last executing test programs: 5.542344819s ago: executing program 1 (id=3997): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010101) mkdir(0x0, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x43}], 0x1, 0x0, 0xfffffffffffffd75}, 0x4004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 4.581029132s ago: executing program 1 (id=3998): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.545781216s ago: executing program 3 (id=4007): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bc0a, r3, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) sendmsg$inet(r1, 0x0, 0x4000092) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x25, &(0x7f0000000100)=r4, 0x4) openat$cgroup_int(r4, &(0x7f0000000100)='cpuacct.usage\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0xc3, 0x8, 0x0, 0x0, 0xf1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x38, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x40000000) 3.409193469s ago: executing program 1 (id=4000): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010101) mkdir(0x0, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)}, 0x4004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) 3.408816549s ago: executing program 2 (id=4001): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x5, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000000000000000008510eaff0500000085200000020000009500007b"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x80}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x79, '\x00', 0x0, r5, 0x3, 0x4, 0x3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000186b00000c0000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe, &(0x7f0000000600)=""/254, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x10, 0x9, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000780)=[r1, r1, r1, r1], &(0x7f0000000880)=[{0x3, 0x1, 0x1, 0xd}, {0x2, 0x4, 0xf}, {0x2, 0x1, 0xc, 0x9}, {0x3, 0x3, 0x8, 0x3}, {0x1, 0x1, 0xc, 0x3}, {0x0, 0x4, 0xa}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x0, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.999944579s ago: executing program 2 (id=4002): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x789cd14d}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x0, 0x6fb9fdfc92a9f40b, 0x1, 0x0, 0x30, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @generic={0x9, 0x5, 0x8, 0x8000, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x54f2, 0x6e, &(0x7f00000000c0)=""/110, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xffff}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000300)={r0, r1}) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffe}, {0x0}], 0x2}, 0x10160) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000c40), 0x4) 2.921770851s ago: executing program 0 (id=4003): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r1, 0x37, 0x1, 0x3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=[0x0]}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f00000029c0)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0x840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000740)="59eced8ec6dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a01ff02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000c65401002500000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000004a00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRESHEX=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000049c0)={0x12, 0x18, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x380000, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff8, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000a40)='GPL\x00', 0x8eb3, 0xf7, &(0x7f0000000a80)=""/247, 0x41000, 0x40, '\x00', 0x0, @fallback=0x22, r2, 0x8, &(0x7f0000001000)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000004940)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, 0xffffffffffffffff], &(0x7f0000004980)=[{0x3, 0x5, 0x7}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x2e, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe8a4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0xfa, 0x4, 0x4, 0x0, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x99d}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT, @ANYBLOB="0000000000000000b70500000800000085000000ab00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRESOCT=0x0, @ANYBLOB="00000000d197a5cec612efafc4d77cb2aa00000000b7050000"], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) 2.788942974s ago: executing program 2 (id=4004): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bc0a, r5, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) sendmsg$inet(r2, 0x0, 0x4000092) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f0000000100)=r6, 0x4) openat$cgroup_int(r6, &(0x7f0000000100)='cpuacct.usage\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x86dd, 0xd, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x38, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x40000000) 2.640837857s ago: executing program 0 (id=4005): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000c65401002500000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000004a00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) 2.620607808s ago: executing program 1 (id=4006): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010101) mkdir(0x0, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x43}], 0x1, 0x0, 0xfffffffffffffd75}, 0x4004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.436205272s ago: executing program 0 (id=4008): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d087c06007c06e8fe", 0x1a}, {&(0x7f0000000500)="b5e33612e2acbcbe513f4fa89e214c99516a32a37a236eec9dd457be95289a14d882845fdc25921f6cd92a3497e5c9674ca1adaf0cf4bf227501a71ee17523f21329adb0128a1d2a62e5a531150fb2495b1f38c0792dd7e2439013083428df23bf2f323238f4027820dad3a870c559eecdd0d9946d333a963b7c50332d515233fafaf46613696f8681a1fae1a2ec8509121e04e6bbf24b89715d4bd8d71223404413e28e318e644cdfef027577c17ea91b2ee390bf5cedbe5ca22bd1", 0xbc}, {&(0x7f00000006c0)="af45a8cda80690e85198db603feb6538fd16eaabe05627a8e419f77d07d1656ebe02158991f49358a8be0e966e14790a7393c72b3474218414bca549c7f40086dc02b8495af76b6f0777314be154fff7d4199f6abe9d8eea2edcb17091b5f0560c31c0047eb9f34ac86f2529ec8562473113cd0764fa3e8fcd36401ac8fbf18027e45f161df00bc91de23f530fc68fb96da028a9742c3f7116f41e47bcd82490b48cc0cf0a0ae3bf393dae62a25e4f70c1d4cfbd895d43878efe362b19dadbbb440d48949c6ffd477762be0ba1dd406f032d4a933c6f214400f84454a54b369dc9c4c0b15ba7379d51888a9c7d7f", 0xee}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="880fb8837e1b97d05a2eec79fb9e744e27207637c74a776d200f639ed8407496ffdfdcae2098579c881630309a63163de5fa01e7483198ce85ca93654472c2eaf3af780d83ea3529721a1d4041344a8349ab0936089fc928266542dd42e93e25914c9f5a4a822288018cdd727958b1260a6c9338de430c603ed32d46d9d8e5342ec9c772c4ef77de9469a18442bc5de2b957cf7985e37acd96375342eb8ae2b4dbfafa6758481e45baaaad465b50ced7bbfd4f9d427765ac6af58f38c83b661730876f8064d72fe0f3e90fb7729ead0d6071afbd6a4f510ea0bde354f84cd29f51acbbf315f17f7333ec", 0xea}], 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a800160005000140030000000360", 0x3e}], 0x1}, 0x40000f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0100eb000000000000"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000002c0)={'syz_tun\x00', @random='D\x00\x00\x00(E'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=r2, @ANYBLOB="ffffffff000000000000abff88709c3f8081f283", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fc0800fec0000200875a65969ff57b00fec0"], 0xfdef) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$sock(r6, &(0x7f0000001ac0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000980)="717fe70756bfaccbef5fee07da96301c81b0d316d62b5c1a8d1990dc1909f414c5e1e18a86f9a272551bd4dff8b298b9bac02628ab7c1217b889bdfc7cb902d84d59e21ef680b3023323fa630e4b591a2659f97987f3cea0c7c595827b14baa8320868743d7540d5b5dc5facf5a35a95b1b0d634516d3da02e04b9bc62647c080f6d54b3190f993b7d00df1c382f09af000d816a0e06b15a178d5a4c80084cd3dbd5a53a11eea55596d416a6b0a30ea96cf1bdf06736dd3399a66de8b3e78a8eaa0028ce34547d54d0b2c4198060b0951ce84c538617a993730ecbb0d20266a6d276f052373b59d1ed761804a325c0109a4b52901526646db1d0334cf3d6ea415643b1e08a6c9dac61f87570d9845c20405a0e319ea07d6a129e6678171bb0cb9e8bc34b94a844350b53e0d662302ac7bfe3189a4c2b840ece70cde7719c98865afaa5455d9cf4b5b392879004ca22436c19cd2fe7c353fb414b0592027e4da5f0827ad43f7d8be2656ce63687e6200ca653582dc096824341595bef167d1bcc42f7a34859924eb265cb726de8e64f60d33de706a23af4874aab6b227f0ca8ca3d7f402c34af5ecd118d11b4deaa6bcdc4cd0286d6d1d88fb776cc3ccc89208e253f4c3bd985e7cc753de4b978b1203725f92de1f166d2f4ba09af1818801a343a52d4fdbd2131670925a6eeb2aaf004cc537f7806a97393da2ac8b23b572d57917fcc91e393db73d40d48927fd6d26b1ba9f0407d5bc6dd2b0e17f935eb0445a621f993d25172d9aae3720b9ef1bce18881a8b0a95b9d4dd6c8d02f3d70189871df2099ebe9da8c496e1ef158298fb626d30890adf5e0dc629c673d4e08e694c2542123ee938f435a3052df28339bcf55c39850ff9b9719fcf649003f7bfbe5ed88dedf266308d75f163953a1ae36d58d681f4fc56baa073b23c8ee27ebbe9dbab65cdd87553c27ab450e7a6ed826cf2337f8c72003502692a6108cc898539dd52d423ffc16a78d6c1622c1df261ed13efc749da8172516d02ef9471ef5ba30a57aac46f18aa250f59925e848212f1a41bcbce2036e7b48f4647227f7fe7dcbd9718d9167abfe0a68f0d179564a0199494f7034c7c1c6751941f5fc7a0a657c6b43782494fbaf9790f0279859e680202ef3747faa7be4e6e87693450e05988e5879d3e0ec032c8ac4efcd7354fe80b3e4c37036c050568b5c7cba12c8436ae5fad7b393fd4aa242d5d70c40c2aa2927eed086bfc46cfea1e2c0a86afad9fe395a190f2cf943d0a26cdcccac316a42bac806232a0aab71d7482cfdaaef3a3490d032ae7debb9215e9ac2b3ccb9492e2bb687e543a1db517e72b1d811f9bc7d17519d0b3744abe5b69279dd9773e8a5faf12d5b02d67e5ae8e7c705393efbf360c8e244cd30f7c98be2439be22d6d568d6e8c804f80e511edfb60bca4f4f1eb6d9a81e8f091613c8cd6051850d262cb4299dbf763633f3bb580342d9d0276d826d9958a49b9af8d3cb2fefb6ead9b418b769824698b66f06aa040093f18731abb7202f032a0dbe3ee0c8f6445effe0964e1d7f2da895f9607b58da109cb82551233b15554ca9cc42b99a50f3ae89bae858fea1731eec427cd51ecd0422bc7f0cf49e76358103645a98555cc465bb7ba87bb03cab8889691a76b3c0c0a1c4903b39ae99f0e14e537ba45661e55d37ff05a64d9c35b72cc9683fb010001d5a0ddf07fd8abd4d7301fabaec5900144948bd3daeaed0bd3dcc5e1acdc791c136ecd9283cf0d8266df56b9ff201ba7e774d180c9e8310939dafe04aeaa31c3cdec0a1043ca6a08a5bd0cbd330adb2a7d1bc00fa4934908f4e287cf32e792e0e92500a16fdb1af37a0acca7cca3f60dc4204816234e323360dfc65e6aac45196368cbe70523df16f42eb7e504c6285161488d5c772fe4f3a11c24d7527eb65b446dc9e2d66f6959858769fff78606f853cc1b9f62a3e51d159111dd6c8ea189454e1819c8070eac2d9e5cb8bd78842928ace81fc3be670ed4f51c2e1f189ada4cf34513018ee3b6bbb521559639b061089dfce7770a20605f6b7193370078e7993e64ea32186dc0a5150f6b5b0742c2acfec7ccc105986f40d6d2016c562f8bda43cee5edea17e74fa47f31be7988aa8755289698a6fa172dd7b69ee5fccb0ae11b05a2b277661dc35a3998c76176ea0dfc17c198290e0ce3f63b7f6e0b1bd4e7fb3212acb0cb8eb4d9981a480f7f05c98f20f2cfcadef172d4f3b46ed1dc3508b78111f9671c632a2a6aa8a1068e7387baf5397486735ffb061bb346c16b1d434db528dd60207655dda8fbdd6bcf88be10af62bdced2cc98c13dea342424086f2bf3f534ecec9ecda2cdc4dc68fd4f2487d98fb2ed7199121e09fdf8c6b79c9c43675b21b3f008e9b7e328bd835e8ad9555826eaf3696c1652bcd7e238427ce35daf3098cd5feafc23960a39463b618347c3f4d54a495b84cde360582b4a6d899dce10b4255ea9a6867f5756389c8a4295ca89e9b7a29f7de04beb6eca83a5f48a08c27f38b50ffd6492fb0404529e8ad1766a7b75d3d8e959de349ac7634c8aebec979a43fde53c02a2e944ff0c5f6872cf0dfc9abc9e6a79ba45f7c22c92749621a3c2dc4d44d0c88df2d48979c3aad9384afa2a71553d282e1852d2c95c5f92cb3904df8e181c08c34fbd21ece938045c5abb27691458ddacdbe2704bb9aebfb11f3ed8c24cd76568098d2a31e929b8421643671f4d7e93013770228160b7ef6edfb2910366c8ca030ec3201819e42a9fde8a06a691240e8f36a774dfa3f7a3382f96544deff48052b35ee9309648fffd11d37dea757c0d010399dbcf80af9b618cfce4f677fae085a0d8dc55731a71bd91ce1b33329ec3b59e70f113e97e88a8cb18cc6d5e559f36e2241f2b8b43f17280cda099147a6ff8c9fc7debebdcefbca882e93679eef9c5393cdc8a104b52b7ae9c32b33ebb0e030e3f738ae7a23758bcf713810b42eaab79be806db3e79c2dba49bdf47a1b866673efa0945adfb07ceac2604734b077c1f679c9bdd6587754636212eb720e5887315ad9f5d3e46b16080b86b51deef1f7f5eb62751448ceb280ea1cc93421cb1ad6db6a5f39a1aac93b7e5fca4a77e83ba23dff95091bad29e26526f1ff6ce37d4acf2f3e5c669a527d3eab7dfc6fcd096ca177fd9eb3a705f6fd6821e6b0316a86d883f1a0c23cf431febf1cb71849d2de6b962af307882a147a6e7e099504dd7d679079f1b682cddf45bf231dea82ec7222cf7bed3ed7af93bf813984b11176191a669b0fe9f2210a4d2d8b95381179320f37de6e32a0e392f3cc44bb46d1591d65874a13ae19626bd3fadc59c53b665a47dcfecd7c6dc041749ab3ffeb8ed519434225623ef05fadf3feccf1dfae816b77413e1e2c551af7609538318e8eac5bbddd1547c2450eeea760f72774b041cc3067385e45b37812a2c7241f97a936efb818f4e9ab6a71745c37609afcafbeee60542d0a13d9f5c366efb50873a6018e74075bf59be6e62dc1f43e0e0730323b6bbb187660c2f50ea4a7c0d6d91ca8ecdced31ab5e64c743cec0b5f84b183bf8b0096c1b58055238991e0d9b4b19814200edf7e1e37568dda57ed446d39912a19e80aa5e1c566057e5eb51482b79b993e702727390760645e70c702d0403c5d5024bfde40ee704f48838a207a33914130ddfb78d0a932de076ea433f9ccc7132f9bafa64856bab3187072d7b1d7adad74b5bc57d552539d80de2f9089e2270f9396fce6953b0702d4d8c134760d8777de8632c1b0ee8fe9ce1970e262b53c8e83847ed609979f3ab215b9fb33678bf803fbb4edb959e706f2624d267094322f46f25ccdc86d925bb3250b27c206322ad8ff5ae0cba8fc4b723ae24657f349c7b5731deb46def4a493fac664d668e628d14618efce176cb009459c5aec7d112944e5202797a10e5b26098f5d7c465ef166210430dc52141d0986468848386bbbf4196f6128e0d58cd03977d412951e3e2d0dcdc10f86fd39f0363e8c01535e55b0be4a1251b966d04ad08f3205f6e899d58f4ebbf20031803b4a5efba5075177fa938d3be1635a8a74ef4f3d9437a4ad9c373acb1e6524af0f0ab2417fd09ecfda6c648045504b9f85a4766aa19153b8a60d47eb85b75bbbe5ad8224b58da0a87b5c6d15ebcf17bf168255255f785702d6f825b9b7afce5c7a6fdb564ef9dd2075d3e89cb4856dfe409d923bef5df5c663695870acde58618b9fe42912aa2ce9aefcd13db62d487244c5ce0b2f42b905a586c79a0fa7bdef2aa37d4dbfea85a93f44cc0d4b05a896dc7b8795d57fdc0caac433caee4ec8541eac032f28683544f6b8f1a57e6bae5a7c04e6ddb2b85152fc69d8c91f9753a19c242a684715c8c4f9de9533dd2ed7d7847c339c1ddbe22c2493c90ff8ae3da3bc563013e389b663aa7c40f43c4723cb221c2403bd4d1b8186ca019b6347e124d26233ac772561be85a6dd1c80847aa30dc42f35091b79dd4ff183ad97b5c49a005ca756aaedfea3ed65db88d9f606a44f6fcdfc6846ced18666c54dbf2e9d1f1dcac65ee2169b76ae76ae7e106262e6ccfd378d2dec9741d6222bcdef0812fedc603e1c2e166d895d505fedbbb3d12d3a5cd45a36aa220b7fd1be922c3607068bb5b830b05bd14c8a245cd131aee27ff4d49ea0b53bd299a4e4228567220c9b0929a2083a079f230ef7820c28709a7b7929c3d5355a930e3441a9cd5e7ab720956e4b3ec10c7006c61a552f98143bf7ac629900d13d3eaa0b12ce635b49ded12d10d720192ef5271154bb60b106f953ad4ba3bc6a427b1c84bebd2d5650543d4168a46c4c28f90f9ae63b3a8c38c4c16e5a46463185638ecc5377ec938dce7ae93c40209867612a8b8a13e556fe860f7a9f8ebd4d9387d4232c11cd890b8641feae6b7303b9cec9750392b6b109a9120e5cf85a9686b437bdd931cce3450171e17f3eb76dbcbc61ae4ab2711e3a97a89342dadfbd71cf0386a54bd5a5177fc6dacc7189e7e7429d57ecf7aa5133e52d88e0eb07b9076ea844bfde0480fffb5cdfd02add9a825c486d9d80d70ad5205d38ab6581562fddf29c57783eda80e2261b6d52d68f5244320b158f5fea96ecfbf653696a818a02158d9da454c755f3669b19b048eb56e66deed7101968f3e0bb5cb4b6ac9fe53b9ffb451fa9af795b07ffb07acc149f9771d586642b9904aac032283667249d7bf57973af4ac1efea60f598b28d6c0a5a6d6d5187450b7b6542f71cd86dfc7a8395be549a1c8384924255bab37246f3f7224074205e04bcd6a86e12b218b01f3b459386af060ea23e8b7431f97f8ff84549ee9af5c2416df80f4600b447c2e789fc6331e84a26d2d4a8054a9975bdbc15ac69622e15cbbbcbcf26a8c8e9c0a6c8d9042d2ab6d8fe5302e84f4fcd1e548e1d2ee32dfe76f3d6c84a176d48ca31d4327a995b6fef2dc3fccd66c78397b3a93b52ec4533f2bbbe2c72efc78980a15db413b9b7ab95e19d78b1ae9419c652d69c39da7ed5f3a9c5e83b29ca7584cde09b52115c873b758ee9e4febce0a43f184a978d51482a49f4d431b385a026a7addbc37f43b2a64025402e8d6707639494321fcea3375f0dd796d38e9983ca9aa455702bb4e28eea4c8263ce3ce19cf1a194ea79b54b137ce84f9e09671dc4c2108be10da176ae58fa2811028f0e41b92ed62bceb13b4ed363ace5ba783b04f377019d567789400fd8d14b96314caf3402157677174f38bce24f478407e709458048d88b2fb72141fdba6", 0x1000}], 0x1, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}], 0x120}, 0x20008045) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e2306", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc050) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.162312369s ago: executing program 3 (id=4009): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.856734456s ago: executing program 2 (id=4010): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)=""/4117, 0x1015}, {&(0x7f00000039c0)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f0000001980)=""/212, 0xd4}, {&(0x7f0000001a80)=""/234, 0xea}], 0x5}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 1.208959341s ago: executing program 3 (id=4011): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x5, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000000000000000008510eaff0500000085200000020000009500007b"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x80}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x79, '\x00', 0x0, r5, 0x3, 0x4, 0x3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000186b00000c0000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe, &(0x7f0000000600)=""/254, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x10, 0x9, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000780)=[r1, r1, r1, r1], &(0x7f0000000880)=[{0x3, 0x1, 0x1, 0xd}, {0x2, 0x4, 0xf}, {0x2, 0x1, 0xc, 0x9}, {0x3, 0x3, 0x8, 0x3}, {0x1, 0x1, 0xc, 0x3}, {0x0, 0x4, 0xa}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x0, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.203704331s ago: executing program 0 (id=4012): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x2, 0x2, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.189930782s ago: executing program 1 (id=4013): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x3, 0x8, 0x1}, 0x50) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r2, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0x800000}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x4, &(0x7f0000000280)=@raw=[@alu={0x7, 0x1, 0x7, 0x4, 0x4, 0xffffffffffffffc0, 0xfffffffffffffffc}, @exit, @generic={0x3, 0x0, 0xa, 0x5, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], 0x0, 0xf, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/257, 0x66, 0x101, 0x6}, 0x28) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r5, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) (async, rerun: 64) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) (async) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) (async, rerun: 64) socket$kcm(0x2, 0x1, 0x84) (async, rerun: 64) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r7) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) (rerun: 64) 933.230498ms ago: executing program 0 (id=4014): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x5, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 843.62671ms ago: executing program 2 (id=4015): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r1, 0x37, 0x1, 0x3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=[0x0]}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f00000029c0)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0x840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000740)="59eced8ec6dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a01ff02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000c65401002500000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000004a00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRESHEX=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000049c0)={0x12, 0x18, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x380000, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff8, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000a40)='GPL\x00', 0x8eb3, 0xf7, &(0x7f0000000a80)=""/247, 0x41000, 0x40, '\x00', 0x0, @fallback=0x22, r2, 0x8, &(0x7f0000001000)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000004940)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, 0xffffffffffffffff], &(0x7f0000004980)=[{0x3, 0x5, 0x7}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x2e, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe8a4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0xfa, 0x4, 0x4, 0x0, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x99d}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT, @ANYBLOB="0000000000000000b70500000800000085000000ab00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRESOCT=0x0, @ANYBLOB="00000000d197a5cec612efafc4d77cb2aa00000000b7050000"], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) 789.988831ms ago: executing program 3 (id=4016): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000c65401002500000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000004a00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) 768.568682ms ago: executing program 0 (id=4017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3f, 0x4a3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r13 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r13, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x31, &(0x7f0000000640)=r12, 0x4) setsockopt$sock_attach_bpf(r13, 0x1, 0x31, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r10, 0x24, 0x0, 0x10003, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYRES16=r9, @ANYRES8=r7, @ANYRES64=r7, @ANYRES64=r14, @ANYRES8=r8, @ANYRESHEX=r11], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0700000011200000", @ANYRES32=r1, @ANYRES32=r15, @ANYBLOB="4a3ee035763ca95e7a22b3f1fbdbb38419c90a46527545433d8edc728e373734c80c2f27b4f3495f7111f02aea31911f2f32c5afa6887bd2bfac2c127d91527e5310f1853276851dd3878781581828e315458e46", @ANYRES64=r14], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 757.997781ms ago: executing program 1 (id=4018): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bc0a, r5, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) sendmsg$inet(r2, 0x0, 0x4000092) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f0000000100)=r6, 0x4) openat$cgroup_int(r6, &(0x7f0000000100)='cpuacct.usage\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x86dd, 0xd, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x38, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x40000000) 573.284256ms ago: executing program 3 (id=4019): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a", 0x1b}], 0x1}, 0x40000) 529.008357ms ago: executing program 2 (id=4020): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d087c06007c06e8fe", 0x1a}, {&(0x7f0000000500)="b5e33612e2acbcbe513f4fa89e214c99516a32a37a236eec9dd457be95289a14d882845fdc25921f6cd92a3497e5c9674ca1adaf0cf4bf227501a71ee17523f21329adb0128a1d2a62e5a531150fb2495b1f38c0792dd7e2439013083428df23bf2f323238f4027820dad3a870c559eecdd0d9946d333a963b7c50332d515233fafaf46613696f8681a1fae1a2ec8509121e04e6bbf24b89715d4bd8d71223404413e28e318e644cdfef027577c17ea91b2ee390bf5cedbe5ca22bd1", 0xbc}, {&(0x7f00000006c0)="af45a8cda80690e85198db603feb6538fd16eaabe05627a8e419f77d07d1656ebe02158991f49358a8be0e966e14790a7393c72b3474218414bca549c7f40086dc02b8495af76b6f0777314be154fff7d4199f6abe9d8eea2edcb17091b5f0560c31c0047eb9f34ac86f2529ec8562473113cd0764fa3e8fcd36401ac8fbf18027e45f161df00bc91de23f530fc68fb96da028a9742c3f7116f41e47bcd82490b48cc0cf0a0ae3bf393dae62a25e4f70c1d4cfbd895d43878efe362b19dadbbb440d48949c6ffd477762be0ba1dd406f032d4a933c6f214400f84454a54b369dc9c4c0b15ba7379d51888a9c7d7f", 0xee}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="880fb8837e1b97d05a2eec79fb9e744e27207637c74a776d200f639ed8407496ffdfdcae2098579c881630309a63163de5fa01e7483198ce85ca93654472c2eaf3af780d83ea3529721a1d4041344a8349ab0936089fc928266542dd42e93e25914c9f5a4a822288018cdd727958b1260a6c9338de430c603ed32d46d9d8e5342ec9c772c4ef77de9469a18442bc5de2b957cf7985e37acd96375342eb8ae2b4dbfafa6758481e45baaaad465b50ced7bbfd4f9d427765ac6af58f38c83b661730876f8064d72fe0f3e90fb7729ead0d6071afbd6a4f510ea0bde354f84cd29f51acbbf315f17f7333ec", 0xea}], 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a800160005000140030000000360", 0x3e}], 0x1}, 0x40000f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0100eb000000000000"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000002c0)={'syz_tun\x00', @random='D\x00\x00\x00(E'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=r2, @ANYBLOB="ffffffff000000000000abff88709c3f8081f283", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fc0800fec0000200875a65969ff57b00fec0"], 0xfdef) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$sock(r6, &(0x7f0000001ac0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}], 0x120}, 0x20008045) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e2306", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc050) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) 0s ago: executing program 3 (id=4021): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010101) mkdir(0x0, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x43}], 0x1, 0x0, 0xfffffffffffffd75}, 0x4004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [T15618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 720.224661][T15618] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 720.232624][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.240588][T15618] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 720.248560][T15618] [ 720.324906][T15618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3333'. [ 720.371685][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 720.418049][T15621] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 720.792190][T15635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3337'. [ 721.385208][T15644] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3339'. [ 722.145474][T15647] netlink: 'syz.1.3341': attribute type 10 has an invalid length. [ 722.660309][T15655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3343'. [ 723.069634][T15009] wlan1: Trigger new scan to find an IBSS to join [ 723.135865][T15662] FAULT_INJECTION: forcing a failure. [ 723.135865][T15662] name failslab, interval 1, probability 0, space 0, times 0 [ 723.177924][T15662] CPU: 1 PID: 15662 Comm: syz.0.3345 Not tainted syzkaller #0 [ 723.185448][T15662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.195524][T15662] Call Trace: [ 723.198817][T15662] [ 723.201746][T15662] dump_stack_lvl+0x18c/0x250 [ 723.206457][T15662] ? show_regs_print_info+0x20/0x20 [ 723.211651][T15662] ? load_image+0x420/0x420 [ 723.216159][T15662] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 723.222226][T15662] ? verify_lock_unused+0x140/0x140 [ 723.227443][T15662] should_fail_ex+0x394/0x4c0 [ 723.232127][T15662] should_failslab+0x9/0x20 [ 723.236629][T15662] slab_pre_alloc_hook+0x59/0x300 [ 723.241655][T15662] ? mark_lock+0x94/0x320 [ 723.245981][T15662] ? ___neigh_create+0x6f4/0x23d0 [ 723.251006][T15662] ? ___neigh_create+0x6f4/0x23d0 [ 723.256033][T15662] __kmem_cache_alloc_node+0x53/0x250 [ 723.261405][T15662] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 723.267383][T15662] ? ___neigh_create+0x6f4/0x23d0 [ 723.272403][T15662] __kmalloc+0xa7/0x240 [ 723.276559][T15662] ___neigh_create+0x6f4/0x23d0 [ 723.281407][T15662] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.287557][T15662] ? lockdep_hardirqs_on+0x98/0x150 [ 723.292754][T15662] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.298912][T15662] ip6_finish_output2+0x156d/0x1620 [ 723.304112][T15662] ? ip6_finish_output2+0x642/0x1620 [ 723.309397][T15662] ? nf_hook+0x390/0x390 [ 723.313638][T15662] ? ip6_mtu+0x321/0x3f0 [ 723.317909][T15662] ? ip6_finish_output+0x567/0x7f0 [ 723.323038][T15662] ? ip6_send_skb+0x10a/0x380 [ 723.327715][T15662] ip6_send_skb+0x1cd/0x380 [ 723.332230][T15662] udp_v6_send_skb+0xbd8/0x1810 [ 723.337090][T15662] udp_v6_push_pending_frames+0x133/0x220 [ 723.342808][T15662] udpv6_sendmsg+0xdd8/0x2350 [ 723.347489][T15662] ? udpv6_sendmsg+0x2350/0x2350 [ 723.352423][T15662] ? __might_sleep+0xe0/0xe0 [ 723.357012][T15662] ? udp_v6_early_demux+0xf90/0xf90 [ 723.362225][T15662] ? aa_af_perm+0x330/0x330 [ 723.366732][T15662] ? sock_rps_record_flow+0x19/0x3f0 [ 723.372016][T15662] ? inet_send_prepare+0x5b/0x250 [ 723.377038][T15662] ? inet6_sendmsg+0x5f/0xd0 [ 723.381625][T15662] sock_write_iter+0x2dc/0x420 [ 723.386410][T15662] ? sock_read_iter+0x3f0/0x3f0 [ 723.391265][T15662] ? common_file_perm+0x198/0x1f0 [ 723.396290][T15662] vfs_write+0x474/0x9a0 [ 723.400535][T15662] ? file_end_write+0x250/0x250 [ 723.405387][T15662] ? __fget_files+0x3fc/0x460 [ 723.410068][T15662] ? __fdget_pos+0x1d8/0x330 [ 723.414652][T15662] ? ksys_write+0x74/0x260 [ 723.419073][T15662] ksys_write+0x151/0x260 [ 723.423405][T15662] ? __ia32_sys_read+0x90/0x90 [ 723.428173][T15662] ? lockdep_hardirqs_on+0x98/0x150 [ 723.433371][T15662] do_syscall_64+0x55/0xb0 [ 723.437781][T15662] ? clear_bhb_loop+0x40/0x90 [ 723.442450][T15662] ? clear_bhb_loop+0x40/0x90 [ 723.447120][T15662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.453012][T15662] RIP: 0033:0x7f3db0f9e0d9 [ 723.457424][T15662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.477025][T15662] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 723.485452][T15662] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 723.493420][T15662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 723.501382][T15662] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 723.509369][T15662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.517329][T15662] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 723.525333][T15662] [ 723.591550][T15655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3343'. [ 723.712739][T15663] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 723.772569][T15669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3347'. [ 724.079906][T15681] netlink: 'syz.2.3349': attribute type 10 has an invalid length. [ 724.116409][T15683] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3350'. [ 724.211793][T15681] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3349'. [ 724.326770][T15681] openvswitch: netlink: Message has 4 unknown bytes. [ 724.861524][T15685] netlink: 'syz.3.3352': attribute type 10 has an invalid length. [ 726.385949][T15719] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3361'. [ 726.436208][T15720] netlink: 'syz.1.3363': attribute type 10 has an invalid length. [ 726.473750][T15720] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3363'. [ 726.522352][T15720] openvswitch: netlink: Message has 4 unknown bytes. [ 727.128248][ T3490] wlan1: Trigger new scan to find an IBSS to join [ 727.536054][T15727] netlink: 'syz.3.3366': attribute type 10 has an invalid length. [ 727.557142][T15733] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.3368'. [ 727.830292][T15742] FAULT_INJECTION: forcing a failure. [ 727.830292][T15742] name failslab, interval 1, probability 0, space 0, times 0 [ 727.860834][T15742] CPU: 0 PID: 15742 Comm: syz.3.3371 Not tainted syzkaller #0 [ 727.868352][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.878434][T15742] Call Trace: [ 727.881737][T15742] [ 727.884691][T15742] dump_stack_lvl+0x18c/0x250 [ 727.889401][T15742] ? show_regs_print_info+0x20/0x20 [ 727.894626][T15742] ? load_image+0x420/0x420 [ 727.899165][T15742] ? __lock_acquire+0x7d80/0x7d80 [ 727.904223][T15742] ? perf_trace_preemptirq_template+0x269/0x330 [ 727.910495][T15742] should_fail_ex+0x394/0x4c0 [ 727.915217][T15742] should_failslab+0x9/0x20 [ 727.919751][T15742] slab_pre_alloc_hook+0x59/0x300 [ 727.924802][T15742] ? bpf_test_init+0x9f/0x140 [ 727.929502][T15742] ? bpf_test_init+0x9f/0x140 [ 727.934211][T15742] __kmem_cache_alloc_node+0x53/0x250 [ 727.939621][T15742] ? bpf_test_init+0x9f/0x140 [ 727.944320][T15742] __kmalloc+0xa7/0x240 [ 727.948508][T15742] bpf_test_init+0x9f/0x140 [ 727.953053][T15742] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 727.958454][T15742] ? __lock_acquire+0x7d80/0x7d80 [ 727.963517][T15742] ? dev_put+0x80/0x80 [ 727.967619][T15742] ? dev_put+0x80/0x80 [ 727.971730][T15742] bpf_prog_test_run+0x31f/0x390 [ 727.976672][T15742] __sys_bpf+0x49d/0x890 [ 727.980914][T15742] ? bpf_link_show_fdinfo+0x390/0x390 [ 727.986293][T15742] ? lock_chain_count+0x20/0x20 [ 727.991140][T15742] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 727.997122][T15742] __x64_sys_bpf+0x7c/0x90 [ 728.001537][T15742] do_syscall_64+0x55/0xb0 [ 728.005947][T15742] ? clear_bhb_loop+0x40/0x90 [ 728.010617][T15742] ? clear_bhb_loop+0x40/0x90 [ 728.015288][T15742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.021181][T15742] RIP: 0033:0x7fc12959e0d9 [ 728.025597][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.045200][T15742] RSP: 002b:00007fc12a415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 728.053707][T15742] RAX: ffffffffffffffda RBX: 00007fc129825fa0 RCX: 00007fc12959e0d9 [ 728.061677][T15742] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 728.069647][T15742] RBP: 00007fc12a415090 R08: 0000000000000000 R09: 0000000000000000 [ 728.077613][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.085616][T15742] R13: 00007fc129826038 R14: 00007fc129825fa0 R15: 00007ffcf28b2818 [ 728.093593][T15742] [ 728.120035][T15740] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 728.381136][T15753] netlink: 'syz.0.3373': attribute type 10 has an invalid length. [ 728.481487][T15753] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.3373'. [ 728.567873][T15753] openvswitch: netlink: Message has 4 unknown bytes. [ 729.178794][T15764] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3375'. [ 730.266178][T15771] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3380'. [ 730.309112][T15771] ksmbd: Unknown IPC event: 0, ignore. [ 730.318267][T15771] FAULT_INJECTION: forcing a failure. [ 730.318267][T15771] name failslab, interval 1, probability 0, space 0, times 0 [ 730.331232][T15771] CPU: 0 PID: 15771 Comm: syz.1.3380 Not tainted syzkaller #0 [ 730.338715][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.348796][T15771] Call Trace: [ 730.352093][T15771] [ 730.355039][T15771] dump_stack_lvl+0x18c/0x250 [ 730.359743][T15771] ? show_regs_print_info+0x20/0x20 [ 730.364977][T15771] ? load_image+0x420/0x420 [ 730.369512][T15771] ? __might_sleep+0xe0/0xe0 [ 730.374123][T15771] ? __lock_acquire+0x7d80/0x7d80 [ 730.379176][T15771] should_fail_ex+0x394/0x4c0 [ 730.383882][T15771] should_failslab+0x9/0x20 [ 730.388409][T15771] slab_pre_alloc_hook+0x59/0x300 [ 730.393461][T15771] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 730.399207][T15771] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 730.404954][T15771] __kmem_cache_alloc_node+0x53/0x250 [ 730.410359][T15771] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 730.416106][T15771] __kmalloc+0xa7/0x240 [ 730.420293][T15771] tomoyo_realpath_from_path+0xe6/0x5c0 [ 730.425875][T15771] ? tomoyo_domain+0xd6/0x120 [ 730.430588][T15771] tomoyo_path_number_perm+0x248/0x5e0 [ 730.436070][T15771] ? tomoyo_path_number_perm+0x217/0x5e0 [ 730.441730][T15771] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 730.447215][T15771] ? ksys_write+0x1d2/0x260 [ 730.451772][T15771] ? __fget_files+0x28/0x460 [ 730.456396][T15771] security_file_ioctl+0x70/0xa0 [ 730.461370][T15771] __se_sys_ioctl+0x48/0x170 [ 730.465988][T15771] do_syscall_64+0x55/0xb0 [ 730.470424][T15771] ? clear_bhb_loop+0x40/0x90 [ 730.475119][T15771] ? clear_bhb_loop+0x40/0x90 [ 730.479824][T15771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.485739][T15771] RIP: 0033:0x7f278cb9e0d9 [ 730.490172][T15771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.498530][T15777] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3382'. [ 730.509783][T15771] RSP: 002b:00007f278db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.509808][T15771] RAX: ffffffffffffffda RBX: 00007f278ce25fa0 RCX: 00007f278cb9e0d9 [ 730.509821][T15771] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 730.509833][T15771] RBP: 00007f278db37090 R08: 0000000000000000 R09: 0000000000000000 [ 730.509845][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.509857][T15771] R13: 00007f278ce26038 R14: 00007f278ce25fa0 R15: 00007ffc900733b8 [ 730.542898][T15777] ksmbd: Unknown IPC event: 0, ignore. [ 730.543152][T15771] [ 730.618390][T15771] ERROR: Out of memory at tomoyo_realpath_from_path. [ 730.788536][T15781] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 731.033963][T15791] netlink: 'syz.3.3387': attribute type 10 has an invalid length. [ 731.047820][T15791] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.3387'. [ 731.106960][T15791] openvswitch: netlink: Message has 4 unknown bytes. [ 732.015886][T15804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3391'. [ 732.903465][T15808] FAULT_INJECTION: forcing a failure. [ 732.903465][T15808] name fail_futex, interval 1, probability 0, space 0, times 1 [ 732.948001][T15808] CPU: 1 PID: 15808 Comm: syz.3.3394 Not tainted syzkaller #0 [ 732.955519][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.965590][T15808] Call Trace: [ 732.968879][T15808] [ 732.971823][T15808] dump_stack_lvl+0x18c/0x250 [ 732.976525][T15808] ? show_regs_print_info+0x20/0x20 [ 732.981740][T15808] ? load_image+0x420/0x420 [ 732.986269][T15808] ? __lock_acquire+0x1336/0x7d80 [ 732.991323][T15808] should_fail_ex+0x394/0x4c0 [ 732.996050][T15808] get_futex_key+0x16f/0x1030 [ 733.000768][T15808] ? futex_setup_timer+0xc0/0xc0 [ 733.005731][T15808] futex_wake+0x127/0x4f0 [ 733.010078][T15808] ? futex_wake_mark+0x150/0x150 [ 733.015044][T15808] do_futex+0x35d/0x3e0 [ 733.019214][T15808] ? __might_fault+0xaa/0x120 [ 733.023911][T15808] ? __ia32_sys_get_robust_list+0x110/0x110 [ 733.029819][T15808] ? __might_fault+0xc6/0x120 [ 733.034508][T15808] mm_release+0x184/0x3a0 [ 733.038857][T15808] ? exit_mm_release+0x30/0x30 [ 733.043629][T15808] ? lockdep_hardirqs_on+0x98/0x150 [ 733.048853][T15808] exit_mm+0xa4/0x340 [ 733.052859][T15808] ? sysctl_delayacct+0x220/0x220 [ 733.057894][T15808] ? do_exit+0x2530/0x2530 [ 733.062338][T15808] do_exit+0x909/0x2530 [ 733.066521][T15808] ? put_task_struct+0xc0/0xc0 [ 733.071307][T15808] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 733.077308][T15808] ? get_signal+0x100e/0x1390 [ 733.082012][T15808] ? lock_chain_count+0x20/0x20 [ 733.086883][T15808] do_group_exit+0x22d/0x2f0 [ 733.091490][T15808] ? lockdep_hardirqs_on+0x98/0x150 [ 733.096709][T15808] get_signal+0x12a6/0x1390 [ 733.101252][T15808] arch_do_signal_or_restart+0xc2/0x7b0 [ 733.106857][T15808] ? get_sigframe_size+0x20/0x20 [ 733.111823][T15808] ? ksys_write+0x201/0x260 [ 733.116343][T15808] ? exit_to_user_mode_loop+0x3b/0x110 [ 733.121824][T15808] exit_to_user_mode_loop+0x70/0x110 [ 733.127126][T15808] exit_to_user_mode_prepare+0xee/0x180 [ 733.132691][T15808] syscall_exit_to_user_mode+0x1a/0x50 [ 733.138169][T15808] do_syscall_64+0x61/0xb0 [ 733.142599][T15808] ? clear_bhb_loop+0x40/0x90 [ 733.147285][T15808] ? clear_bhb_loop+0x40/0x90 [ 733.151975][T15808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.157890][T15808] RIP: 0033:0x7fc12959e0d9 [ 733.162320][T15808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.181952][T15808] RSP: 002b:00007fc12a3f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.190384][T15808] RAX: fffffffffffffe00 RBX: 00007fc129826090 RCX: 00007fc12959e0d9 [ 733.198371][T15808] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000004 [ 733.206348][T15808] RBP: 00007fc12a3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 733.214326][T15808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.222304][T15808] R13: 00007fc129826128 R14: 00007fc129826090 R15: 00007ffcf28b2818 [ 733.230299][T15808] [ 733.264315][ T3490] wlan1: Trigger new scan to find an IBSS to join [ 733.288820][T15815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.318579][T15815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.517040][T15817] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 733.836475][T15828] netlink: 'syz.1.3400': attribute type 10 has an invalid length. [ 733.877877][T15828] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3400'. [ 733.887374][T15828] openvswitch: netlink: Message has 4 unknown bytes. [ 734.334613][T15841] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3403'. [ 734.426538][T15843] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3404'. [ 735.009643][T15847] FAULT_INJECTION: forcing a failure. [ 735.009643][T15847] name failslab, interval 1, probability 0, space 0, times 0 [ 735.037853][T15847] CPU: 0 PID: 15847 Comm: syz.1.3406 Not tainted syzkaller #0 [ 735.045375][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.055441][T15847] Call Trace: [ 735.058722][T15847] [ 735.061649][T15847] dump_stack_lvl+0x18c/0x250 [ 735.066326][T15847] ? show_regs_print_info+0x20/0x20 [ 735.071519][T15847] ? load_image+0x420/0x420 [ 735.076055][T15847] ? __might_sleep+0xe0/0xe0 [ 735.080646][T15847] ? __lock_acquire+0x7d80/0x7d80 [ 735.085683][T15847] should_fail_ex+0x394/0x4c0 [ 735.090363][T15847] should_failslab+0x9/0x20 [ 735.094868][T15847] slab_pre_alloc_hook+0x59/0x300 [ 735.099899][T15847] ? kvmalloc_node+0x70/0x180 [ 735.104574][T15847] ? kvmalloc_node+0x70/0x180 [ 735.109247][T15847] __kmem_cache_alloc_node+0x53/0x250 [ 735.114631][T15847] ? kvmalloc_node+0x70/0x180 [ 735.119302][T15847] __kmalloc_node+0xa6/0x240 [ 735.123893][T15847] kvmalloc_node+0x70/0x180 [ 735.128396][T15847] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 735.133779][T15847] ? bpf_dispatcher_xdp+0x800/0x1000 [ 735.139061][T15847] ? bpf_dispatcher_xdp+0x800/0x1000 [ 735.144343][T15847] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 735.150235][T15847] ? xdp_convert_md_to_buff+0x330/0x330 [ 735.155799][T15847] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 735.162040][T15847] ? _copy_from_user+0xa5/0xe0 [ 735.166801][T15847] ? bpf_test_init+0x119/0x140 [ 735.171557][T15847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 735.177015][T15847] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 735.182389][T15847] ? __lock_acquire+0x7d80/0x7d80 [ 735.187417][T15847] ? dev_put+0x80/0x80 [ 735.191490][T15847] ? dev_put+0x80/0x80 [ 735.195555][T15847] bpf_prog_test_run+0x31f/0x390 [ 735.200489][T15847] __sys_bpf+0x49d/0x890 [ 735.204733][T15847] ? bpf_link_show_fdinfo+0x390/0x390 [ 735.210119][T15847] ? lock_chain_count+0x20/0x20 [ 735.214979][T15847] __x64_sys_bpf+0x7c/0x90 [ 735.219393][T15847] do_syscall_64+0x55/0xb0 [ 735.223807][T15847] ? clear_bhb_loop+0x40/0x90 [ 735.228484][T15847] ? clear_bhb_loop+0x40/0x90 [ 735.233157][T15847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.239087][T15847] RIP: 0033:0x7f278cb9e0d9 [ 735.243516][T15847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.263120][T15847] RSP: 002b:00007f278db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.271528][T15847] RAX: ffffffffffffffda RBX: 00007f278ce25fa0 RCX: 00007f278cb9e0d9 [ 735.279498][T15847] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 735.287463][T15847] RBP: 00007f278db37090 R08: 0000000000000000 R09: 0000000000000000 [ 735.295428][T15847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.303397][T15847] R13: 00007f278ce26038 R14: 00007f278ce25fa0 R15: 00007ffc900733b8 [ 735.311379][T15847] [ 735.450689][T15849] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 736.038972][T15864] FAULT_INJECTION: forcing a failure. [ 736.038972][T15864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.072334][T15864] CPU: 1 PID: 15864 Comm: syz.0.3413 Not tainted syzkaller #0 [ 736.079856][T15864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.089932][T15864] Call Trace: [ 736.093225][T15864] [ 736.096169][T15864] dump_stack_lvl+0x18c/0x250 [ 736.100876][T15864] ? show_regs_print_info+0x20/0x20 [ 736.106097][T15864] ? load_image+0x420/0x420 [ 736.110632][T15864] ? __might_fault+0xaa/0x120 [ 736.115333][T15864] ? __lock_acquire+0x7d80/0x7d80 [ 736.120388][T15864] should_fail_ex+0x394/0x4c0 [ 736.125097][T15864] _copy_to_user+0x2f/0xa0 [ 736.129540][T15864] bpf_test_finish+0x25a/0x650 [ 736.134348][T15864] ? dst_hold+0x70/0x70 [ 736.138526][T15864] ? convert_skb_to___skb+0x420/0x420 [ 736.143915][T15864] ? bpf_test_init+0x119/0x140 [ 736.148680][T15864] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 736.154052][T15864] ? __lock_acquire+0x7d80/0x7d80 [ 736.159084][T15864] ? dev_put+0x80/0x80 [ 736.163161][T15864] ? dev_put+0x80/0x80 [ 736.167225][T15864] bpf_prog_test_run+0x31f/0x390 [ 736.172161][T15864] __sys_bpf+0x49d/0x890 [ 736.176404][T15864] ? bpf_link_show_fdinfo+0x390/0x390 [ 736.181784][T15864] ? lock_chain_count+0x20/0x20 [ 736.186638][T15864] __x64_sys_bpf+0x7c/0x90 [ 736.191050][T15864] do_syscall_64+0x55/0xb0 [ 736.195464][T15864] ? clear_bhb_loop+0x40/0x90 [ 736.200141][T15864] ? clear_bhb_loop+0x40/0x90 [ 736.204815][T15864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.210704][T15864] RIP: 0033:0x7f3db0f9e0d9 [ 736.215113][T15864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.234717][T15864] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.243126][T15864] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 736.251090][T15864] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 736.259060][T15864] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 736.267024][T15864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.274995][T15864] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 736.282975][T15864] [ 737.520554][T15879] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 737.579060][T15887] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3419'. [ 738.088034][ T3490] wlan1: Trigger new scan to find an IBSS to join [ 738.805559][T15905] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3425'. [ 739.509464][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3423'. [ 739.669103][T15907] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 739.992468][T15916] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 740.087997][T15009] wlan1: Trigger new scan to find an IBSS to join [ 740.154973][T15925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3431'. [ 741.592479][T15949] FAULT_INJECTION: forcing a failure. [ 741.592479][T15949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.626846][T15947] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3439'. [ 741.638839][T15949] CPU: 0 PID: 15949 Comm: syz.1.3438 Not tainted syzkaller #0 [ 741.646351][T15949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.656433][T15949] Call Trace: [ 741.659737][T15949] [ 741.662702][T15949] dump_stack_lvl+0x18c/0x250 [ 741.667416][T15949] ? show_regs_print_info+0x20/0x20 [ 741.672646][T15949] ? load_image+0x420/0x420 [ 741.677187][T15949] ? __might_fault+0xaa/0x120 [ 741.681896][T15949] ? __lock_acquire+0x7d80/0x7d80 [ 741.686951][T15949] should_fail_ex+0x394/0x4c0 [ 741.691662][T15949] _copy_from_user+0x2f/0xe0 [ 741.696276][T15949] ___sys_sendmsg+0x1c7/0x360 [ 741.700985][T15949] ? __sys_sendmsg+0x2b0/0x2b0 [ 741.705805][T15949] ? __lock_acquire+0x7d80/0x7d80 [ 741.710882][T15949] __se_sys_sendmsg+0x1d0/0x2c0 [ 741.715772][T15949] ? __x64_sys_sendmsg+0x80/0x80 [ 741.720754][T15949] ? lockdep_hardirqs_on+0x98/0x150 [ 741.725993][T15949] do_syscall_64+0x55/0xb0 [ 741.730435][T15949] ? clear_bhb_loop+0x40/0x90 [ 741.735137][T15949] ? clear_bhb_loop+0x40/0x90 [ 741.739844][T15949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.745769][T15949] RIP: 0033:0x7f278cb9e0d9 [ 741.750203][T15949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.769814][T15949] RSP: 002b:00007f278db16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.778236][T15949] RAX: ffffffffffffffda RBX: 00007f278ce26090 RCX: 00007f278cb9e0d9 [ 741.786219][T15949] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 741.794197][T15949] RBP: 00007f278db16090 R08: 0000000000000000 R09: 0000000000000000 [ 741.802164][T15949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.810131][T15949] R13: 00007f278ce26128 R14: 00007f278ce26090 R15: 00007ffc900733b8 [ 741.818145][T15949] [ 742.087964][T15023] wlan1: Trigger new scan to find an IBSS to join [ 742.089128][ T3490] wlan1: Trigger new scan to find an IBSS to join [ 742.354299][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3440'. [ 742.564708][T15957] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 743.133283][T15040] wlan1: Creating new IBSS network, BSSID a6:35:5c:de:12:18 [ 743.569010][T15964] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 743.883868][T15978] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3447'. [ 744.373656][T15983] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3450'. [ 745.049808][T15040] wlan1: Trigger new scan to find an IBSS to join [ 745.750623][T15993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3454'. [ 745.878587][T15995] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 746.077993][T15040] wlan1: Creating new IBSS network, BSSID 1e:dc:de:c2:12:49 [ 746.088982][T15023] wlan1: Trigger new scan to find an IBSS to join [ 746.359553][T16003] FAULT_INJECTION: forcing a failure. [ 746.359553][T16003] name failslab, interval 1, probability 0, space 0, times 0 [ 746.435924][T16003] CPU: 0 PID: 16003 Comm: syz.1.3456 Not tainted syzkaller #0 [ 746.443448][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.453530][T16003] Call Trace: [ 746.456818][T16003] [ 746.459771][T16003] dump_stack_lvl+0x18c/0x250 [ 746.464477][T16003] ? show_regs_print_info+0x20/0x20 [ 746.469700][T16003] ? load_image+0x420/0x420 [ 746.474237][T16003] ? verify_lock_unused+0x140/0x140 [ 746.479466][T16003] should_fail_ex+0x394/0x4c0 [ 746.484168][T16003] should_failslab+0x9/0x20 [ 746.488692][T16003] slab_pre_alloc_hook+0x59/0x300 [ 746.493750][T16003] kmem_cache_alloc+0x5a/0x2c0 [ 746.498541][T16003] ? skb_clone+0x1eb/0x370 [ 746.502981][T16003] skb_clone+0x1eb/0x370 [ 746.507249][T16003] __netlink_deliver_tap+0x411/0x7f0 [ 746.512578][T16003] ? netlink_deliver_tap+0x2e/0x1b0 [ 746.517804][T16003] netlink_deliver_tap+0x19c/0x1b0 [ 746.522941][T16003] netlink_unicast+0x77b/0x930 [ 746.527741][T16003] netlink_sendmsg+0x8d0/0xbf0 [ 746.532533][T16003] ? netlink_getsockopt+0x590/0x590 [ 746.537751][T16003] ? apparmor_socket_sendmsg+0x8e/0x330 [ 746.543317][T16003] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 746.548679][T16003] ? security_socket_sendmsg+0x80/0xa0 [ 746.554155][T16003] ? netlink_getsockopt+0x590/0x590 [ 746.559376][T16003] ____sys_sendmsg+0x61b/0x980 [ 746.564171][T16003] ? __asan_memset+0x22/0x40 [ 746.568786][T16003] ? __sys_sendmsg_sock+0x30/0x30 [ 746.573828][T16003] ? __import_iovec+0x5f2/0x850 [ 746.578713][T16003] ? import_iovec+0x73/0xa0 [ 746.583247][T16003] ___sys_sendmsg+0x2a6/0x360 [ 746.587943][T16003] ? get_pid_task+0x20/0x1e0 [ 746.592563][T16003] ? __sys_sendmsg+0x2b0/0x2b0 [ 746.597368][T16003] ? __lock_acquire+0x7d80/0x7d80 [ 746.602437][T16003] __se_sys_sendmsg+0x1d0/0x2c0 [ 746.607316][T16003] ? __x64_sys_sendmsg+0x80/0x80 [ 746.612298][T16003] ? lockdep_hardirqs_on+0x98/0x150 [ 746.617533][T16003] do_syscall_64+0x55/0xb0 [ 746.621969][T16003] ? clear_bhb_loop+0x40/0x90 [ 746.626659][T16003] ? clear_bhb_loop+0x40/0x90 [ 746.631358][T16003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.637271][T16003] RIP: 0033:0x7f278cb9e0d9 [ 746.641710][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.661342][T16003] RSP: 002b:00007f278db37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.669784][T16003] RAX: ffffffffffffffda RBX: 00007f278ce25fa0 RCX: 00007f278cb9e0d9 [ 746.677776][T16003] RDX: 0000000000098010 RSI: 0000200000000240 RDI: 0000000000000003 [ 746.685776][T16003] RBP: 00007f278db37090 R08: 0000000000000000 R09: 0000000000000000 [ 746.693771][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.701770][T16003] R13: 00007f278ce26038 R14: 00007f278ce25fa0 R15: 00007ffc900733b8 [ 746.709779][T16003] [ 747.270332][T16017] netlink: 'syz.0.3460': attribute type 6 has an invalid length. [ 747.293823][T16017] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3460'. [ 747.345156][T16019] netlink: 'syz.2.3461': attribute type 10 has an invalid length. [ 747.385874][T16019] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3461'. [ 747.472668][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.479111][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.523313][T16017] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 747.577972][T16017] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 747.615982][T16028] netlink: 'syz.1.3463': attribute type 10 has an invalid length. [ 747.637246][T16028] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3463'. [ 747.659785][T16028] openvswitch: netlink: Message has 4 unknown bytes. [ 748.096034][T15023] wlan1: Trigger new scan to find an IBSS to join [ 748.462166][T16040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3466'. [ 749.355242][T16055] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3470'. [ 750.114597][T16058] netlink: 'syz.0.3473': attribute type 10 has an invalid length. [ 750.147984][T16058] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3473'. [ 750.264643][T16065] netlink: 'syz.3.3474': attribute type 6 has an invalid length. [ 750.296337][T16065] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3474'. [ 750.418565][T16064] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 750.607867][T16075] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3477'. [ 750.629865][T16063] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 750.698009][T16071] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 750.744429][T16071] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 751.224661][T16085] netlink: 'syz.1.3482': attribute type 10 has an invalid length. [ 751.260970][T16085] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3482'. [ 751.348461][T16087] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 751.493208][T16095] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3481'. [ 752.123685][T16099] nr0: port 1(hsr0) entered blocking state [ 752.165223][T16099] nr0: port 1(hsr0) entered disabled state [ 752.181220][T16099] hsr0: entered allmulticast mode [ 752.186301][T16099] hsr_slave_0: entered allmulticast mode [ 752.227810][T16099] hsr_slave_1: entered allmulticast mode [ 752.253742][T16099] hsr0: entered promiscuous mode [ 752.305230][T16105] netlink: 'syz.1.3486': attribute type 10 has an invalid length. [ 752.350349][T16105] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3486'. [ 752.426860][T16101] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 752.518580][T16104] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 752.722619][T16116] netlink: 'syz.1.3491': attribute type 6 has an invalid length. [ 752.739704][T16116] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3491'. [ 753.000976][T16126] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 753.057930][T15023] wlan1: Trigger new scan to find an IBSS to join [ 753.067051][T16126] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 753.117489][T16127] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3494'. [ 753.137899][T15023] wlan1: Trigger new scan to find an IBSS to join [ 753.764737][T16132] netlink: 'syz.2.3495': attribute type 10 has an invalid length. [ 753.785771][T16132] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3495'. [ 755.754239][T16145] __nla_validate_parse: 1 callbacks suppressed [ 755.754256][T16145] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3496'. [ 755.867926][T16138] netlink: 'syz.1.3497': attribute type 1 has an invalid length. [ 756.074076][T16153] netlink: 'syz.2.3500': attribute type 41 has an invalid length. [ 756.100130][ T3490] wlan1: Trigger new scan to find an IBSS to join [ 756.575256][T16164] netlink: 'syz.0.3507': attribute type 10 has an invalid length. [ 756.612556][T16164] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3507'. [ 756.870910][T16171] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3508'. [ 757.157629][T16178] netlink: 'syz.1.3510': attribute type 10 has an invalid length. [ 757.209738][T16178] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3510'. [ 757.257384][T16178] openvswitch: netlink: Message has 4 unknown bytes. [ 757.356996][T16181] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3511'. [ 758.088716][T15023] wlan1: Trigger new scan to find an IBSS to join [ 758.381019][T16190] FAULT_INJECTION: forcing a failure. [ 758.381019][T16190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.454770][T16187] netlink: 'syz.2.3513': attribute type 1 has an invalid length. [ 758.458634][T16190] CPU: 1 PID: 16190 Comm: syz.3.3515 Not tainted syzkaller #0 [ 758.470017][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 758.480093][T16190] Call Trace: [ 758.483386][T16190] [ 758.486329][T16190] dump_stack_lvl+0x18c/0x250 [ 758.491032][T16190] ? show_regs_print_info+0x20/0x20 [ 758.496254][T16190] ? load_image+0x420/0x420 [ 758.500791][T16190] ? __lock_acquire+0x7d80/0x7d80 [ 758.505850][T16190] ? snprintf+0xe9/0x140 [ 758.510133][T16190] should_fail_ex+0x394/0x4c0 [ 758.513655][T16193] netlink: 'syz.1.3517': attribute type 10 has an invalid length. [ 758.514832][T16190] _copy_to_user+0x2f/0xa0 [ 758.514863][T16190] simple_read_from_buffer+0xe7/0x150 [ 758.532470][T16190] proc_fail_nth_read+0x1e8/0x260 [ 758.537528][T16190] ? proc_fault_inject_write+0x360/0x360 [ 758.539421][T16193] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3517'. [ 758.543178][T16190] ? fsnotify_perm+0x271/0x5e0 [ 758.543215][T16190] ? proc_fault_inject_write+0x360/0x360 [ 758.543243][T16190] vfs_read+0x298/0x990 [ 758.543277][T16190] ? kernel_read+0x1e0/0x1e0 [ 758.571381][T16190] ? __fget_files+0x28/0x460 [ 758.576001][T16190] ? __fget_files+0x3fc/0x460 [ 758.580710][T16190] ? __fdget_pos+0x2a3/0x330 [ 758.585328][T16190] ? ksys_read+0x74/0x260 [ 758.589685][T16190] ksys_read+0x151/0x260 [ 758.593957][T16190] ? vfs_write+0x9a0/0x9a0 [ 758.598405][T16190] ? lockdep_hardirqs_on+0x98/0x150 [ 758.603628][T16190] do_syscall_64+0x55/0xb0 [ 758.608064][T16190] ? clear_bhb_loop+0x40/0x90 [ 758.612761][T16190] ? clear_bhb_loop+0x40/0x90 [ 758.617461][T16190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.623406][T16190] RIP: 0033:0x7fc12955e90e [ 758.627840][T16190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 758.647474][T16190] RSP: 002b:00007fc12a414fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 758.655913][T16190] RAX: ffffffffffffffda RBX: 00007fc12a4156c0 RCX: 00007fc12955e90e [ 758.663909][T16190] RDX: 000000000000000f RSI: 00007fc12a4150a0 RDI: 0000000000000004 [ 758.671904][T16190] RBP: 00007fc12a415090 R08: 0000000000000000 R09: 0000000000000000 [ 758.679896][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.687888][T16190] R13: 00007fc129826038 R14: 00007fc129825fa0 R15: 00007ffcf28b2818 [ 758.695897][T16190] [ 759.061217][T16205] netlink: 'syz.1.3520': attribute type 10 has an invalid length. [ 759.071232][T16204] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3519'. [ 759.093475][T16205] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3520'. [ 759.133926][T15023] wlan1: Trigger new scan to find an IBSS to join [ 759.134127][T16205] openvswitch: netlink: Message has 4 unknown bytes. [ 759.445299][T16211] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3521'. [ 759.810389][T15023] wlan1: Creating new IBSS network, BSSID 2a:00:15:30:18:77 [ 759.893450][T16215] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3530'. [ 759.936616][T16218] netlink: 'syz.2.3522': attribute type 10 has an invalid length. [ 759.950955][T16218] openvswitch: netlink: Message has 4 unknown bytes. [ 760.109491][ T3490] wlan1: Creating new IBSS network, BSSID 42:ee:bb:0f:d1:02 [ 760.848822][T15023] wlan1: Creating new IBSS network, BSSID 72:5c:fc:81:3e:e1 [ 760.882165][T16231] __nla_validate_parse: 1 callbacks suppressed [ 760.882182][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3524'. [ 761.166621][T16239] netlink: 'syz.0.3529': attribute type 10 has an invalid length. [ 761.228034][T16239] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3529'. [ 761.416187][T16246] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3533'. [ 761.708021][T16258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3534'. [ 761.850466][T16256] netlink: 'syz.2.3544': attribute type 10 has an invalid length. [ 762.534719][T16256] hsr0: left allmulticast mode [ 762.540075][T16256] hsr_slave_0: left allmulticast mode [ 762.555731][T16256] hsr_slave_1: left allmulticast mode [ 762.561351][T16256] hsr0: left promiscuous mode [ 762.568977][T16256] nr0: port 1(hsr0) entered disabled state [ 762.629466][T16256] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 762.704077][T16265] netlink: 'syz.0.3537': attribute type 10 has an invalid length. [ 762.739843][T16265] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.3537'. [ 762.760402][T16265] openvswitch: netlink: Message has 4 unknown bytes. [ 763.082823][T16279] netlink: 'syz.2.3542': attribute type 10 has an invalid length. [ 763.103798][T16279] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3542'. [ 763.622539][T16283] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3545'. [ 764.386505][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3541'. [ 764.484118][T16299] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3546'. [ 766.119248][T16317] netlink: 'syz.2.3552': attribute type 21 has an invalid length. [ 766.133217][T16317] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3552'. [ 766.161560][T16325] netlink: 'syz.0.3554': attribute type 10 has an invalid length. [ 766.196255][T16325] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3554'. [ 769.276397][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'. [ 769.410829][T16351] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3561'. [ 770.543851][T16368] FAULT_INJECTION: forcing a failure. [ 770.543851][T16368] name failslab, interval 1, probability 0, space 0, times 0 [ 770.552968][T16364] netlink: 'syz.2.3566': attribute type 10 has an invalid length. [ 770.575508][T16364] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3566'. [ 770.585749][T16368] CPU: 1 PID: 16368 Comm: syz.0.3567 Not tainted syzkaller #0 [ 770.593248][T16368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 770.603329][T16368] Call Trace: [ 770.606624][T16368] [ 770.609570][T16368] dump_stack_lvl+0x18c/0x250 [ 770.614278][T16368] ? show_regs_print_info+0x20/0x20 [ 770.619499][T16368] ? load_image+0x420/0x420 [ 770.624037][T16368] ? __might_sleep+0xe0/0xe0 [ 770.628646][T16368] ? __lock_acquire+0x7d80/0x7d80 [ 770.633677][T16368] should_fail_ex+0x394/0x4c0 [ 770.638366][T16368] should_failslab+0x9/0x20 [ 770.642876][T16368] slab_pre_alloc_hook+0x59/0x300 [ 770.647908][T16368] ? kvmalloc_node+0x70/0x180 [ 770.652584][T16368] ? kvmalloc_node+0x70/0x180 [ 770.657253][T16368] __kmem_cache_alloc_node+0x53/0x250 [ 770.662627][T16368] ? kvmalloc_node+0x70/0x180 [ 770.667297][T16368] __kmalloc_node+0xa6/0x240 [ 770.671891][T16368] kvmalloc_node+0x70/0x180 [ 770.676390][T16368] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 770.681764][T16368] ? 0xffffffffa0004240 [ 770.685911][T16368] ? 0xffffffffa0004240 [ 770.690060][T16368] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 770.695956][T16368] ? xdp_convert_md_to_buff+0x330/0x330 [ 770.701518][T16368] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 770.707756][T16368] ? _copy_from_user+0xa5/0xe0 [ 770.712513][T16368] ? bpf_test_init+0x119/0x140 [ 770.717268][T16368] ? xdp_convert_md_to_buff+0x5b/0x330 [ 770.722721][T16368] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 770.728089][T16368] ? __lock_acquire+0x7d80/0x7d80 [ 770.733116][T16368] ? dev_put+0x80/0x80 [ 770.737185][T16368] ? dev_put+0x80/0x80 [ 770.741249][T16368] bpf_prog_test_run+0x31f/0x390 [ 770.746182][T16368] __sys_bpf+0x49d/0x890 [ 770.750417][T16368] ? bpf_link_show_fdinfo+0x390/0x390 [ 770.755794][T16368] ? lock_chain_count+0x20/0x20 [ 770.760642][T16368] __x64_sys_bpf+0x7c/0x90 [ 770.765050][T16368] do_syscall_64+0x55/0xb0 [ 770.769460][T16368] ? clear_bhb_loop+0x40/0x90 [ 770.774135][T16368] ? clear_bhb_loop+0x40/0x90 [ 770.778807][T16368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.784690][T16368] RIP: 0033:0x7f3db0f9e0d9 [ 770.789125][T16368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.808746][T16368] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 770.817172][T16368] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 770.825133][T16368] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 770.833095][T16368] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 770.841055][T16368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.849019][T16368] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 770.856994][T16368] [ 770.863939][T16367] FAULT_INJECTION: forcing a failure. [ 770.863939][T16367] name failslab, interval 1, probability 0, space 0, times 0 [ 770.900013][T16367] CPU: 1 PID: 16367 Comm: syz.3.3568 Not tainted syzkaller #0 [ 770.907529][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 770.917609][T16367] Call Trace: [ 770.920905][T16367] [ 770.923857][T16367] dump_stack_lvl+0x18c/0x250 [ 770.928566][T16367] ? kasan_set_track+0x4e/0x70 [ 770.933330][T16367] ? ____kasan_slab_free+0x126/0x1f0 [ 770.938610][T16367] ? show_regs_print_info+0x20/0x20 [ 770.943801][T16367] ? load_image+0x420/0x420 [ 770.948299][T16367] ? do_syscall_64+0x55/0xb0 [ 770.952892][T16367] should_fail_ex+0x394/0x4c0 [ 770.957572][T16367] should_failslab+0x9/0x20 [ 770.962071][T16367] slab_pre_alloc_hook+0x59/0x300 [ 770.967094][T16367] kmem_cache_alloc_node+0x5e/0x310 [ 770.972291][T16367] ? __alloc_skb+0x103/0x2c0 [ 770.976880][T16367] __alloc_skb+0x103/0x2c0 [ 770.981293][T16367] tipc_msg_create+0x4a/0x4c0 [ 770.985970][T16367] ? tipc_own_addr+0x45/0x2a0 [ 770.990643][T16367] tipc_group_proto_xmit+0xce/0x790 [ 770.995843][T16367] tipc_group_delete+0x15f/0x4c0 [ 771.000785][T16367] ? tipc_group_update_member+0x360/0x360 [ 771.006511][T16367] ? tipc_group_self+0x26/0x1c0 [ 771.011358][T16367] tipc_sk_leave+0x154/0x4d0 [ 771.015947][T16367] ? __tipc_shutdown+0x1590/0x1590 [ 771.021051][T16367] ? _local_bh_enable+0xa0/0xa0 [ 771.025902][T16367] tipc_release+0x333/0x20e0 [ 771.030502][T16367] ? ima_get_current_hash_algo+0x10/0x10 [ 771.036136][T16367] ? tipc_sock_destruct+0x180/0x180 [ 771.041324][T16367] ? down_write+0x16e/0x200 [ 771.045822][T16367] ? down_read_killable+0x340/0x340 [ 771.051023][T16367] sock_close+0xa7/0x210 [ 771.055263][T16367] ? sock_mmap+0xa0/0xa0 [ 771.059499][T16367] __fput+0x221/0x940 [ 771.063483][T16367] __se_sys_close+0x15c/0x1e0 [ 771.068157][T16367] do_syscall_64+0x55/0xb0 [ 771.072564][T16367] ? clear_bhb_loop+0x40/0x90 [ 771.077232][T16367] ? clear_bhb_loop+0x40/0x90 [ 771.081907][T16367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.087791][T16367] RIP: 0033:0x7fc12959e0d9 [ 771.092201][T16367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.111803][T16367] RSP: 002b:00007fc12a415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 771.120211][T16367] RAX: ffffffffffffffda RBX: 00007fc129825fa0 RCX: 00007fc12959e0d9 [ 771.128176][T16367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 771.136495][T16367] RBP: 00007fc12a415090 R08: 0000000000000000 R09: 0000000000000000 [ 771.144469][T16367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.152454][T16367] R13: 00007fc129826038 R14: 00007fc129825fa0 R15: 00007ffcf28b2818 [ 771.160432][T16367] [ 771.181773][T16370] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3569'. [ 771.308424][T16375] FAULT_INJECTION: forcing a failure. [ 771.308424][T16375] name failslab, interval 1, probability 0, space 0, times 0 [ 771.327964][T16375] CPU: 1 PID: 16375 Comm: syz.0.3571 Not tainted syzkaller #0 [ 771.335577][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 771.345628][T16375] Call Trace: [ 771.348903][T16375] [ 771.351827][T16375] dump_stack_lvl+0x18c/0x250 [ 771.356517][T16375] ? show_regs_print_info+0x20/0x20 [ 771.361709][T16375] ? load_image+0x420/0x420 [ 771.366212][T16375] ? verify_lock_unused+0x140/0x140 [ 771.371415][T16375] should_fail_ex+0x394/0x4c0 [ 771.376106][T16375] should_failslab+0x9/0x20 [ 771.380608][T16375] slab_pre_alloc_hook+0x59/0x300 [ 771.385639][T16375] kmem_cache_alloc+0x5a/0x2c0 [ 771.390401][T16375] ? skb_clone+0x1eb/0x370 [ 771.394816][T16375] skb_clone+0x1eb/0x370 [ 771.399057][T16375] __netlink_deliver_tap+0x411/0x7f0 [ 771.404343][T16375] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.409533][T16375] netlink_deliver_tap+0x19c/0x1b0 [ 771.414666][T16375] netlink_unicast+0x77b/0x930 [ 771.419437][T16375] netlink_sendmsg+0x8d0/0xbf0 [ 771.424200][T16375] ? netlink_getsockopt+0x590/0x590 [ 771.429390][T16375] ? apparmor_socket_sendmsg+0x8e/0x330 [ 771.434931][T16375] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 771.440212][T16375] ? security_socket_sendmsg+0x80/0xa0 [ 771.445662][T16375] ? netlink_getsockopt+0x590/0x590 [ 771.450854][T16375] ____sys_sendmsg+0x61b/0x980 [ 771.455641][T16375] ? __asan_memset+0x22/0x40 [ 771.460225][T16375] ? __sys_sendmsg_sock+0x30/0x30 [ 771.465238][T16375] ? __import_iovec+0x5f2/0x850 [ 771.470195][T16375] ? import_iovec+0x73/0xa0 [ 771.474697][T16375] ___sys_sendmsg+0x2a6/0x360 [ 771.479368][T16375] ? get_pid_task+0x20/0x1e0 [ 771.483957][T16375] ? __sys_sendmsg+0x2b0/0x2b0 [ 771.488726][T16375] ? __lock_acquire+0x7d80/0x7d80 [ 771.493883][T16375] __se_sys_sendmsg+0x1d0/0x2c0 [ 771.498731][T16375] ? __x64_sys_sendmsg+0x80/0x80 [ 771.503672][T16375] ? lockdep_hardirqs_on+0x98/0x150 [ 771.508871][T16375] do_syscall_64+0x55/0xb0 [ 771.513278][T16375] ? clear_bhb_loop+0x40/0x90 [ 771.517964][T16375] ? clear_bhb_loop+0x40/0x90 [ 771.522634][T16375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.528543][T16375] RIP: 0033:0x7f3db0f9e0d9 [ 771.532953][T16375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.552552][T16375] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.560960][T16375] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 771.568927][T16375] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 771.576889][T16375] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 771.584857][T16375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.592826][T16375] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 771.600823][T16375] [ 771.632381][T16375] netlink: 'syz.0.3571': attribute type 7 has an invalid length. [ 771.801762][T16381] netlink: 'syz.1.3573': attribute type 10 has an invalid length. [ 771.822379][T16381] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3573'. [ 771.835461][T16381] openvswitch: netlink: Message has 4 unknown bytes. [ 772.065443][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'. [ 772.138555][T16394] netlink: 'syz.0.3577': attribute type 7 has an invalid length. [ 772.267117][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'. [ 772.312081][T16400] FAULT_INJECTION: forcing a failure. [ 772.312081][T16400] name failslab, interval 1, probability 0, space 0, times 0 [ 772.325368][T16400] CPU: 1 PID: 16400 Comm: syz.0.3579 Not tainted syzkaller #0 [ 772.332862][T16400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.342948][T16400] Call Trace: [ 772.346247][T16400] [ 772.349197][T16400] dump_stack_lvl+0x18c/0x250 [ 772.353907][T16400] ? show_regs_print_info+0x20/0x20 [ 772.359129][T16400] ? load_image+0x420/0x420 [ 772.363666][T16400] ? verify_lock_unused+0x140/0x140 [ 772.368901][T16400] should_fail_ex+0x394/0x4c0 [ 772.373614][T16400] should_failslab+0x9/0x20 [ 772.378148][T16400] slab_pre_alloc_hook+0x59/0x300 [ 772.383205][T16400] kmem_cache_alloc+0x5a/0x2c0 [ 772.387997][T16400] ? skb_clone+0x1eb/0x370 [ 772.392448][T16400] skb_clone+0x1eb/0x370 [ 772.396721][T16400] __netlink_deliver_tap+0x411/0x7f0 [ 772.402037][T16400] ? netlink_deliver_tap+0x2e/0x1b0 [ 772.407233][T16400] netlink_deliver_tap+0x19c/0x1b0 [ 772.412344][T16400] netlink_unicast+0x77b/0x930 [ 772.417116][T16400] netlink_sendmsg+0x8d0/0xbf0 [ 772.421880][T16400] ? netlink_getsockopt+0x590/0x590 [ 772.427071][T16400] ? apparmor_socket_sendmsg+0x8e/0x330 [ 772.432612][T16400] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 772.437890][T16400] ? security_socket_sendmsg+0x80/0xa0 [ 772.443337][T16400] ? netlink_getsockopt+0x590/0x590 [ 772.448528][T16400] ____sys_sendmsg+0x61b/0x980 [ 772.453294][T16400] ? __asan_memset+0x22/0x40 [ 772.457879][T16400] ? __sys_sendmsg_sock+0x30/0x30 [ 772.462897][T16400] ? __import_iovec+0x5f2/0x850 [ 772.467752][T16400] ? import_iovec+0x73/0xa0 [ 772.472260][T16400] ___sys_sendmsg+0x2a6/0x360 [ 772.476930][T16400] ? get_pid_task+0x20/0x1e0 [ 772.481519][T16400] ? __sys_sendmsg+0x2b0/0x2b0 [ 772.486291][T16400] ? __lock_acquire+0x7d80/0x7d80 [ 772.491326][T16400] __se_sys_sendmsg+0x1d0/0x2c0 [ 772.496173][T16400] ? __x64_sys_sendmsg+0x80/0x80 [ 772.501115][T16400] ? lockdep_hardirqs_on+0x98/0x150 [ 772.506314][T16400] do_syscall_64+0x55/0xb0 [ 772.510722][T16400] ? clear_bhb_loop+0x40/0x90 [ 772.515396][T16400] ? clear_bhb_loop+0x40/0x90 [ 772.520065][T16400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.525950][T16400] RIP: 0033:0x7f3db0f9e0d9 [ 772.530381][T16400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.549982][T16400] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.558392][T16400] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 772.566359][T16400] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 772.574320][T16400] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 772.582285][T16400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.590253][T16400] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 772.598233][T16400] [ 772.607846][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3579'. [ 772.674821][T16401] netlink: 'syz.1.3580': attribute type 10 has an invalid length. [ 772.696544][T16401] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3580'. [ 772.910976][T16413] netlink: 'syz.0.3585': attribute type 10 has an invalid length. [ 772.919026][T16413] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.3585'. [ 772.963413][T16405] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 772.990057][T16416] FAULT_INJECTION: forcing a failure. [ 772.990057][T16416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.013501][T16413] openvswitch: netlink: Message has 4 unknown bytes. [ 773.177937][T16416] CPU: 1 PID: 16416 Comm: syz.1.3584 Not tainted syzkaller #0 [ 773.185461][T16416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 773.195618][T16416] Call Trace: [ 773.198914][T16416] [ 773.201859][T16416] dump_stack_lvl+0x18c/0x250 [ 773.206566][T16416] ? show_regs_print_info+0x20/0x20 [ 773.211785][T16416] ? load_image+0x420/0x420 [ 773.216311][T16416] ? __might_fault+0xaa/0x120 [ 773.221002][T16416] ? __lock_acquire+0x7d80/0x7d80 [ 773.226042][T16416] ? __virt_addr_valid+0x10c/0x380 [ 773.231174][T16416] should_fail_ex+0x394/0x4c0 [ 773.235872][T16416] _copy_from_user+0x2f/0xe0 [ 773.240479][T16416] btf_new_fd+0x366/0x9e0 [ 773.244834][T16416] ? bpf_btf_show_fdinfo+0x80/0x80 [ 773.249966][T16416] ? capable+0x88/0xe0 [ 773.254060][T16416] __sys_bpf+0x670/0x890 [ 773.258319][T16416] ? bpf_link_show_fdinfo+0x390/0x390 [ 773.263727][T16416] ? lock_chain_count+0x20/0x20 [ 773.268610][T16416] __x64_sys_bpf+0x7c/0x90 [ 773.273042][T16416] do_syscall_64+0x55/0xb0 [ 773.277558][T16416] ? clear_bhb_loop+0x40/0x90 [ 773.282249][T16416] ? clear_bhb_loop+0x40/0x90 [ 773.286941][T16416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.292858][T16416] RIP: 0033:0x7f278cb9e0d9 [ 773.297285][T16416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.316917][T16416] RSP: 002b:00007f278db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 773.325355][T16416] RAX: ffffffffffffffda RBX: 00007f278ce25fa0 RCX: 00007f278cb9e0d9 [ 773.333341][T16416] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 773.341332][T16416] RBP: 00007f278db37090 R08: 0000000000000000 R09: 0000000000000000 [ 773.349318][T16416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.357307][T16416] R13: 00007f278ce26038 R14: 00007f278ce25fa0 R15: 00007ffc900733b8 [ 773.365308][T16416] [ 775.019463][T16438] netlink: 'syz.2.3593': attribute type 10 has an invalid length. [ 775.028088][T16438] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3593'. [ 775.050573][T15040] wlan1: Trigger new scan to find an IBSS to join [ 775.149664][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 775.787137][T16446] netlink: 'syz.3.3595': attribute type 10 has an invalid length. [ 775.811598][T16446] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.3595'. [ 775.824504][T16446] openvswitch: netlink: Message has 4 unknown bytes. [ 776.274342][T16450] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 776.484005][T16458] FAULT_INJECTION: forcing a failure. [ 776.484005][T16458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.585817][T16458] CPU: 1 PID: 16458 Comm: syz.3.3598 Not tainted syzkaller #0 [ 776.593339][T16458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.603408][T16458] Call Trace: [ 776.606700][T16458] [ 776.609648][T16458] dump_stack_lvl+0x18c/0x250 [ 776.614347][T16458] ? show_regs_print_info+0x20/0x20 [ 776.619562][T16458] ? load_image+0x420/0x420 [ 776.624119][T16458] ? __lock_acquire+0x7d80/0x7d80 [ 776.629163][T16458] ? snprintf+0xe9/0x140 [ 776.633427][T16458] should_fail_ex+0x394/0x4c0 [ 776.638128][T16458] _copy_to_user+0x2f/0xa0 [ 776.642570][T16458] simple_read_from_buffer+0xe7/0x150 [ 776.647960][T16458] proc_fail_nth_read+0x1e8/0x260 [ 776.653009][T16458] ? proc_fault_inject_write+0x360/0x360 [ 776.658668][T16458] ? fsnotify_perm+0x271/0x5e0 [ 776.663448][T16458] ? proc_fault_inject_write+0x360/0x360 [ 776.669100][T16458] vfs_read+0x298/0x990 [ 776.673279][T16458] ? kernel_read+0x1e0/0x1e0 [ 776.677887][T16458] ? __fget_files+0x28/0x460 [ 776.682495][T16458] ? __fget_files+0x3fc/0x460 [ 776.687196][T16458] ? __fdget_pos+0x2a3/0x330 [ 776.691798][T16458] ? ksys_read+0x74/0x260 [ 776.696148][T16458] ksys_read+0x151/0x260 [ 776.700414][T16458] ? vfs_write+0x9a0/0x9a0 [ 776.704858][T16458] ? lockdep_hardirqs_on+0x98/0x150 [ 776.710082][T16458] do_syscall_64+0x55/0xb0 [ 776.714510][T16458] ? clear_bhb_loop+0x40/0x90 [ 776.719199][T16458] ? clear_bhb_loop+0x40/0x90 [ 776.723890][T16458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.729799][T16458] RIP: 0033:0x7fc12955e90e [ 776.734228][T16458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 776.753850][T16458] RSP: 002b:00007fc12a414fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 776.762285][T16458] RAX: ffffffffffffffda RBX: 00007fc12a4156c0 RCX: 00007fc12955e90e [ 776.770272][T16458] RDX: 000000000000000f RSI: 00007fc12a4150a0 RDI: 0000000000000006 [ 776.778260][T16458] RBP: 00007fc12a415090 R08: 0000000000000000 R09: 0000000000000000 [ 776.786275][T16458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.794260][T16458] R13: 00007fc129826038 R14: 00007fc129825fa0 R15: 00007ffcf28b2818 [ 776.802262][T16458] [ 777.440839][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 778.101223][ T3471] wlan1: Trigger new scan to find an IBSS to join [ 778.167239][T16474] FAULT_INJECTION: forcing a failure. [ 778.167239][T16474] name failslab, interval 1, probability 0, space 0, times 0 [ 778.217671][T16474] CPU: 1 PID: 16474 Comm: syz.0.3611 Not tainted syzkaller #0 [ 778.225220][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.235317][T16474] Call Trace: [ 778.238633][T16474] [ 778.241600][T16474] dump_stack_lvl+0x18c/0x250 [ 778.246332][T16474] ? show_regs_print_info+0x20/0x20 [ 778.251583][T16474] ? load_image+0x420/0x420 [ 778.256147][T16474] ? verify_lock_unused+0x140/0x140 [ 778.261400][T16474] ? perf_trace_lock+0x303/0x3b0 [ 778.266398][T16474] should_fail_ex+0x394/0x4c0 [ 778.271143][T16474] should_failslab+0x9/0x20 [ 778.275695][T16474] slab_pre_alloc_hook+0x59/0x300 [ 778.280785][T16474] kmem_cache_alloc+0x5a/0x2c0 [ 778.285594][T16474] ? skb_clone+0x1eb/0x370 [ 778.290092][T16474] skb_clone+0x1eb/0x370 [ 778.294394][T16474] __netlink_deliver_tap+0x411/0x7f0 [ 778.299756][T16474] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.305000][T16474] netlink_deliver_tap+0x19c/0x1b0 [ 778.310169][T16474] netlink_unicast+0x77b/0x930 [ 778.315022][T16474] netlink_sendmsg+0x8d0/0xbf0 [ 778.319861][T16474] ? netlink_getsockopt+0x590/0x590 [ 778.325110][T16474] ? apparmor_socket_sendmsg+0x8e/0x330 [ 778.330710][T16474] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 778.336041][T16474] ? security_socket_sendmsg+0x80/0xa0 [ 778.341537][T16474] ? netlink_getsockopt+0x590/0x590 [ 778.346788][T16474] ____sys_sendmsg+0x61b/0x980 [ 778.351624][T16474] ? __asan_memset+0x22/0x40 [ 778.356269][T16474] ? __sys_sendmsg_sock+0x30/0x30 [ 778.361333][T16474] ? __import_iovec+0x5f2/0x850 [ 778.366264][T16474] ? import_iovec+0x73/0xa0 [ 778.370836][T16474] ___sys_sendmsg+0x2a6/0x360 [ 778.375577][T16474] ? __sys_sendmsg+0x2b0/0x2b0 [ 778.380462][T16474] ? __lock_acquire+0x7d80/0x7d80 [ 778.385619][T16474] __se_sys_sendmsg+0x1d0/0x2c0 [ 778.390540][T16474] ? __x64_sys_sendmsg+0x80/0x80 [ 778.395589][T16474] ? lockdep_hardirqs_on+0x98/0x150 [ 778.400856][T16474] do_syscall_64+0x55/0xb0 [ 778.405313][T16474] ? clear_bhb_loop+0x40/0x90 [ 778.410054][T16474] ? clear_bhb_loop+0x40/0x90 [ 778.414792][T16474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.420732][T16474] RIP: 0033:0x7f3db0f9e0d9 [ 778.425196][T16474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.444856][T16474] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.453330][T16474] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 778.461351][T16474] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 778.469371][T16474] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 778.477385][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.485396][T16474] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 778.493492][T16474] [ 779.050804][T15040] wlan1: Trigger new scan to find an IBSS to join [ 780.267947][T16492] netlink: 'syz.0.3608': attribute type 10 has an invalid length. [ 780.275829][T16492] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.3608'. [ 780.318033][T16492] openvswitch: netlink: Message has 4 unknown bytes. [ 780.616725][T16499] FAULT_INJECTION: forcing a failure. [ 780.616725][T16499] name failslab, interval 1, probability 0, space 0, times 0 [ 780.661592][T16498] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3612'. [ 780.707898][T16499] CPU: 1 PID: 16499 Comm: syz.2.3610 Not tainted syzkaller #0 [ 780.715420][T16499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 780.725502][T16499] Call Trace: [ 780.728798][T16499] [ 780.731741][T16499] dump_stack_lvl+0x18c/0x250 [ 780.736447][T16499] ? show_regs_print_info+0x20/0x20 [ 780.741668][T16499] ? load_image+0x420/0x420 [ 780.746202][T16499] ? __might_sleep+0xe0/0xe0 [ 780.747945][T16498] bridge_slave_1: default FDB implementation only supports local addresses [ 780.750804][T16499] ? __lock_acquire+0x7d80/0x7d80 [ 780.750836][T16499] should_fail_ex+0x394/0x4c0 [ 780.750865][T16499] should_failslab+0x9/0x20 [ 780.750891][T16499] slab_pre_alloc_hook+0x59/0x300 [ 780.750917][T16499] ? __lock_acquire+0x7d80/0x7d80 [ 780.750938][T16499] ? dev_ethtool+0x129/0x18d0 [ 780.788412][T16499] __kmem_cache_alloc_node+0x53/0x250 [ 780.793819][T16499] ? __might_fault+0xaa/0x120 [ 780.798528][T16499] ? dev_ethtool+0x129/0x18d0 [ 780.803237][T16499] kmalloc_trace+0x2a/0xe0 [ 780.807679][T16499] dev_ethtool+0x129/0x18d0 [ 780.812213][T16499] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 780.818487][T16499] ? __lock_acquire+0x7d80/0x7d80 [ 780.823548][T16499] ? __might_fault+0xaa/0x120 [ 780.828247][T16499] ? full_name_hash+0x92/0xe0 [ 780.832950][T16499] ? dev_load+0x21/0x1f0 [ 780.837223][T16499] dev_ioctl+0x392/0x1140 [ 780.841574][T16499] sock_do_ioctl+0x239/0x310 [ 780.846174][T16499] ? sock_show_fdinfo+0xb0/0xb0 [ 780.851041][T16499] sock_ioctl+0x5be/0x7e0 [ 780.855380][T16499] ? sock_poll+0x3e0/0x3e0 [ 780.859802][T16499] ? bpf_lsm_file_ioctl+0x9/0x10 [ 780.864734][T16499] ? security_file_ioctl+0x80/0xa0 [ 780.869844][T16499] ? sock_poll+0x3e0/0x3e0 [ 780.874256][T16499] __se_sys_ioctl+0xfd/0x170 [ 780.878848][T16499] do_syscall_64+0x55/0xb0 [ 780.883260][T16499] ? clear_bhb_loop+0x40/0x90 [ 780.887934][T16499] ? clear_bhb_loop+0x40/0x90 [ 780.892605][T16499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.898496][T16499] RIP: 0033:0x7f2a9dd9e0d9 [ 780.902909][T16499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.922511][T16499] RSP: 002b:00007f2a9ed34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.930921][T16499] RAX: ffffffffffffffda RBX: 00007f2a9e025fa0 RCX: 00007f2a9dd9e0d9 [ 780.938891][T16499] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 780.946852][T16499] RBP: 00007f2a9ed34090 R08: 0000000000000000 R09: 0000000000000000 [ 780.954819][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.962785][T16499] R13: 00007f2a9e026038 R14: 00007f2a9e025fa0 R15: 00007fff41c2fec8 [ 780.970763][T16499] [ 781.084667][T16504] netlink: 'syz.3.3614': attribute type 10 has an invalid length. [ 781.175575][T16504] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3614'. [ 781.227836][T16504] hsr0: entered promiscuous mode [ 781.538548][T16510] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3615'. [ 781.654975][T16510] netlink: 'syz.2.3615': attribute type 29 has an invalid length. [ 781.688972][T16510] netlink: 'syz.2.3615': attribute type 29 has an invalid length. [ 781.741309][T16509] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 781.828908][T16516] netlink: 'syz.2.3615': attribute type 29 has an invalid length. [ 781.900039][T16510] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3615'. [ 781.997338][T16516] netlink: 'syz.2.3615': attribute type 29 has an invalid length. [ 782.097041][T15023] wlan1: Trigger new scan to find an IBSS to join [ 783.348158][T15004] wlan1: Creating new IBSS network, BSSID ba:7c:2a:5d:55:6f [ 783.717580][T16530] netlink: 'syz.3.3621': attribute type 10 has an invalid length. [ 783.763184][T16530] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.3621'. [ 783.861090][T16530] openvswitch: netlink: Message has 4 unknown bytes. [ 784.108318][T15040] wlan1: Trigger new scan to find an IBSS to join [ 784.872899][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3627'. [ 785.511959][T16562] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3630'. [ 785.539742][T16562] bridge_slave_1: default FDB implementation only supports local addresses [ 785.568623][T16560] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3631'. [ 785.691709][T16560] netlink: 'syz.3.3631': attribute type 29 has an invalid length. [ 785.746864][T16560] netlink: 'syz.3.3631': attribute type 29 has an invalid length. [ 785.764849][T16563] netlink: 'syz.3.3631': attribute type 29 has an invalid length. [ 785.845736][T16560] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3631'. [ 785.982907][T16560] netlink: 'syz.3.3631': attribute type 29 has an invalid length. [ 786.926817][T16571] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.3633'. [ 787.125949][T16571] openvswitch: netlink: Flow key attr not present in new flow. [ 787.157797][T15004] wlan1: Trigger new scan to find an IBSS to join [ 788.388336][T16583] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 788.989119][T16594] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3642'. [ 789.017961][T16594] bridge_slave_1: default FDB implementation only supports local addresses [ 789.484107][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3641'. [ 789.663137][T16609] netlink: 'syz.1.3645': attribute type 10 has an invalid length. [ 789.689912][T16609] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3645'. [ 789.699907][T16609] openvswitch: netlink: Message has 4 unknown bytes. [ 789.874544][T16613] FAULT_INJECTION: forcing a failure. [ 789.874544][T16613] name failslab, interval 1, probability 0, space 0, times 0 [ 789.931471][T16613] CPU: 0 PID: 16613 Comm: syz.1.3647 Not tainted syzkaller #0 [ 789.938994][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 789.949067][T16613] Call Trace: [ 789.952369][T16613] [ 789.955317][T16613] dump_stack_lvl+0x18c/0x250 [ 789.960025][T16613] ? show_regs_print_info+0x20/0x20 [ 789.965250][T16613] ? load_image+0x420/0x420 [ 789.969786][T16613] ? __lock_acquire+0x7d80/0x7d80 [ 789.974840][T16613] should_fail_ex+0x394/0x4c0 [ 789.979552][T16613] should_failslab+0x9/0x20 [ 789.984082][T16613] slab_pre_alloc_hook+0x59/0x300 [ 789.989138][T16613] ? security_sk_alloc+0x4b/0x130 [ 789.994192][T16613] ? security_sk_alloc+0x4b/0x130 [ 789.999241][T16613] __kmem_cache_alloc_node+0x53/0x250 [ 789.999316][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3644'. [ 790.004630][T16613] ? security_sk_alloc+0x4b/0x130 [ 790.004653][T16613] __kmalloc+0xa7/0x240 [ 790.004675][T16613] ? sk_prot_alloc+0xe7/0x210 [ 790.004703][T16613] security_sk_alloc+0x4b/0x130 [ 790.004726][T16613] sk_prot_alloc+0x101/0x210 [ 790.004748][T16613] ? sk_alloc+0x24/0x350 [ 790.041111][T16613] sk_alloc+0x3a/0x350 [ 790.045209][T16613] ? bpf_ctx_init+0x154/0x190 [ 790.049914][T16613] bpf_prog_test_run_skb+0x371/0x18f0 [ 790.055317][T16613] ? __fget_files+0x28/0x460 [ 790.059933][T16613] ? __fget_files+0x3fc/0x460 [ 790.064647][T16613] ? cpu_online+0x60/0x60 [ 790.069011][T16613] bpf_prog_test_run+0x31f/0x390 [ 790.073976][T16613] __sys_bpf+0x49d/0x890 [ 790.078249][T16613] ? bpf_link_show_fdinfo+0x390/0x390 [ 790.083659][T16613] ? lock_chain_count+0x20/0x20 [ 790.088547][T16613] __x64_sys_bpf+0x7c/0x90 [ 790.092997][T16613] do_syscall_64+0x55/0xb0 [ 790.097453][T16613] ? clear_bhb_loop+0x40/0x90 [ 790.102155][T16613] ? clear_bhb_loop+0x40/0x90 [ 790.106864][T16613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.112784][T16613] RIP: 0033:0x7f278cb9e0d9 [ 790.117221][T16613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.136858][T16613] RSP: 002b:00007f278db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.145309][T16613] RAX: ffffffffffffffda RBX: 00007f278ce25fa0 RCX: 00007f278cb9e0d9 [ 790.153314][T16613] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 790.161315][T16613] RBP: 00007f278db37090 R08: 0000000000000000 R09: 0000000000000000 [ 790.169343][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.177342][T16613] R13: 00007f278ce26038 R14: 00007f278ce25fa0 R15: 00007ffc900733b8 [ 790.185360][T16613] [ 790.188818][T15040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 790.189300][ T3471] wlan1: Creating new IBSS network, BSSID f2:80:62:66:6b:83 [ 791.048082][T15004] wlan1: Trigger new scan to find an IBSS to join [ 792.147895][T16640] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3664'. [ 792.204269][T16640] netlink: 'syz.0.3664': attribute type 29 has an invalid length. [ 792.228966][T16640] netlink: 'syz.0.3664': attribute type 29 has an invalid length. [ 792.262166][T16645] netlink: 'syz.0.3664': attribute type 29 has an invalid length. [ 792.353716][T16640] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3664'. [ 792.394340][T16640] netlink: 'syz.0.3664': attribute type 29 has an invalid length. [ 794.098878][T15004] wlan1: Trigger new scan to find an IBSS to join [ 794.129768][T16664] netlink: 'syz.2.3665': attribute type 10 has an invalid length. [ 794.446688][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 796.863896][T16707] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.3679'. [ 796.897888][T16707] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 797.147264][T15009] wlan1: Creating new IBSS network, BSSID b6:60:e8:a3:c5:c7 [ 797.764340][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3677'. [ 799.456891][T16749] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3689'. [ 799.499399][T16749] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 801.082392][T16767] FAULT_INJECTION: forcing a failure. [ 801.082392][T16767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.117817][T16767] CPU: 1 PID: 16767 Comm: syz.2.3694 Not tainted syzkaller #0 [ 801.125379][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 801.135505][T16767] Call Trace: [ 801.138840][T16767] [ 801.141829][T16767] dump_stack_lvl+0x18c/0x250 [ 801.146586][T16767] ? show_regs_print_info+0x20/0x20 [ 801.151863][T16767] ? load_image+0x420/0x420 [ 801.156457][T16767] ? __lock_acquire+0x7d80/0x7d80 [ 801.158877][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'. [ 801.161522][T16767] ? snprintf+0xe9/0x140 [ 801.161582][T16767] should_fail_ex+0x394/0x4c0 [ 801.161644][T16767] _copy_to_user+0x2f/0xa0 [ 801.161682][T16767] simple_read_from_buffer+0xe7/0x150 [ 801.189396][T16767] proc_fail_nth_read+0x1e8/0x260 [ 801.194507][T16767] ? proc_fault_inject_write+0x360/0x360 [ 801.200232][T16767] ? fsnotify_perm+0x271/0x5e0 [ 801.205062][T16767] ? proc_fault_inject_write+0x360/0x360 [ 801.210778][T16767] vfs_read+0x298/0x990 [ 801.215032][T16767] ? kernel_read+0x1e0/0x1e0 [ 801.219699][T16767] ? __fget_files+0x28/0x460 [ 801.224367][T16767] ? __fget_files+0x3fc/0x460 [ 801.229152][T16767] ? __fdget_pos+0x2a3/0x330 [ 801.233798][T16767] ? ksys_read+0x74/0x260 [ 801.238208][T16767] ksys_read+0x151/0x260 [ 801.242529][T16767] ? vfs_write+0x9a0/0x9a0 [ 801.247025][T16767] ? lockdep_hardirqs_on+0x98/0x150 [ 801.252308][T16767] do_syscall_64+0x55/0xb0 [ 801.256955][T16767] ? clear_bhb_loop+0x40/0x90 [ 801.261695][T16767] ? clear_bhb_loop+0x40/0x90 [ 801.266450][T16767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.272400][T16767] RIP: 0033:0x7f2a9dd5e90e [ 801.276873][T16767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.296545][T16767] RSP: 002b:00007f2a9ed33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.305042][T16767] RAX: ffffffffffffffda RBX: 00007f2a9ed346c0 RCX: 00007f2a9dd5e90e [ 801.313079][T16767] RDX: 000000000000000f RSI: 00007f2a9ed340a0 RDI: 0000000000000005 [ 801.321118][T16767] RBP: 00007f2a9ed34090 R08: 0000000000000000 R09: 0000000000000000 [ 801.329146][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.337170][T16767] R13: 00007f2a9e026038 R14: 00007f2a9e025fa0 R15: 00007fff41c2fec8 [ 801.345275][T16767] [ 801.940780][T16779] FAULT_INJECTION: forcing a failure. [ 801.940780][T16779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.967841][T16779] CPU: 1 PID: 16779 Comm: syz.2.3699 Not tainted syzkaller #0 [ 801.975368][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 801.985449][T16779] Call Trace: [ 801.988747][T16779] [ 801.991701][T16779] dump_stack_lvl+0x18c/0x250 [ 801.996404][T16779] ? show_regs_print_info+0x20/0x20 [ 802.001624][T16779] ? load_image+0x420/0x420 [ 802.006167][T16779] ? __lock_acquire+0x7d80/0x7d80 [ 802.011221][T16779] ? snprintf+0xe9/0x140 [ 802.015499][T16779] should_fail_ex+0x394/0x4c0 [ 802.020213][T16779] _copy_to_user+0x2f/0xa0 [ 802.024658][T16779] simple_read_from_buffer+0xe7/0x150 [ 802.030067][T16779] proc_fail_nth_read+0x1e8/0x260 [ 802.035142][T16779] ? proc_fault_inject_write+0x360/0x360 [ 802.040811][T16779] ? fsnotify_perm+0x271/0x5e0 [ 802.045604][T16779] ? proc_fault_inject_write+0x360/0x360 [ 802.051271][T16779] vfs_read+0x298/0x990 [ 802.055469][T16779] ? kernel_read+0x1e0/0x1e0 [ 802.060094][T16779] ? __fget_files+0x28/0x460 [ 802.064713][T16779] ? __fget_files+0x3fc/0x460 [ 802.069606][T16779] ? __fdget_pos+0x2a3/0x330 [ 802.074227][T16779] ? ksys_read+0x74/0x260 [ 802.078588][T16779] ksys_read+0x151/0x260 [ 802.082863][T16779] ? vfs_write+0x9a0/0x9a0 [ 802.087309][T16779] ? lockdep_hardirqs_on+0x98/0x150 [ 802.092540][T16779] do_syscall_64+0x55/0xb0 [ 802.096981][T16779] ? clear_bhb_loop+0x40/0x90 [ 802.101685][T16779] ? clear_bhb_loop+0x40/0x90 [ 802.106390][T16779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.112317][T16779] RIP: 0033:0x7f2a9dd5e90e [ 802.116752][T16779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 802.136390][T16779] RSP: 002b:00007f2a9ed12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 802.144837][T16779] RAX: ffffffffffffffda RBX: 00007f2a9ed136c0 RCX: 00007f2a9dd5e90e [ 802.152840][T16779] RDX: 000000000000000f RSI: 00007f2a9ed130a0 RDI: 0000000000000006 [ 802.160837][T16779] RBP: 00007f2a9ed13090 R08: 0000000000000000 R09: 0000000000000000 [ 802.168836][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.176830][T16779] R13: 00007f2a9e026128 R14: 00007f2a9e026090 R15: 00007fff41c2fec8 [ 802.184849][T16779] [ 802.422622][T16783] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3701'. [ 802.459156][T16783] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 806.477682][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3705'. [ 807.255621][T16819] FAULT_INJECTION: forcing a failure. [ 807.255621][T16819] name failslab, interval 1, probability 0, space 0, times 0 [ 807.307877][T16819] CPU: 1 PID: 16819 Comm: syz.1.3711 Not tainted syzkaller #0 [ 807.315402][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 807.325477][T16819] Call Trace: [ 807.328772][T16819] [ 807.331713][T16819] dump_stack_lvl+0x18c/0x250 [ 807.336424][T16819] ? show_regs_print_info+0x20/0x20 [ 807.341655][T16819] ? load_image+0x420/0x420 [ 807.346185][T16819] ? __might_sleep+0xe0/0xe0 [ 807.350803][T16819] ? __lock_acquire+0x7d80/0x7d80 [ 807.355860][T16819] should_fail_ex+0x394/0x4c0 [ 807.360571][T16819] should_failslab+0x9/0x20 [ 807.365102][T16819] slab_pre_alloc_hook+0x59/0x300 [ 807.370166][T16819] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 807.375918][T16819] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 807.381662][T16819] __kmem_cache_alloc_node+0x53/0x250 [ 807.387082][T16819] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 807.392840][T16819] __kmalloc+0xa7/0x240 [ 807.397117][T16819] tomoyo_realpath_from_path+0xe6/0x5c0 [ 807.402693][T16819] ? tomoyo_domain+0xd6/0x120 [ 807.407408][T16819] tomoyo_path_number_perm+0x248/0x5e0 [ 807.412893][T16819] ? tomoyo_path_number_perm+0x217/0x5e0 [ 807.418554][T16819] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 807.424062][T16819] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 807.430091][T16819] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 807.436284][T16819] ? tomoyo_file_ioctl+0x11/0x30 [ 807.441253][T16819] security_file_ioctl+0x70/0xa0 [ 807.446230][T16819] __se_sys_ioctl+0x48/0x170 [ 807.450857][T16819] do_syscall_64+0x55/0xb0 [ 807.455305][T16819] ? clear_bhb_loop+0x40/0x90 [ 807.460009][T16819] ? clear_bhb_loop+0x40/0x90 [ 807.464712][T16819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.470628][T16819] RIP: 0033:0x7f278cb9e0d9 [ 807.475068][T16819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.494708][T16819] RSP: 002b:00007f278db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 807.503146][T16819] RAX: ffffffffffffffda RBX: 00007f278ce25fa0 RCX: 00007f278cb9e0d9 [ 807.511147][T16819] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 807.519140][T16819] RBP: 00007f278db37090 R08: 0000000000000000 R09: 0000000000000000 [ 807.527137][T16819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.535126][T16819] R13: 00007f278ce26038 R14: 00007f278ce25fa0 R15: 00007ffc900733b8 [ 807.543134][T16819] [ 807.658922][T16825] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.3714'. [ 807.675147][T16819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 807.695880][T16825] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 808.039425][T16830] netlink: 'syz.1.3716': attribute type 22 has an invalid length. [ 808.047297][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3716'. [ 808.096397][T16835] netlink: 'syz.1.3716': attribute type 4 has an invalid length. [ 808.190220][T16835] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3716'. [ 808.892928][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.901354][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.965366][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3721'. [ 810.516870][T16856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'. [ 810.570876][T16856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'. [ 810.632023][T16856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'. [ 810.680767][T16856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'. [ 810.784157][T16859] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3725'. [ 810.844317][T16859] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 811.317386][T16871] FAULT_INJECTION: forcing a failure. [ 811.317386][T16871] name failslab, interval 1, probability 0, space 0, times 0 [ 811.353496][T16871] CPU: 0 PID: 16871 Comm: syz.3.3729 Not tainted syzkaller #0 [ 811.361030][T16871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 811.371114][T16871] Call Trace: [ 811.374418][T16871] [ 811.377370][T16871] dump_stack_lvl+0x18c/0x250 [ 811.382079][T16871] ? show_regs_print_info+0x20/0x20 [ 811.387311][T16871] ? load_image+0x420/0x420 [ 811.391850][T16871] ? __lock_acquire+0x7d80/0x7d80 [ 811.396916][T16871] should_fail_ex+0x394/0x4c0 [ 811.401632][T16871] should_failslab+0x9/0x20 [ 811.406167][T16871] slab_pre_alloc_hook+0x59/0x300 [ 811.411236][T16871] ? security_sk_alloc+0x4b/0x130 [ 811.416290][T16871] ? security_sk_alloc+0x4b/0x130 [ 811.421338][T16871] __kmem_cache_alloc_node+0x53/0x250 [ 811.426754][T16871] ? security_sk_alloc+0x4b/0x130 [ 811.431805][T16871] __kmalloc+0xa7/0x240 [ 811.435997][T16871] ? sk_prot_alloc+0xe7/0x210 [ 811.440708][T16871] security_sk_alloc+0x4b/0x130 [ 811.445590][T16871] sk_prot_alloc+0x101/0x210 [ 811.450218][T16871] ? sk_alloc+0x24/0x350 [ 811.454497][T16871] sk_alloc+0x3a/0x350 [ 811.458597][T16871] ? bpf_ctx_init+0x154/0x190 [ 811.463307][T16871] bpf_prog_test_run_skb+0x371/0x18f0 [ 811.468719][T16871] ? __fget_files+0x28/0x460 [ 811.473341][T16871] ? __fget_files+0x3fc/0x460 [ 811.478062][T16871] ? cpu_online+0x60/0x60 [ 811.482426][T16871] bpf_prog_test_run+0x31f/0x390 [ 811.487396][T16871] __sys_bpf+0x49d/0x890 [ 811.491678][T16871] ? bpf_link_show_fdinfo+0x390/0x390 [ 811.497096][T16871] ? lock_chain_count+0x20/0x20 [ 811.501990][T16871] __x64_sys_bpf+0x7c/0x90 [ 811.506437][T16871] do_syscall_64+0x55/0xb0 [ 811.510884][T16871] ? clear_bhb_loop+0x40/0x90 [ 811.515594][T16871] ? clear_bhb_loop+0x40/0x90 [ 811.520305][T16871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.526232][T16871] RIP: 0033:0x7fc12959e0d9 [ 811.530680][T16871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.550322][T16871] RSP: 002b:00007fc12a415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.558775][T16871] RAX: ffffffffffffffda RBX: 00007fc129825fa0 RCX: 00007fc12959e0d9 [ 811.566784][T16871] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 811.574786][T16871] RBP: 00007fc12a415090 R08: 0000000000000000 R09: 0000000000000000 [ 811.582785][T16871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.590791][T16871] R13: 00007fc129826038 R14: 00007fc129825fa0 R15: 00007ffcf28b2818 [ 811.598815][T16871] [ 813.374572][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3731'. [ 813.411451][T16897] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.3736'. [ 813.519365][T16897] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 814.713886][T16920] netlink: 'syz.0.3744': attribute type 63 has an invalid length. [ 814.738009][T16920] netlink: 'syz.0.3744': attribute type 63 has an invalid length. [ 815.099027][T16926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3746'. [ 815.155437][T16926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3746'. [ 815.208210][T16932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3746'. [ 815.278268][T16926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3746'. [ 815.320724][T16934] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3749'. [ 815.545445][T16940] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3751'. [ 815.647762][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3751'. [ 815.798031][T16941] netlink: 'syz.0.3751': attribute type 39 has an invalid length. [ 815.850132][T16941] veth1_vlan: left allmulticast mode [ 817.268163][T16952] sit0: entered allmulticast mode [ 817.452771][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 817.540139][T16960] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 818.608022][T16977] netlink: 'syz.1.3760': attribute type 10 has an invalid length. [ 818.645131][T16977] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3760'. [ 818.961123][T16982] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3761'. [ 819.365678][T16987] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3762'. [ 820.031804][T16989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3763'. [ 820.290407][T16995] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3764'. [ 820.365050][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3764'. [ 820.472656][T16994] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 820.622845][T16997] netlink: 'syz.3.3764': attribute type 39 has an invalid length. [ 820.818315][T16997] macvlan0: entered promiscuous mode [ 820.824008][T16997] macvlan0: entered allmulticast mode [ 821.165496][T17007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3769'. [ 821.343451][T15023] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 821.432820][T17007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3769'. [ 821.527250][T17009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3769'. [ 822.490574][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'. [ 823.827402][T17039] __nla_validate_parse: 5 callbacks suppressed [ 823.827420][T17039] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3779'. [ 823.867050][T17034] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 823.888048][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3779'. [ 823.932575][T17039] netlink: 'syz.1.3779': attribute type 39 has an invalid length. [ 824.004745][T17039] macvlan0: entered promiscuous mode [ 824.048038][T17039] macvlan0: entered allmulticast mode [ 824.154788][T17042] netlink: 'syz.2.3781': attribute type 10 has an invalid length. [ 824.207890][T17042] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3781'. [ 824.550727][T17052] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3783'. [ 824.568059][T17052] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 824.753031][T17057] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3782'. [ 824.947473][T17063] FAULT_INJECTION: forcing a failure. [ 824.947473][T17063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.006891][T17063] CPU: 0 PID: 17063 Comm: syz.2.3785 Not tainted syzkaller #0 [ 825.014419][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.024492][T17063] Call Trace: [ 825.027781][T17063] [ 825.030729][T17063] dump_stack_lvl+0x18c/0x250 [ 825.035435][T17063] ? show_regs_print_info+0x20/0x20 [ 825.040654][T17063] ? load_image+0x420/0x420 [ 825.045187][T17063] ? __lock_acquire+0x7d80/0x7d80 [ 825.050326][T17063] ? __virt_addr_valid+0x10c/0x380 [ 825.055443][T17063] should_fail_ex+0x394/0x4c0 [ 825.060133][T17063] _copy_from_user+0x2f/0xe0 [ 825.064717][T17063] map_update_elem+0x501/0x710 [ 825.069504][T17063] __sys_bpf+0x6b5/0x890 [ 825.073740][T17063] ? bpf_link_show_fdinfo+0x390/0x390 [ 825.079114][T17063] ? lock_chain_count+0x20/0x20 [ 825.083965][T17063] __x64_sys_bpf+0x7c/0x90 [ 825.088380][T17063] do_syscall_64+0x55/0xb0 [ 825.092792][T17063] ? clear_bhb_loop+0x40/0x90 [ 825.097462][T17063] ? clear_bhb_loop+0x40/0x90 [ 825.102133][T17063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 825.108017][T17063] RIP: 0033:0x7f2a9dd9e0d9 [ 825.112424][T17063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.132022][T17063] RSP: 002b:00007f2a9ed13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 825.140428][T17063] RAX: ffffffffffffffda RBX: 00007f2a9e026090 RCX: 00007f2a9dd9e0d9 [ 825.148395][T17063] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000002 [ 825.156358][T17063] RBP: 00007f2a9ed13090 R08: 0000000000000000 R09: 0000000000000000 [ 825.164321][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.172283][T17063] R13: 00007f2a9e026128 R14: 00007f2a9e026090 R15: 00007fff41c2fec8 [ 825.180258][T17063] [ 825.599835][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3784'. [ 825.945370][T17066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3786'. [ 825.995560][T17066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3786'. [ 826.132000][T17067] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3786'. [ 826.522093][T17074] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3787'. [ 827.340728][T17076] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 829.467419][T17094] __nla_validate_parse: 5 callbacks suppressed [ 829.467438][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3795'. [ 829.985516][T17115] FAULT_INJECTION: forcing a failure. [ 829.985516][T17115] name failslab, interval 1, probability 0, space 0, times 0 [ 830.028055][T17115] CPU: 0 PID: 17115 Comm: syz.1.3801 Not tainted syzkaller #0 [ 830.035582][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.045665][T17115] Call Trace: [ 830.048963][T17115] [ 830.051920][T17115] dump_stack_lvl+0x18c/0x250 [ 830.056631][T17115] ? show_regs_print_info+0x20/0x20 [ 830.061851][T17115] ? load_image+0x420/0x420 [ 830.066393][T17115] ? __might_sleep+0xe0/0xe0 [ 830.071157][T17115] ? __lock_acquire+0x7d80/0x7d80 [ 830.076211][T17115] should_fail_ex+0x394/0x4c0 [ 830.080928][T17115] should_failslab+0x9/0x20 [ 830.085461][T17115] slab_pre_alloc_hook+0x59/0x300 [ 830.090509][T17115] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 830.096233][T17115] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 830.101950][T17115] __kmem_cache_alloc_node+0x53/0x250 [ 830.107328][T17115] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 830.113048][T17115] __kmalloc+0xa7/0x240 [ 830.117208][T17115] tomoyo_realpath_from_path+0xe6/0x5c0 [ 830.122756][T17115] ? tomoyo_domain+0xd6/0x120 [ 830.127435][T17115] tomoyo_path_number_perm+0x248/0x5e0 [ 830.132895][T17115] ? tomoyo_path_number_perm+0x217/0x5e0 [ 830.138526][T17115] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 830.143983][T17115] ? ksys_write+0x1d2/0x260 [ 830.148510][T17115] ? __fget_files+0x28/0x460 [ 830.153110][T17115] security_file_ioctl+0x70/0xa0 [ 830.158052][T17115] __se_sys_ioctl+0x48/0x170 [ 830.162641][T17115] do_syscall_64+0x55/0xb0 [ 830.167050][T17115] ? clear_bhb_loop+0x40/0x90 [ 830.171722][T17115] ? clear_bhb_loop+0x40/0x90 [ 830.176394][T17115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.182278][T17115] RIP: 0033:0x7f278cb9e0d9 [ 830.186688][T17115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.206288][T17115] RSP: 002b:00007f278db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.214704][T17115] RAX: ffffffffffffffda RBX: 00007f278ce25fa0 RCX: 00007f278cb9e0d9 [ 830.222692][T17115] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000004 [ 830.230655][T17115] RBP: 00007f278db37090 R08: 0000000000000000 R09: 0000000000000000 [ 830.238619][T17115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.246586][T17115] R13: 00007f278ce26038 R14: 00007f278ce25fa0 R15: 00007ffc900733b8 [ 830.254566][T17115] [ 830.287996][T17115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 830.638801][T17119] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 831.663128][T17136] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3807'. [ 833.162194][T15023] wlan1: Trigger new scan to find an IBSS to join [ 833.216143][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 834.050221][T17161] FAULT_INJECTION: forcing a failure. [ 834.050221][T17161] name failslab, interval 1, probability 0, space 0, times 0 [ 834.119971][T17161] CPU: 1 PID: 17161 Comm: syz.2.3814 Not tainted syzkaller #0 [ 834.127495][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.137658][T17161] Call Trace: [ 834.140957][T17161] [ 834.143915][T17161] dump_stack_lvl+0x18c/0x250 [ 834.148624][T17161] ? show_regs_print_info+0x20/0x20 [ 834.153848][T17161] ? load_image+0x420/0x420 [ 834.158376][T17161] ? __lock_acquire+0x7d80/0x7d80 [ 834.163429][T17161] should_fail_ex+0x394/0x4c0 [ 834.168134][T17161] should_failslab+0x9/0x20 [ 834.172661][T17161] slab_pre_alloc_hook+0x59/0x300 [ 834.177709][T17161] ? security_sk_alloc+0x4b/0x130 [ 834.182750][T17161] ? security_sk_alloc+0x4b/0x130 [ 834.187791][T17161] __kmem_cache_alloc_node+0x53/0x250 [ 834.193187][T17161] ? security_sk_alloc+0x4b/0x130 [ 834.198215][T17161] __kmalloc+0xa7/0x240 [ 834.202368][T17161] ? sk_prot_alloc+0xe7/0x210 [ 834.207042][T17161] security_sk_alloc+0x4b/0x130 [ 834.211887][T17161] sk_prot_alloc+0x101/0x210 [ 834.216474][T17161] ? sk_alloc+0x24/0x350 [ 834.220719][T17161] sk_alloc+0x3a/0x350 [ 834.224782][T17161] ? bpf_ctx_init+0x154/0x190 [ 834.229460][T17161] bpf_prog_test_run_skb+0x371/0x18f0 [ 834.234836][T17161] ? __fget_files+0x28/0x460 [ 834.239422][T17161] ? __fget_files+0x3fc/0x460 [ 834.244133][T17161] ? cpu_online+0x60/0x60 [ 834.248462][T17161] bpf_prog_test_run+0x31f/0x390 [ 834.253395][T17161] __sys_bpf+0x49d/0x890 [ 834.257632][T17161] ? bpf_link_show_fdinfo+0x390/0x390 [ 834.263015][T17161] ? lock_chain_count+0x20/0x20 [ 834.267877][T17161] __x64_sys_bpf+0x7c/0x90 [ 834.272285][T17161] do_syscall_64+0x55/0xb0 [ 834.276696][T17161] ? clear_bhb_loop+0x40/0x90 [ 834.281366][T17161] ? clear_bhb_loop+0x40/0x90 [ 834.286037][T17161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.291920][T17161] RIP: 0033:0x7f2a9dd9e0d9 [ 834.296337][T17161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.315936][T17161] RSP: 002b:00007f2a9ed34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 834.324369][T17161] RAX: ffffffffffffffda RBX: 00007f2a9e025fa0 RCX: 00007f2a9dd9e0d9 [ 834.332334][T17161] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 834.340317][T17161] RBP: 00007f2a9ed34090 R08: 0000000000000000 R09: 0000000000000000 [ 834.348278][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.356240][T17161] R13: 00007f2a9e026038 R14: 00007f2a9e025fa0 R15: 00007fff41c2fec8 [ 834.364218][T17161] [ 834.553142][T17167] FAULT_INJECTION: forcing a failure. [ 834.553142][T17167] name failslab, interval 1, probability 0, space 0, times 0 [ 834.596729][T17167] CPU: 0 PID: 17167 Comm: syz.0.3816 Not tainted syzkaller #0 [ 834.604274][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.614355][T17167] Call Trace: [ 834.617687][T17167] [ 834.620630][T17167] dump_stack_lvl+0x18c/0x250 [ 834.625329][T17167] ? show_regs_print_info+0x20/0x20 [ 834.630547][T17167] ? load_image+0x420/0x420 [ 834.635083][T17167] ? __might_sleep+0xe0/0xe0 [ 834.639695][T17167] ? __lock_acquire+0x7d80/0x7d80 [ 834.644749][T17167] should_fail_ex+0x394/0x4c0 [ 834.649458][T17167] should_failslab+0x9/0x20 [ 834.653985][T17167] slab_pre_alloc_hook+0x59/0x300 [ 834.659043][T17167] kmem_cache_alloc+0x5a/0x2c0 [ 834.663829][T17167] ? sk_prot_alloc+0x57/0x210 [ 834.668534][T17167] sk_prot_alloc+0x57/0x210 [ 834.673052][T17167] ? sk_alloc+0x24/0x350 [ 834.677314][T17167] sk_alloc+0x3a/0x350 [ 834.681415][T17167] inet_create+0x7a9/0xfe0 [ 834.685851][T17167] ? inet_create+0x9d/0xfe0 [ 834.690383][T17167] __sock_create+0x49e/0x940 [ 834.695011][T17167] mptcp_subflow_create_socket+0x10c/0xad0 [ 834.700843][T17167] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 834.706672][T17167] ? mark_lock+0x94/0x320 [ 834.711026][T17167] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 834.717026][T17167] __mptcp_nmpc_sk+0x157/0x720 [ 834.721809][T17167] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 834.728585][T17167] ? __local_bh_enable_ip+0x13a/0x1c0 [ 834.733972][T17167] ? lockdep_hardirqs_on+0x98/0x150 [ 834.739188][T17167] ? __local_bh_enable_ip+0x13a/0x1c0 [ 834.744577][T17167] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 834.749893][T17167] mptcp_sendmsg+0x144c/0x1670 [ 834.754689][T17167] ? aa_sk_perm+0x83c/0x970 [ 834.759221][T17167] ? aa_sk_perm+0x83c/0x970 [ 834.763752][T17167] ? aa_af_perm+0x330/0x330 [ 834.768271][T17167] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 834.774704][T17167] ? mptcp_shutdown+0x80/0x80 [ 834.779403][T17167] ? sock_rps_record_flow+0x19/0x3f0 [ 834.784709][T17167] ? inet_sendmsg+0xce/0x2a0 [ 834.789313][T17167] ? inet_send_prepare+0x250/0x250 [ 834.794444][T17167] ____sys_sendmsg+0x61b/0x980 [ 834.799233][T17167] ? __import_iovec+0x42c/0x850 [ 834.804119][T17167] ? __sys_sendmsg_sock+0x30/0x30 [ 834.809171][T17167] ? import_iovec+0x73/0xa0 [ 834.813703][T17167] ___sys_sendmsg+0x2a6/0x360 [ 834.818404][T17167] ? lockdep_hardirqs_on+0x98/0x150 [ 834.823624][T17167] ? __sys_sendmsg+0x2b0/0x2b0 [ 834.828429][T17167] ? __lock_acquire+0x7d80/0x7d80 [ 834.833495][T17167] __se_sys_sendmsg+0x1d0/0x2c0 [ 834.838365][T17167] ? __x64_sys_sendmsg+0x80/0x80 [ 834.843348][T17167] ? lockdep_hardirqs_on+0x98/0x150 [ 834.848579][T17167] do_syscall_64+0x55/0xb0 [ 834.853017][T17167] ? clear_bhb_loop+0x40/0x90 [ 834.857715][T17167] ? clear_bhb_loop+0x40/0x90 [ 834.862415][T17167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.868327][T17167] RIP: 0033:0x7f3db0f9e0d9 [ 834.872754][T17167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.892466][T17167] RSP: 002b:00007f3db1d89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.900903][T17167] RAX: ffffffffffffffda RBX: 00007f3db1226090 RCX: 00007f3db0f9e0d9 [ 834.908900][T17167] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003 [ 834.916968][T17167] RBP: 00007f3db1d89090 R08: 0000000000000000 R09: 0000000000000000 [ 834.924951][T17167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.932943][T17167] R13: 00007f3db1226128 R14: 00007f3db1226090 R15: 00007fffd4aaa558 [ 834.940946][T17167] [ 835.406326][T17184] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3818'. [ 837.053024][T15009] wlan1: Trigger new scan to find an IBSS to join [ 837.073257][T17202] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3826'. [ 837.083402][T17202] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 838.252851][T17209] FAULT_INJECTION: forcing a failure. [ 838.252851][T17209] name failslab, interval 1, probability 0, space 0, times 0 [ 838.280384][T15023] wlan1: Creating new IBSS network, BSSID fa:b4:99:a1:15:e5 [ 838.290304][T17217] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3833'. [ 838.328608][T17209] CPU: 1 PID: 17209 Comm: syz.3.3829 Not tainted syzkaller #0 [ 838.336116][T17209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 838.346190][T17209] Call Trace: [ 838.349488][T17209] [ 838.352440][T17209] dump_stack_lvl+0x18c/0x250 [ 838.357143][T17209] ? show_regs_print_info+0x20/0x20 [ 838.362359][T17209] ? load_image+0x420/0x420 [ 838.366888][T17209] ? __might_sleep+0xe0/0xe0 [ 838.371496][T17209] ? __lock_acquire+0x7d80/0x7d80 [ 838.376559][T17209] should_fail_ex+0x394/0x4c0 [ 838.381266][T17209] should_failslab+0x9/0x20 [ 838.385790][T17209] slab_pre_alloc_hook+0x59/0x300 [ 838.390843][T17209] ? kvmalloc_node+0x70/0x180 [ 838.395547][T17209] ? kvmalloc_node+0x70/0x180 [ 838.400248][T17209] __kmem_cache_alloc_node+0x53/0x250 [ 838.405734][T17209] ? kvmalloc_node+0x70/0x180 [ 838.410430][T17209] __kmalloc_node+0xa6/0x240 [ 838.415048][T17209] kvmalloc_node+0x70/0x180 [ 838.419575][T17209] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 838.424987][T17209] ? bpf_dispatcher_xdp+0x800/0x1000 [ 838.430284][T17209] ? bpf_dispatcher_xdp+0x800/0x1000 [ 838.435565][T17209] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 838.441461][T17209] ? xdp_convert_md_to_buff+0x330/0x330 [ 838.447031][T17209] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 838.453272][T17209] ? _copy_from_user+0xa5/0xe0 [ 838.458050][T17209] ? bpf_test_init+0x119/0x140 [ 838.462808][T17209] ? xdp_convert_md_to_buff+0x5b/0x330 [ 838.468262][T17209] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 838.473633][T17209] ? __lock_acquire+0x7d80/0x7d80 [ 838.478657][T17209] ? dev_put+0x80/0x80 [ 838.482728][T17209] ? dev_put+0x80/0x80 [ 838.486787][T17209] bpf_prog_test_run+0x31f/0x390 [ 838.491721][T17209] __sys_bpf+0x49d/0x890 [ 838.495956][T17209] ? bpf_link_show_fdinfo+0x390/0x390 [ 838.501330][T17209] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 838.507489][T17209] __x64_sys_bpf+0x7c/0x90 [ 838.511923][T17209] do_syscall_64+0x55/0xb0 [ 838.516334][T17209] ? clear_bhb_loop+0x40/0x90 [ 838.521007][T17209] ? clear_bhb_loop+0x40/0x90 [ 838.525681][T17209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.531565][T17209] RIP: 0033:0x7fc12959e0d9 [ 838.535971][T17209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.555572][T17209] RSP: 002b:00007fc12a415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 838.563980][T17209] RAX: ffffffffffffffda RBX: 00007fc129825fa0 RCX: 00007fc12959e0d9 [ 838.571946][T17209] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 838.579908][T17209] RBP: 00007fc12a415090 R08: 0000000000000000 R09: 0000000000000000 [ 838.587870][T17209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.595833][T17209] R13: 00007fc129826038 R14: 00007fc129825fa0 R15: 00007ffcf28b2818 [ 838.603805][T17209] [ 839.351536][T17229] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3837'. [ 839.373940][T17229] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 839.918530][T17241] FAULT_INJECTION: forcing a failure. [ 839.918530][T17241] name failslab, interval 1, probability 0, space 0, times 0 [ 839.987964][T17241] CPU: 1 PID: 17241 Comm: syz.2.3841 Not tainted syzkaller #0 [ 839.995490][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.005559][T17241] Call Trace: [ 840.008849][T17241] [ 840.011789][T17241] dump_stack_lvl+0x18c/0x250 [ 840.016491][T17241] ? show_regs_print_info+0x20/0x20 [ 840.021704][T17241] ? load_image+0x420/0x420 [ 840.026232][T17241] ? __might_sleep+0xe0/0xe0 [ 840.030836][T17241] ? __lock_acquire+0x7d80/0x7d80 [ 840.035891][T17241] should_fail_ex+0x394/0x4c0 [ 840.040614][T17241] should_failslab+0x9/0x20 [ 840.045152][T17241] slab_pre_alloc_hook+0x59/0x300 [ 840.050196][T17241] ? __lock_acquire+0x7d80/0x7d80 [ 840.055235][T17241] ? kvmalloc_node+0x70/0x180 [ 840.059927][T17241] ? kvmalloc_node+0x70/0x180 [ 840.064622][T17241] __kmem_cache_alloc_node+0x53/0x250 [ 840.070008][T17241] ? __schedule_delayed_monitor_work+0x200/0x200 [ 840.076360][T17241] ? kvmalloc_node+0x70/0x180 [ 840.081048][T17241] __kmalloc_node+0xa6/0x240 [ 840.085664][T17241] kvmalloc_node+0x70/0x180 [ 840.090192][T17241] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 840.095595][T17241] ? 0xffffffffa0004240 [ 840.099766][T17241] ? 0xffffffffa0004240 [ 840.103931][T17241] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 840.109853][T17241] ? xdp_convert_md_to_buff+0x330/0x330 [ 840.115483][T17241] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 840.121743][T17241] ? _copy_from_user+0xa5/0xe0 [ 840.126521][T17241] ? bpf_test_init+0x119/0x140 [ 840.131293][T17241] ? xdp_convert_md_to_buff+0x5b/0x330 [ 840.136769][T17241] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 840.142153][T17241] ? __lock_acquire+0x7d80/0x7d80 [ 840.147215][T17241] ? dev_put+0x80/0x80 [ 840.151324][T17241] ? dev_put+0x80/0x80 [ 840.155410][T17241] bpf_prog_test_run+0x31f/0x390 [ 840.160370][T17241] __sys_bpf+0x49d/0x890 [ 840.164630][T17241] ? bpf_link_show_fdinfo+0x390/0x390 [ 840.170047][T17241] ? lock_chain_count+0x20/0x20 [ 840.174929][T17241] __x64_sys_bpf+0x7c/0x90 [ 840.179366][T17241] do_syscall_64+0x55/0xb0 [ 840.183788][T17241] ? clear_bhb_loop+0x40/0x90 [ 840.188476][T17241] ? clear_bhb_loop+0x40/0x90 [ 840.193171][T17241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.199072][T17241] RIP: 0033:0x7f2a9dd9e0d9 [ 840.203498][T17241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.223114][T17241] RSP: 002b:00007f2a9ed34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 840.231540][T17241] RAX: ffffffffffffffda RBX: 00007f2a9e025fa0 RCX: 00007f2a9dd9e0d9 [ 840.239519][T17241] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 840.247522][T17241] RBP: 00007f2a9ed34090 R08: 0000000000000000 R09: 0000000000000000 [ 840.255500][T17241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.263477][T17241] R13: 00007f2a9e026038 R14: 00007f2a9e025fa0 R15: 00007fff41c2fec8 [ 840.271490][T17241] [ 841.543014][T17253] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3844'. [ 842.100205][T17263] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3849'. [ 842.109967][T17263] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 842.222696][T17269] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3846'. [ 844.522285][T17303] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3860'. [ 845.267614][T17310] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3866'. [ 846.149763][T17333] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3874'. [ 846.829025][T17349] FAULT_INJECTION: forcing a failure. [ 846.829025][T17349] name failslab, interval 1, probability 0, space 0, times 0 [ 846.842111][T17349] CPU: 0 PID: 17349 Comm: syz.0.3882 Not tainted syzkaller #0 [ 846.849608][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.859686][T17349] Call Trace: [ 846.862985][T17349] [ 846.865948][T17349] dump_stack_lvl+0x18c/0x250 [ 846.870652][T17349] ? show_regs_print_info+0x20/0x20 [ 846.875873][T17349] ? load_image+0x420/0x420 [ 846.880401][T17349] ? verify_lock_unused+0x140/0x140 [ 846.885605][T17349] should_fail_ex+0x394/0x4c0 [ 846.890289][T17349] should_failslab+0x9/0x20 [ 846.894792][T17349] slab_pre_alloc_hook+0x59/0x300 [ 846.899818][T17349] kmem_cache_alloc+0x5a/0x2c0 [ 846.904579][T17349] ? skb_clone+0x1eb/0x370 [ 846.908994][T17349] skb_clone+0x1eb/0x370 [ 846.913239][T17349] __netlink_deliver_tap+0x411/0x7f0 [ 846.918530][T17349] ? netlink_deliver_tap+0x2e/0x1b0 [ 846.923723][T17349] netlink_deliver_tap+0x19c/0x1b0 [ 846.928826][T17349] netlink_unicast+0x77b/0x930 [ 846.933598][T17349] netlink_sendmsg+0x8d0/0xbf0 [ 846.938361][T17349] ? netlink_getsockopt+0x590/0x590 [ 846.943558][T17349] ? apparmor_socket_sendmsg+0x8e/0x330 [ 846.949102][T17349] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 846.954404][T17349] ? security_socket_sendmsg+0x80/0xa0 [ 846.959870][T17349] ? netlink_getsockopt+0x590/0x590 [ 846.965081][T17349] ____sys_sendmsg+0x61b/0x980 [ 846.969855][T17349] ? __asan_memset+0x22/0x40 [ 846.974452][T17349] ? __sys_sendmsg_sock+0x30/0x30 [ 846.979469][T17349] ? __import_iovec+0x5f2/0x850 [ 846.984341][T17349] ? import_iovec+0x73/0xa0 [ 846.988855][T17349] ___sys_sendmsg+0x2a6/0x360 [ 846.993542][T17349] ? get_pid_task+0x20/0x1e0 [ 846.998140][T17349] ? __sys_sendmsg+0x2b0/0x2b0 [ 847.002919][T17349] ? __lock_acquire+0x7d80/0x7d80 [ 847.007959][T17349] __se_sys_sendmsg+0x1d0/0x2c0 [ 847.012806][T17349] ? __x64_sys_sendmsg+0x80/0x80 [ 847.017747][T17349] ? lockdep_hardirqs_on+0x98/0x150 [ 847.022944][T17349] do_syscall_64+0x55/0xb0 [ 847.027354][T17349] ? clear_bhb_loop+0x40/0x90 [ 847.032028][T17349] ? clear_bhb_loop+0x40/0x90 [ 847.036699][T17349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.042585][T17349] RIP: 0033:0x7f3db0f9e0d9 [ 847.046994][T17349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.066598][T17349] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.075006][T17349] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 847.082974][T17349] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 847.090946][T17349] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 847.098909][T17349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.106872][T17349] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 847.114850][T17349] [ 847.707221][T17361] syzkaller0: entered promiscuous mode [ 847.713019][T17361] syzkaller0: entered allmulticast mode [ 848.234987][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3891'. [ 848.517622][T17384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3892'. [ 849.567058][T17391] netlink: 'syz.1.3895': attribute type 26 has an invalid length. [ 849.585625][T17391] netlink: 62827 bytes leftover after parsing attributes in process `syz.1.3895'. [ 850.924603][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3894'. [ 850.984220][T17413] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.3902'. [ 851.087932][T17413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 851.109780][T17419] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3903'. [ 851.673855][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'. [ 852.732904][T17436] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3909'. [ 853.389745][T17445] netlink: 'syz.0.3911': attribute type 2 has an invalid length. [ 853.408621][T17445] netlink: 'syz.0.3911': attribute type 8 has an invalid length. [ 853.431551][T17445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3911'. [ 855.086230][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 855.342204][ T51] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 855.662579][T17474] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3917'. [ 856.184782][T17481] FAULT_INJECTION: forcing a failure. [ 856.184782][T17481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.224285][T17481] CPU: 1 PID: 17481 Comm: syz.0.3922 Not tainted syzkaller #0 [ 856.231802][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.241878][T17481] Call Trace: [ 856.245172][T17481] [ 856.248115][T17481] dump_stack_lvl+0x18c/0x250 [ 856.252822][T17481] ? show_regs_print_info+0x20/0x20 [ 856.258041][T17481] ? load_image+0x420/0x420 [ 856.262575][T17481] ? __lock_acquire+0x7d80/0x7d80 [ 856.267628][T17481] should_fail_ex+0x394/0x4c0 [ 856.272321][T17481] _copy_from_user+0x2f/0xe0 [ 856.276908][T17481] bpf_prog_test_run_skb+0x267/0x18f0 [ 856.282286][T17481] ? __fget_files+0x28/0x460 [ 856.286875][T17481] ? __fget_files+0x3fc/0x460 [ 856.291557][T17481] ? cpu_online+0x60/0x60 [ 856.295880][T17481] bpf_prog_test_run+0x31f/0x390 [ 856.300816][T17481] __sys_bpf+0x49d/0x890 [ 856.305055][T17481] ? bpf_link_show_fdinfo+0x390/0x390 [ 856.310447][T17481] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 856.316629][T17481] __x64_sys_bpf+0x7c/0x90 [ 856.321051][T17481] do_syscall_64+0x55/0xb0 [ 856.325482][T17481] ? clear_bhb_loop+0x40/0x90 [ 856.330164][T17481] ? clear_bhb_loop+0x40/0x90 [ 856.334860][T17481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.340759][T17481] RIP: 0033:0x7f3db0f9e0d9 [ 856.345171][T17481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.364781][T17481] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 856.373195][T17481] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 856.381159][T17481] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 856.389120][T17481] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 856.397084][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.405044][T17481] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 856.413021][T17481] [ 858.128999][T17500] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 858.171229][T17506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3929'. [ 858.197870][T17506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3929'. [ 858.244930][T17506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3929'. [ 858.268372][T17506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3929'. [ 858.605387][T17509] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 858.686005][T17518] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3931'. [ 859.508878][T13567] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 860.518996][T17534] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 861.058224][T17541] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 862.087947][ T3471] wlan1: Trigger new scan to find an IBSS to join [ 862.248668][T17557] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3945'. [ 863.130063][T15023] wlan1: Trigger new scan to find an IBSS to join [ 863.426467][T17562] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.3948'. [ 863.437273][ T51] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 863.627488][T17562] netlink: 'syz.1.3948': attribute type 1 has an invalid length. [ 864.163225][T17564] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 864.489273][T17574] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 865.010415][T17587] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3955'. [ 866.478960][T17599] netlink: 'syz.0.3961': attribute type 5 has an invalid length. [ 866.515934][T17597] syzkaller0: left promiscuous mode [ 866.535115][T17597] syzkaller0: left allmulticast mode [ 867.050757][T15019] wlan1: Trigger new scan to find an IBSS to join [ 867.553670][T17603] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 867.698714][T17611] netlink: 'syz.0.3964': attribute type 25 has an invalid length. [ 867.706588][T17611] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3964'. [ 868.049335][T17612] netlink: 'syz.3.3963': attribute type 29 has an invalid length. [ 868.089252][T15019] wlan1: Trigger new scan to find an IBSS to join [ 868.108243][T17612] netlink: 'syz.3.3963': attribute type 29 has an invalid length. [ 868.128152][T17618] netlink: 'syz.3.3963': attribute type 29 has an invalid length. [ 868.148844][T17612] netlink: 'syz.3.3963': attribute type 29 has an invalid length. [ 868.666858][T17627] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3968'. [ 869.486503][ T3471] wlan1: Creating new IBSS network, BSSID d6:22:df:f5:8a:ca [ 869.766476][T17642] netlink: 'syz.0.3971': attribute type 5 has an invalid length. [ 869.787688][T17642] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3971'. [ 869.892093][T17641] FAULT_INJECTION: forcing a failure. [ 869.892093][T17641] name failslab, interval 1, probability 0, space 0, times 0 [ 869.930147][T17641] CPU: 0 PID: 17641 Comm: syz.1.3972 Not tainted syzkaller #0 [ 869.933071][T17643] delete_channel: no stack [ 869.937647][T17641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 869.937660][T17641] Call Trace: [ 869.937667][T17641] [ 869.937675][T17641] dump_stack_lvl+0x18c/0x250 [ 869.937702][T17641] ? show_regs_print_info+0x20/0x20 [ 869.937727][T17641] ? load_image+0x420/0x420 [ 869.937754][T17641] ? __might_sleep+0xe0/0xe0 [ 869.937777][T17641] ? __lock_acquire+0x7d80/0x7d80 [ 869.937803][T17641] should_fail_ex+0x394/0x4c0 [ 869.937832][T17641] should_failslab+0x9/0x20 [ 869.937854][T17641] slab_pre_alloc_hook+0x59/0x300 [ 869.996610][T17641] ? exc_page_fault+0x8c/0x100 [ 870.001379][T17641] ? sk_prot_alloc+0xe7/0x210 [ 870.006052][T17641] ? sk_prot_alloc+0xe7/0x210 [ 870.010731][T17641] __kmem_cache_alloc_node+0x53/0x250 [ 870.016103][T17641] ? exc_page_fault+0x8c/0x100 [ 870.020867][T17641] ? sk_prot_alloc+0xe7/0x210 [ 870.025539][T17641] __kmalloc+0xa7/0x240 [ 870.029695][T17641] sk_prot_alloc+0xe7/0x210 [ 870.034195][T17641] ? sk_alloc+0x24/0x350 [ 870.038433][T17641] sk_alloc+0x3a/0x350 [ 870.042524][T17641] ? bpf_ctx_init+0x154/0x190 [ 870.047196][T17641] bpf_prog_test_run_skb+0x371/0x18f0 [ 870.052564][T17641] ? __fget_files+0x28/0x460 [ 870.057149][T17641] ? __fget_files+0x3fc/0x460 [ 870.061827][T17641] ? cpu_online+0x60/0x60 [ 870.066152][T17641] bpf_prog_test_run+0x31f/0x390 [ 870.071085][T17641] __sys_bpf+0x49d/0x890 [ 870.075320][T17641] ? bpf_link_show_fdinfo+0x390/0x390 [ 870.080698][T17641] ? lock_chain_count+0x20/0x20 [ 870.085560][T17641] __x64_sys_bpf+0x7c/0x90 [ 870.089982][T17641] do_syscall_64+0x55/0xb0 [ 870.094399][T17641] ? clear_bhb_loop+0x40/0x90 [ 870.099067][T17641] ? clear_bhb_loop+0x40/0x90 [ 870.103738][T17641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.109622][T17641] RIP: 0033:0x7f278cb9e0d9 [ 870.114033][T17641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.133652][T17641] RSP: 002b:00007f278db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 870.142062][T17641] RAX: ffffffffffffffda RBX: 00007f278ce25fa0 RCX: 00007f278cb9e0d9 [ 870.150028][T17641] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 870.157991][T17641] RBP: 00007f278db37090 R08: 0000000000000000 R09: 0000000000000000 [ 870.165952][T17641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.173912][T17641] R13: 00007f278ce26038 R14: 00007f278ce25fa0 R15: 00007ffc900733b8 [ 870.181886][T17641] [ 870.210928][T17640] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 870.242381][T17649] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3974'. [ 870.244975][T17643] delete_channel: no stack [ 870.339452][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.345873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.353850][T17676] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3981'. [ 873.495089][T17683] netlink: 'syz.1.3985': attribute type 10 has an invalid length. [ 873.618972][T17685] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 873.848356][T17682] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 874.529806][T17708] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3992'. [ 876.088634][T15019] wlan1: Trigger new scan to find an IBSS to join [ 877.765643][T17723] FAULT_INJECTION: forcing a failure. [ 877.765643][T17723] name failslab, interval 1, probability 0, space 0, times 0 [ 877.778957][T17723] CPU: 0 PID: 17723 Comm: syz.0.3999 Not tainted syzkaller #0 [ 877.786445][T17723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.796521][T17723] Call Trace: [ 877.799819][T17723] [ 877.802786][T17723] dump_stack_lvl+0x18c/0x250 [ 877.807498][T17723] ? show_regs_print_info+0x20/0x20 [ 877.812728][T17723] ? load_image+0x420/0x420 [ 877.817256][T17723] ? mark_lock+0x94/0x320 [ 877.821616][T17723] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 877.827709][T17723] ? __lock_acquire+0x1336/0x7d80 [ 877.832757][T17723] should_fail_ex+0x394/0x4c0 [ 877.837430][T17723] should_failslab+0x9/0x20 [ 877.841928][T17723] slab_pre_alloc_hook+0x59/0x300 [ 877.846955][T17723] kmem_cache_alloc+0x5a/0x2c0 [ 877.851712][T17723] ? radix_tree_node_alloc+0x7e/0x3a0 [ 877.857077][T17723] radix_tree_node_alloc+0x7e/0x3a0 [ 877.862265][T17723] idr_get_free+0x28f/0xa10 [ 877.866764][T17723] idr_alloc_cyclic+0x28a/0x610 [ 877.871672][T17723] ? idr_alloc+0x2e0/0x2e0 [ 877.876074][T17723] ? do_raw_spin_lock+0x11f/0x2b0 [ 877.881091][T17723] ? bpf_map_alloc_id+0x21/0xd0 [ 877.885930][T17723] bpf_map_alloc_id+0x40/0xd0 [ 877.890618][T17723] map_create+0xe24/0x12f0 [ 877.895022][T17723] __sys_bpf+0x651/0x890 [ 877.899251][T17723] ? bpf_link_show_fdinfo+0x390/0x390 [ 877.904612][T17723] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.910776][T17723] __x64_sys_bpf+0x7c/0x90 [ 877.915194][T17723] do_syscall_64+0x55/0xb0 [ 877.919595][T17723] ? clear_bhb_loop+0x40/0x90 [ 877.924257][T17723] ? clear_bhb_loop+0x40/0x90 [ 877.928936][T17723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.934813][T17723] RIP: 0033:0x7f3db0f9e0d9 [ 877.939234][T17723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.958828][T17723] RSP: 002b:00007f3db1daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 877.967227][T17723] RAX: ffffffffffffffda RBX: 00007f3db1225fa0 RCX: 00007f3db0f9e0d9 [ 877.975184][T17723] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 877.983139][T17723] RBP: 00007f3db1daa090 R08: 0000000000000000 R09: 0000000000000000 [ 877.991100][T17723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.999054][T17723] R13: 00007f3db1226038 R14: 00007f3db1225fa0 R15: 00007fffd4aaa558 [ 878.007020][T17723] [ 878.392110][T17727] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 879.834198][T17746] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 879.877942][T17751] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4008'. [ 880.088846][ T3471] wlan1: Trigger new scan to find an IBSS to join [ 880.993578][T17788] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4020'. [ 882.098619][T15040] wlan1: Trigger new scan to find an IBSS to join [ 882.238876][T15004] wlan1: Creating new IBSS network, BSSID ae:31:fe:57:3d:96 [ 882.319961][T15040] ------------[ cut here ]------------ [ 882.325847][T15040] WARNING: CPU: 1 PID: 15040 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 882.336537][T15040] Modules linked in: [ 882.337950][T17791] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 882.340803][T15040] CPU: 1 PID: 15040 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 882.357275][T15040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 882.367426][T15040] Workqueue: cfg80211 cfg80211_event_work [ 882.373927][T15040] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 882.380416][T15040] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 39 9a f7 0f 0b eb bf e8 c5 39 9a f7 <0f> 0b eb b6 e8 bc 39 9a f7 0f 0b e9 e2 fd ff ff e8 b0 39 9a f7 0f [ 882.400120][T15040] RSP: 0018:ffffc9000f2ffa40 EFLAGS: 00010293 [ 882.406220][T15040] RAX: ffffffff89ed37bb RBX: dffffc0000000000 RCX: ffff88804daabc00 [ 882.414530][T15040] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 882.422605][T15040] RBP: ffffc9000f2ffaf8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 882.430853][T15040] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff888069990d10 [ 882.438985][T15040] R13: ffff888025d2b618 R14: 1ffff92001e5ff4c R15: 000000000000001f [ 882.446991][T15040] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 882.456054][T15040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 882.462781][T15040] CR2: 0000556db199d660 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 882.470850][T15040] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 882.479320][T15040] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 882.487337][T15040] Call Trace: [ 882.490939][T15040] [ 882.493974][T15040] ? trace_rdev_return_void+0x1c0/0x1c0 [ 882.499627][T15040] cfg80211_process_wdev_events+0x396/0x500 [ 882.505576][T15040] cfg80211_process_rdev_events+0xa1/0x110 [ 882.511496][T15040] cfg80211_event_work+0x2f/0x40 [ 882.516469][T15040] ? process_scheduled_works+0x975/0x1600 [ 882.522264][T15040] process_scheduled_works+0xa60/0x1600 [ 882.527941][T15040] ? worker_attach_to_pool+0x370/0x370 [ 882.533436][T15040] ? assign_work+0x3cc/0x5d0 [ 882.538108][T15040] worker_thread+0xa5e/0xfe0 [ 882.542749][T15040] kthread+0x2fa/0x390 [ 882.547099][T15040] ? pr_cont_work+0x550/0x550 [ 882.551895][T15040] ? kthread_blkcg+0xd0/0xd0 [ 882.556511][T15040] ret_from_fork+0x48/0x80 [ 882.561083][T15040] ? kthread_blkcg+0xd0/0xd0 [ 882.565702][T15040] ret_from_fork_asm+0x11/0x20 [ 882.570592][T15040] [ 882.573635][T15040] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 882.580925][T15040] CPU: 1 PID: 15040 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 882.588663][T15040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 882.598737][T15040] Workqueue: cfg80211 cfg80211_event_work [ 882.604493][T15040] Call Trace: [ 882.607783][T15040] [ 882.610726][T15040] dump_stack_lvl+0x18c/0x250 [ 882.615428][T15040] ? show_regs_print_info+0x20/0x20 [ 882.620649][T15040] ? load_image+0x420/0x420 [ 882.625200][T15040] panic+0x2ca/0x720 [ 882.629124][T15040] ? bpf_jit_dump+0xd0/0xd0 [ 882.633663][T15040] ? ret_from_fork_asm+0x11/0x20 [ 882.638624][T15040] __warn+0x2e0/0x470 [ 882.642605][T15040] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 882.648161][T15040] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 882.653721][T15040] report_bug+0x2be/0x4f0 [ 882.658059][T15040] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 882.663624][T15040] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 882.669177][T15040] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 882.674719][T15040] handle_bug+0xcf/0x120 [ 882.678960][T15040] exc_invalid_op+0x1a/0x50 [ 882.683461][T15040] asm_exc_invalid_op+0x1a/0x20 [ 882.688308][T15040] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 882.694461][T15040] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 39 9a f7 0f 0b eb bf e8 c5 39 9a f7 <0f> 0b eb b6 e8 bc 39 9a f7 0f 0b e9 e2 fd ff ff e8 b0 39 9a f7 0f [ 882.714060][T15040] RSP: 0018:ffffc9000f2ffa40 EFLAGS: 00010293 [ 882.720119][T15040] RAX: ffffffff89ed37bb RBX: dffffc0000000000 RCX: ffff88804daabc00 [ 882.728089][T15040] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 882.736060][T15040] RBP: ffffc9000f2ffaf8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 882.744026][T15040] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff888069990d10 [ 882.751989][T15040] R13: ffff888025d2b618 R14: 1ffff92001e5ff4c R15: 000000000000001f [ 882.759962][T15040] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 882.765517][T15040] ? trace_rdev_return_void+0x1c0/0x1c0 [ 882.771065][T15040] cfg80211_process_wdev_events+0x396/0x500 [ 882.776959][T15040] cfg80211_process_rdev_events+0xa1/0x110 [ 882.782765][T15040] cfg80211_event_work+0x2f/0x40 [ 882.787701][T15040] ? process_scheduled_works+0x975/0x1600 [ 882.793414][T15040] process_scheduled_works+0xa60/0x1600 [ 882.798972][T15040] ? worker_attach_to_pool+0x370/0x370 [ 882.804429][T15040] ? assign_work+0x3cc/0x5d0 [ 882.809014][T15040] worker_thread+0xa5e/0xfe0 [ 882.813650][T15040] kthread+0x2fa/0x390 [ 882.817711][T15040] ? pr_cont_work+0x550/0x550 [ 882.822384][T15040] ? kthread_blkcg+0xd0/0xd0 [ 882.826963][T15040] ret_from_fork+0x48/0x80 [ 882.831372][T15040] ? kthread_blkcg+0xd0/0xd0 [ 882.835954][T15040] ret_from_fork_asm+0x11/0x20 [ 882.840720][T15040] [ 882.843860][T15040] Kernel Offset: disabled [ 882.848241][T15040] Rebooting in 86400 seconds..