] do_syscall_64+0x4c/0xa0 [ 562.076946][ C1] ? clear_bhb_loop+0x60/0xb0 [ 562.076959][ C1] ? clear_bhb_loop+0x60/0xb0 [ 562.076973][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.076993][ C1] RIP: 0033:0x7f1d9099e159 [ 562.077005][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.077016][ C1] RSP: 002b:00007f1d917a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 562.077030][ C1] RAX: ffffffffffffffda RBX: 00007f1d90c26090 RCX: 00007f1d9099e159 [ 562.077040][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000080 [ 562.077049][ C1] RBP: 00007f1d90a3503b R08: 0000000000000000 R09: 0000000000000000 [ 562.077058][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 562.077066][ C1] R13: 00007f1d90c26128 R14: 00007f1d90c26090 R15: 00007ffef05e3e08 [ 562.077083][ C1] [ 563.110453][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.116761][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.220774][ T8272] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)