last executing test programs: 26.503926716s ago: executing program 2 (id=6434): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x9, 0x742b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x401, 0xc2de}, 0x14000, 0x32, 0x43a1bd76, 0x7, 0x2, 0xa, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0x5}, 0x106c48, 0xc8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x100) sendmsg$inet(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x8905, &(0x7f0000000100)) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000c00050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x11, 0x5, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715", 0x31}, {&(0x7f0000001980)="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", 0x7c0}], 0x2}, 0x24000008) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r12, 0x6, 0x3, &(0x7f00000000c0), 0x4) 26.278420441s ago: executing program 2 (id=6440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a89da6362a87152b", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000280)="0678"}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'pimreg0\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x28, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000d0000000000000000800000186ac100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000af000000186300000e00000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005400000085", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185000000b0000000000000000000000048940000100000085000000c4000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x0, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0xd, 0xa}, {0x1, 0x3, 0x1, 0x5}, {0x5, 0x4, 0x4, 0xb}, {0x1, 0x1, 0xc, 0x6}, {0x1, 0x3, 0xf}, {0x4, 0x3, 0x2, 0xa}, {0x5, 0x1, 0xf, 0xa}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000280)="8d50895c4c690dea156e85f7db65", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x2000000000000058, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0xa4, &(0x7f0000000000)=""/164, 0x0, 0x13}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e000000100081a7e6b62aa73772cc9f1fa1f848430000009bb9ef7f75c9f12c0e000a000f000000", 0x28}, {&(0x7f0000000000)="606db7ea816b", 0x6}], 0x2}, 0x8044) 25.987505677s ago: executing program 2 (id=6442): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033300fb80000000000000875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x1c440, 0x4, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000040000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.173937328s ago: executing program 2 (id=6455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 23.974653833s ago: executing program 2 (id=6457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 23.142901331s ago: executing program 2 (id=6459): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x9, 0x742b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x401, 0xc2de}, 0x14000, 0x32, 0x43a1bd76, 0x7, 0x2, 0xa, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0x5}, 0x106c48, 0xc8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x100) sendmsg$inet(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x8905, &(0x7f0000000100)) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000c00050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x11, 0x5, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715", 0x31}, {&(0x7f0000001980)="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", 0x7c0}], 0x2}, 0x24000008) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4) 19.922441864s ago: executing program 0 (id=6475): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033300fb80000000000000875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x1c440, 0x4, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000040000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.921364274s ago: executing program 3 (id=6477): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 18.943518566s ago: executing program 3 (id=6479): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033300fb80000000000000875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000040000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.840892858s ago: executing program 0 (id=6481): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x1b, &(0x7f0000000040), 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x2}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x5, [@func={0xc, 0x0, 0x0, 0xc, 0x1}, @union={0x8, 0xa, 0x0, 0x5, 0x0, 0x9, [{0xa, 0x2, 0xd23}, {0x3, 0x5, 0x9292}, {0x3, 0x4, 0x4}, {0x4, 0x1, 0x8001}, {0x10, 0x5, 0x80}, {0xb, 0x0, 0x3}, {0x6, 0x5, 0xb}, {0x1, 0x1, 0x2}, {0xb, 0x1, 0x478}, {0x9, 0x1, 0x4}]}, @enum64={0xa, 0x5, 0x0, 0x13, 0x1, 0xe, [{0x2, 0x733c, 0x9}, {0x8, 0x7fffffff, 0x61}, {0xe, 0xfffffffb, 0xaa08}, {0x1, 0x1, 0x6}, {0xf, 0x1, 0x8}]}, @float={0xc, 0x0, 0x0, 0x10, 0xc}, @enum64={0xe, 0x1, 0x0, 0x13, 0x1, 0x0, [{0x1, 0x2, 0xf}]}]}, {0x0, [0x5f, 0x30, 0x30]}}, &(0x7f0000000900)=""/228, 0x119, 0xe4, 0xeb3, 0x9, 0x10000}, 0x28) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9af9}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000bc0)='GPL\x00', 0x2, 0x40, &(0x7f0000000c00)=""/64, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xa, 0x3, 0x9}, 0x10, 0x24c7a, r2, 0x1, &(0x7f0000000cc0)=[r5, r5, r5, r5, r5, r5, 0xffffffffffffffff, r5, r5], &(0x7f0000000d00)=[{0x2, 0x5, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r5, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)=r4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000b80)="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", 0x3}, 0x38) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b0981334afa94d03d91841c75a69c2069ba4bbee2bf537a1fc5b34c0c5058d862122dfc2a9ff725e2ba1305f315c430b38263d97c468e728c74bd7c0393eabf3c701ea78bb2adbfeebfdc3238b3bdf23f08d1d078630395ee6811926f59cdd2bc0faf342c5a38e897044708cd8414532cb84459282b4f35aa", 0x800, r11}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ec0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000580)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xe}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xce}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f0000000740)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000780), 0x40f00, 0x2a, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000a40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x7, 0x81, 0x4}, 0x10, 0x2b62e, r9, 0x0, &(0x7f0000000f00)=[r10, r12, r5], &(0x7f0000000f40), 0x10, 0x6f25}, 0x94) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.898038609s ago: executing program 3 (id=6483): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x9, 0x742b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x401, 0xc2de}, 0x14000, 0x32, 0x43a1bd76, 0x7, 0x2, 0xa, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0x5}, 0x106c48, 0xc8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x100) sendmsg$inet(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8905, &(0x7f0000000100)) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000c00050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x11, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715", 0x31}, {&(0x7f0000001980)="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", 0x7c0}], 0x2}, 0x24000008) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r10, 0x6, 0x3, &(0x7f00000000c0), 0x4) 17.341166182s ago: executing program 3 (id=6485): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 17.184049315s ago: executing program 0 (id=6487): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 17.064976377s ago: executing program 1 (id=6488): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}, 0x0) 16.915730201s ago: executing program 1 (id=6489): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004e00000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 16.744161115s ago: executing program 1 (id=6490): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033300fb80000000000000875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000040000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.691553746s ago: executing program 3 (id=6491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a89da6362a87152b", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000280)="0678"}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'pimreg0\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x28, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000d0000000000000000800000186ac100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000af000000186300000e00000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000054000000850000000600000004160101ccffffff", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185000000b0000000000000000000000048940000100000085000000c4000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x0, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0xd, 0xa}, {0x1, 0x3, 0x1, 0x5}, {0x5, 0x4, 0x4, 0xb}, {0x1, 0x1, 0xc, 0x6}, {0x1, 0x3, 0xf}, {0x4, 0x3, 0x2, 0xa}, {0x5, 0x1, 0xf, 0xa}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000280)="8d50895c4c690dea156e85f7db65", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x2000000000000058, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0xa4, &(0x7f0000000000)=""/164, 0x0, 0x13}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e000000100081a7e6b62aa73772cc9f1fa1f848430000009bb9ef7f75c9f12c0e000a000f000000", 0x28}, {&(0x7f0000000000)="606db7ea816b", 0x6}], 0x2}, 0x8044) 16.434994482s ago: executing program 0 (id=6492): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x9, 0x742b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x401, 0xc2de}, 0x14000, 0x32, 0x43a1bd76, 0x7, 0x2, 0xa, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0x5}, 0x106c48, 0xc8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x100) sendmsg$inet(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8905, &(0x7f0000000100)) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000c00050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x11, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715", 0x31}, {&(0x7f0000001980)="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", 0x7c0}], 0x2}, 0x24000008) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r10, 0x6, 0x3, &(0x7f00000000c0), 0x4) 16.281262415s ago: executing program 3 (id=6493): socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001140)={0x5}, 0x8) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x20028814) 15.957953592s ago: executing program 0 (id=6494): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@generic={0x1e, "e27329a1fe85f2b89b437f062dd410d91b1c828c04714139f96b67c96c8829d32f6962ff263437bdff8381ea4d64df5abdf52e2193224ad4fc4b04e61b25fe6961377360b4fc3c032e8ce001ea69b4c0158b3b92c6998ab3581c859b7221d468187499690ee46deba667ecff63492483f81018d13312b49a41e432c35fd3"}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d8150001000000000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3161f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c0", 0x80}, {&(0x7f0000000880)="4f0430b773745455932126efc5db584e00f2d9837a5676e253e81a70f9755c178b07254280be866018160120629f9e034b82fd9870b385276d412194f1f70cc63513f600ad3c31bc0403edee0dd4c26087a1a4e9fae5fa6a", 0x58}], 0x2}, 0x4009884) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x9, &(0x7f0000000100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000900", 0x33fe0}], 0x1}, 0x0) 15.832256395s ago: executing program 1 (id=6495): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4a, &(0x7f0000000280)=r2, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x8, 0x4800, 0x9, 0x54020, 0x1, 0x82, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xec1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00'}, 0x18) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa7c, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0xbe, &(0x7f0000000380)=""/190, 0x40f00, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000800)=[r8, r9, r10, r11, r12, r13, 0xffffffffffffffff], &(0x7f0000000840)=[{0x2, 0x5, 0x8, 0x2}, {0x3, 0x3, 0x1, 0x5}, {0x5, 0x1, 0x1, 0xb}, {0x5, 0x1, 0xf, 0x7}, {0x4, 0x1, 0xd, 0x8}, {0x2, 0x2, 0x4, 0x7}, {0x5, 0x5, 0x10, 0x1}], 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47ca, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r14, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r17 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r17, 0x1, 0x41, &(0x7f0000000000)=r16, 0x4) sendmsg$kcm(r17, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) 15.539879371s ago: executing program 0 (id=6496): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10102, 0x35, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x9, 0xde, &(0x7f0000000940)=""/222, 0x0, 0x48}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) close(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) unlink(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0) 15.539169051s ago: executing program 1 (id=6497): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcda, 0x43a1bd76, 0x0, 0xa, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x7, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x610a3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0x6820, 0xfffffffffffffffe, 0x0, 0x5, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(r0, 0x0, 0x2000) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040), 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a1564", 0x19}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x76, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0x1, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="140000000000000000000000020000000000080000000000a0000000000000000000000007000000444415617f000001000000050a01010000000003e0000002000002bbac1414bb0000000200000000000000060a010102000000037f00000100000007e00000020000006300862b000000010702020b9a35ab488078a0dc1f000207068b7a7e4e0604469c07081ef5b12931de06020702941186ed644d9a1963e7d0b6331a85fdef00070beb0a010100000000000000001100000000000000000000000100000002000000000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="013a2517f75cd087b8b66500000000e000000200000000140000000000000000000000010000000500b27c497800000000000011000000000000000000000001000027213923593bccea001481230c000000dc89cd0965c7942244e7cd9c1662a90fb80bf9572a1dcd6d14aff02fd7c09c750a51722dc24dd9bbc726719b0c105049ab53f3ab2bc2bb6a69a5f3b7aa91b1fcfefd1710f51522105538ddbd4c4f3c5e6263be448e"], 0x120}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x32}, 0x30044001) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, 0x0, 0x0) 15.14014994s ago: executing program 1 (id=6498): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 1.105226725s ago: executing program 32 (id=6493): socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001140)={0x5}, 0x8) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x20028814) 42.471559ms ago: executing program 33 (id=6496): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10102, 0x35, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x9, 0xde, &(0x7f0000000940)=""/222, 0x0, 0x48}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) close(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) unlink(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0) 0s ago: executing program 34 (id=6498): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) kernel console output (not intermixed with test programs): ce wg1 is of different type [ 1208.338912][T24943] team0: Device wg1 is of different type [ 1208.385765][T24946] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5766'. [ 1208.407810][T24946] bridge_slave_1: default FDB implementation only supports local addresses [ 1208.453120][T24947] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5765'. [ 1208.593939][T24954] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1208.716064][T24959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1210.048413][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1210.629426][T24964] validate_nla: 4 callbacks suppressed [ 1210.629443][T24964] netlink: 'syz.1.5771': attribute type 21 has an invalid length. [ 1210.643345][T24964] IPv6: Can't replace route, no match found [ 1210.649765][T24969] netlink: 'syz.1.5771': attribute type 10 has an invalid length. [ 1210.668795][T24969] team0: Device wg1 is of different type [ 1210.679091][T24971] netlink: 'syz.0.5772': attribute type 21 has an invalid length. [ 1210.702357][T24971] IPv6: Can't replace route, no match found [ 1210.708396][T24972] netlink: 'syz.0.5772': attribute type 10 has an invalid length. [ 1210.765372][T24972] team0: Device wg1 is of different type [ 1210.988476][ T7496] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1211.072749][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1211.082683][ T7480] wlan1: Trigger new scan to find an IBSS to join [ 1211.093359][T24982] netlink: 'syz.0.5775': attribute type 1 has an invalid length. [ 1211.112452][T24982] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1212.892882][T24984] netlink: 'syz.1.5776': attribute type 10 has an invalid length. [ 1212.905491][T24984] team0: Device wg1 is of different type [ 1213.171222][T25000] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1213.200604][T24995] netlink: 'syz.2.5777': attribute type 21 has an invalid length. [ 1213.244038][T24995] IPv6: Can't replace route, no match found [ 1213.289286][T25002] netlink: 'syz.3.5778': attribute type 10 has an invalid length. [ 1213.369458][T24995] netlink: 'syz.2.5777': attribute type 10 has an invalid length. [ 1213.446545][T24995] team0: Device wg1 is of different type [ 1213.656850][T25007] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5780'. [ 1213.667812][T25007] bridge_slave_1: default FDB implementation only supports local addresses [ 1213.735667][T25009] netlink: 'syz.1.5782': attribute type 1 has an invalid length. [ 1213.749244][T25009] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5782'. [ 1213.790402][T25013] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5783'. [ 1213.895897][T25014] IPv6: Can't replace route, no match found [ 1213.990075][T25014] team0: Device wg1 is of different type [ 1214.032582][ T7480] wlan1: Trigger new scan to find an IBSS to join [ 1217.072685][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1217.079322][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1217.695197][T25021] validate_nla: 3 callbacks suppressed [ 1217.695214][T25021] netlink: 'syz.2.5787': attribute type 10 has an invalid length. [ 1217.712004][T25021] team0: Device wg1 is of different type [ 1217.722727][T25027] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.5796'. [ 1217.732965][T25025] netlink: 'syz.1.5788': attribute type 21 has an invalid length. [ 1217.755323][T25025] IPv6: Can't replace route, no match found [ 1217.772645][T25029] netlink: 'syz.1.5788': attribute type 10 has an invalid length. [ 1217.790939][T25029] team0: Device wg1 is of different type [ 1217.928898][T25037] netlink: 'syz.3.5790': attribute type 1 has an invalid length. [ 1217.959754][T25037] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5790'. [ 1217.970786][T25035] netlink: 'syz.2.5789': attribute type 21 has an invalid length. [ 1217.980251][T25035] IPv6: Can't replace route, no match found [ 1217.993758][ T7498] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1218.015613][T25035] netlink: 'syz.2.5789': attribute type 10 has an invalid length. [ 1218.040726][T25035] team0: Device wg1 is of different type [ 1218.123538][T25041] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1218.142527][T25041] netlink: 'syz.1.5792': attribute type 10 has an invalid length. [ 1220.035416][ T7480] wlan1: Trigger new scan to find an IBSS to join [ 1220.452909][T25058] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5797'. [ 1220.462524][T25058] bridge_slave_1: default FDB implementation only supports local addresses [ 1220.471229][T25057] netlink: 'syz.0.5794': attribute type 21 has an invalid length. [ 1220.479874][T25057] IPv6: Can't replace route, no match found [ 1220.487882][T25060] netlink: 'syz.1.5798': attribute type 10 has an invalid length. [ 1220.508961][T25060] team0: Device wg1 is of different type [ 1220.545372][T25063] netlink: 'syz.0.5794': attribute type 10 has an invalid length. [ 1220.577591][T25063] team0: Device wg1 is of different type [ 1220.587666][T25065] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5799'. [ 1220.688788][T25067] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5800'. [ 1220.808602][T25069] team0: Device wg1 is of different type [ 1220.970731][ T7498] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1222.032540][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1224.365845][T25073] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.5801'. [ 1224.375502][T25075] validate_nla: 3 callbacks suppressed [ 1224.375518][T25075] netlink: 'syz.0.5810': attribute type 10 has an invalid length. [ 1224.397183][T25075] team0: Device wg1 is of different type [ 1224.556131][T25084] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1224.594078][T25084] netlink: 'syz.2.5803': attribute type 10 has an invalid length. [ 1224.735434][T25087] netlink: 'syz.0.5802': attribute type 21 has an invalid length. [ 1224.764016][T25087] IPv6: Can't replace route, no match found [ 1224.844431][T25087] netlink: 'syz.0.5802': attribute type 10 has an invalid length. [ 1224.896160][T25087] team0: Device wg1 is of different type [ 1225.014931][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1225.157246][T25094] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5807'. [ 1225.167907][T25094] bridge_slave_1: default FDB implementation only supports local addresses [ 1225.933267][ T7492] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1226.074382][T25097] netlink: 'syz.3.5812': attribute type 10 has an invalid length. [ 1226.085320][T25102] netlink: 'syz.1.5811': attribute type 1 has an invalid length. [ 1226.101467][T25102] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5811'. [ 1226.111944][T25097] team0: Device wg1 is of different type [ 1226.208884][T25103] netlink: 'syz.2.5809': attribute type 21 has an invalid length. [ 1226.232954][T25103] IPv6: Can't replace route, no match found [ 1226.292709][T25103] netlink: 'syz.2.5809': attribute type 10 has an invalid length. [ 1226.311227][T25103] team0: Device wg1 is of different type [ 1228.130053][T25108] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.5813'. [ 1228.147895][T25106] netlink: 'syz.2.5823': attribute type 10 has an invalid length. [ 1228.161931][T25106] team0: Device wg1 is of different type [ 1228.475459][T25114] netlink: 'syz.3.5815': attribute type 21 has an invalid length. [ 1228.486725][T25114] IPv6: Can't replace route, no match found [ 1228.545926][T25114] team0: Device wg1 is of different type [ 1228.578068][T25116] IPv6: Can't replace route, no match found [ 1228.649452][T25116] team0: Device wg1 is of different type [ 1228.724682][T25122] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1228.785193][T25124] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5819'. [ 1228.795759][T25124] bridge_slave_1: default FDB implementation only supports local addresses [ 1229.021104][T25133] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5826'. [ 1229.091483][T25134] IPv6: Can't replace route, no match found [ 1229.198785][T25134] team0: Device wg1 is of different type [ 1231.027933][T25140] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5828'. [ 1231.037491][T25140] bridge_slave_1: default FDB implementation only supports local addresses [ 1231.146559][T25148] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5838'. [ 1231.184235][T25148] bridge_slave_1: default FDB implementation only supports local addresses [ 1231.217233][T25146] validate_nla: 7 callbacks suppressed [ 1231.217250][T25146] netlink: 'syz.2.5830': attribute type 10 has an invalid length. [ 1231.252627][T25146] team0: Device wg1 is of different type [ 1231.298447][T25150] netlink: 'syz.0.5831': attribute type 21 has an invalid length. [ 1231.310260][T25150] IPv6: Can't replace route, no match found [ 1231.333989][T25150] netlink: 'syz.0.5831': attribute type 10 has an invalid length. [ 1231.362124][T25150] team0: Device wg1 is of different type [ 1231.611235][T25159] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1231.667044][T25159] netlink: 'syz.1.5833': attribute type 10 has an invalid length. [ 1231.898713][T25169] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1231.922628][T25166] netlink: 'syz.1.5836': attribute type 21 has an invalid length. [ 1231.931305][T25166] IPv6: Can't replace route, no match found [ 1231.950251][T25166] netlink: 'syz.1.5836': attribute type 10 has an invalid length. [ 1231.975791][T25166] team0: Device wg1 is of different type [ 1232.022551][T25169] netlink: 'syz.0.5845': attribute type 10 has an invalid length. [ 1232.160054][T25175] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5840'. [ 1232.174038][T25175] bridge_slave_1: default FDB implementation only supports local addresses [ 1232.210869][T25172] netlink: 'syz.0.5837': attribute type 21 has an invalid length. [ 1232.220610][T25172] IPv6: Can't replace route, no match found [ 1232.237625][T25172] netlink: 'syz.0.5837': attribute type 10 has an invalid length. [ 1232.265066][T25172] team0: Device wg1 is of different type [ 1232.333583][T25178] netlink: 'syz.2.5841': attribute type 1 has an invalid length. [ 1232.346350][T25178] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5841'. [ 1232.389123][T25180] team0: Device wg1 is of different type [ 1232.560141][T25183] IPv6: Can't replace route, no match found [ 1232.592135][T25183] team0: Device wg1 is of different type [ 1234.037465][ T7498] wlan1: Trigger new scan to find an IBSS to join [ 1234.044170][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1234.538808][T25185] team0: Device wg1 is of different type [ 1234.556877][T25195] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5847'. [ 1234.569787][T25195] bridge_slave_1: default FDB implementation only supports local addresses [ 1234.762590][T25204] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1234.869893][T25206] team0: Device wg1 is of different type [ 1235.073697][T25213] team0: Device wg1 is of different type [ 1235.140752][T25217] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1235.169756][T25211] IPv6: Can't replace route, no match found [ 1235.231746][T25211] team0: Device wg1 is of different type [ 1235.366716][T25221] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5858'. [ 1235.381771][T25221] bridge_slave_1: default FDB implementation only supports local addresses [ 1235.470419][T25224] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5856'. [ 1235.480145][T25224] bridge_slave_1: default FDB implementation only supports local addresses [ 1235.546540][T25227] team0: Device wg1 is of different type [ 1235.851201][T25232] team0: Device wg1 is of different type [ 1236.241742][T25234] validate_nla: 12 callbacks suppressed [ 1236.241761][T25234] netlink: 'syz.3.5863': attribute type 1 has an invalid length. [ 1236.256327][T25234] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5863'. [ 1236.533036][T25241] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1236.558464][T25245] netlink: 'syz.2.5864': attribute type 10 has an invalid length. [ 1236.619727][T25249] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1237.074988][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1238.475200][T25253] netlink: 'syz.0.5865': attribute type 10 has an invalid length. [ 1238.483518][T25252] netlink: 'syz.2.5866': attribute type 10 has an invalid length. [ 1238.495029][T25252] team0: Device wg1 is of different type [ 1238.719638][T25258] netlink: 'syz.0.5867': attribute type 10 has an invalid length. [ 1238.804948][T25258] team0: Device wg1 is of different type [ 1238.859392][T25263] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5872'. [ 1238.878129][T25263] bridge_slave_1: default FDB implementation only supports local addresses [ 1238.898498][T25265] veth1_to_bond: entered allmulticast mode [ 1238.920411][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.927008][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.992972][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1239.107850][T25269] netlink: 'syz.0.5873': attribute type 10 has an invalid length. [ 1239.229549][T25269] team0: Device wg1 is of different type [ 1239.443318][T25281] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1239.491814][T25281] netlink: 'syz.3.5876': attribute type 10 has an invalid length. [ 1239.543797][T25284] netlink: 'syz.0.5878': attribute type 10 has an invalid length. [ 1239.560725][T25284] team0: Device wg1 is of different type [ 1239.745207][T25291] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1239.796767][T25294] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1239.830250][T25291] netlink: 'syz.1.5887': attribute type 10 has an invalid length. [ 1239.853330][T25294] netlink: 'syz.3.5879': attribute type 10 has an invalid length. [ 1240.040672][T25300] FAULT_INJECTION: forcing a failure. [ 1240.040672][T25300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.062416][T25300] CPU: 0 PID: 25300 Comm: syz.2.5883 Not tainted syzkaller #0 [ 1240.069962][T25300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1240.080064][T25300] Call Trace: [ 1240.083428][T25300] [ 1240.086405][T25300] dump_stack_lvl+0x18c/0x250 [ 1240.091178][T25300] ? show_regs_print_info+0x20/0x20 [ 1240.096434][T25300] ? load_image+0x420/0x420 [ 1240.100994][T25300] ? __might_fault+0xaa/0x120 [ 1240.105708][T25300] ? __lock_acquire+0x7d80/0x7d80 [ 1240.110767][T25300] ? __virt_addr_valid+0x10c/0x380 [ 1240.115920][T25300] should_fail_ex+0x394/0x4c0 [ 1240.120644][T25300] _copy_to_user+0x2f/0xa0 [ 1240.125191][T25300] generic_map_lookup_batch+0x85d/0xc60 [ 1240.130775][T25300] ? bpf_map_update_value+0x710/0x710 [ 1240.136184][T25300] ? __fdget+0x180/0x210 [ 1240.140470][T25300] ? bpf_map_update_value+0x710/0x710 [ 1240.145863][T25300] bpf_map_do_batch+0x2e3/0x600 [ 1240.150745][T25300] __sys_bpf+0x7d7/0x890 [ 1240.155015][T25300] ? bpf_link_show_fdinfo+0x390/0x390 [ 1240.160421][T25300] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1240.166632][T25300] __x64_sys_bpf+0x7c/0x90 [ 1240.171078][T25300] do_syscall_64+0x55/0xb0 [ 1240.175530][T25300] ? clear_bhb_loop+0x40/0x90 [ 1240.180233][T25300] ? clear_bhb_loop+0x40/0x90 [ 1240.184941][T25300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1240.190876][T25300] RIP: 0033:0x7f28f5d9de59 [ 1240.195341][T25300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.214996][T25300] RSP: 002b:00007f28f6c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1240.223440][T25300] RAX: ffffffffffffffda RBX: 00007f28f6025fa0 RCX: 00007f28f5d9de59 [ 1240.231441][T25300] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 1240.239441][T25300] RBP: 00007f28f6c25090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.247436][T25300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1240.255432][T25300] R13: 00007f28f6026038 R14: 00007f28f6025fa0 R15: 00007ffcac20ffa8 [ 1240.263452][T25300] [ 1240.352642][T25308] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1240.428587][T25304] team0: Device wg1 is of different type [ 1241.005220][T25319] team0: Device wg1 is of different type [ 1241.043689][T25321] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5890'. [ 1241.065850][T25321] bridge_slave_1: default FDB implementation only supports local addresses [ 1241.109495][T25327] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1241.214939][T25326] team0: Device wg1 is of different type [ 1241.417161][T25338] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1241.473350][T25338] validate_nla: 5 callbacks suppressed [ 1241.473366][T25338] netlink: 'syz.0.5894': attribute type 10 has an invalid length. [ 1241.849577][T25351] netlink: 'syz.2.5900': attribute type 10 has an invalid length. [ 1241.919536][T25351] team0: Device wg1 is of different type [ 1242.033491][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1242.180979][T25362] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1242.220210][T25361] netlink: 'syz.0.5904': attribute type 10 has an invalid length. [ 1242.252768][T25361] team0: Device wg1 is of different type [ 1242.287425][T25368] netlink: 'syz.3.5903': attribute type 10 has an invalid length. [ 1242.691257][T25378] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5911'. [ 1242.703609][T25378] bridge_slave_1: default FDB implementation only supports local addresses [ 1243.002983][T25391] ipvlan1: entered promiscuous mode [ 1243.032059][T25391] ipvlan1: entered allmulticast mode [ 1243.052731][T25391] veth0_vlan: entered allmulticast mode [ 1243.083459][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1243.794351][T25398] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1243.814064][T25402] netlink: 'syz.0.5917': attribute type 10 has an invalid length. [ 1243.828253][T25403] netlink: 'syz.2.5918': attribute type 10 has an invalid length. [ 1243.841348][T25403] team0: Device wg1 is of different type [ 1244.070694][T25408] FAULT_INJECTION: forcing a failure. [ 1244.070694][T25408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1244.115624][T25408] CPU: 0 PID: 25408 Comm: syz.3.5920 Not tainted syzkaller #0 [ 1244.123210][T25408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1244.133307][T25408] Call Trace: [ 1244.136617][T25408] [ 1244.139578][T25408] dump_stack_lvl+0x18c/0x250 [ 1244.144315][T25408] ? show_regs_print_info+0x20/0x20 [ 1244.149576][T25408] ? load_image+0x420/0x420 [ 1244.154126][T25408] ? __might_fault+0xaa/0x120 [ 1244.158843][T25408] ? __lock_acquire+0x7d80/0x7d80 [ 1244.163921][T25408] should_fail_ex+0x394/0x4c0 [ 1244.168652][T25408] _copy_from_user+0x2f/0xe0 [ 1244.173284][T25408] get_user_ifreq+0x6b/0x180 [ 1244.177913][T25408] sock_ioctl+0x6f1/0x7e0 [ 1244.182285][T25408] ? sock_poll+0x3e0/0x3e0 [ 1244.186758][T25408] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1244.191734][T25408] ? security_file_ioctl+0x80/0xa0 [ 1244.196891][T25408] ? sock_poll+0x3e0/0x3e0 [ 1244.201338][T25408] __se_sys_ioctl+0xfd/0x170 [ 1244.205972][T25408] do_syscall_64+0x55/0xb0 [ 1244.210427][T25408] ? clear_bhb_loop+0x40/0x90 [ 1244.215145][T25408] ? clear_bhb_loop+0x40/0x90 [ 1244.219856][T25408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1244.225799][T25408] RIP: 0033:0x7fa13e59de59 [ 1244.230253][T25408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.249887][T25408] RSP: 002b:00007fa13f45e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.258370][T25408] RAX: ffffffffffffffda RBX: 00007fa13e825fa0 RCX: 00007fa13e59de59 [ 1244.266377][T25408] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 1244.274380][T25408] RBP: 00007fa13f45e090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.282388][T25408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.290391][T25408] R13: 00007fa13e826038 R14: 00007fa13e825fa0 R15: 00007fff73bdd558 [ 1244.298432][T25408] [ 1244.997215][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1246.032639][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1247.083543][ T7498] wlan1: Trigger new scan to find an IBSS to join [ 1248.028918][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1248.905278][T25432] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5928'. [ 1248.920088][T25432] bridge_slave_1: default FDB implementation only supports local addresses [ 1248.992498][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1248.999207][ T7480] wlan1: Trigger new scan to find an IBSS to join [ 1249.076966][T25442] netlink: 'syz.2.5931': attribute type 10 has an invalid length. [ 1249.103178][T25442] team0: Device wg1 is of different type [ 1249.157489][T25444] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1249.221741][T25446] netlink: 'syz.3.5932': attribute type 10 has an invalid length. [ 1249.275967][T25446] team0: Device wg1 is of different type [ 1249.298581][T25444] netlink: 'syz.1.5929': attribute type 10 has an invalid length. [ 1249.728439][T25465] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5940'. [ 1249.741771][T25465] bridge_slave_1: default FDB implementation only supports local addresses [ 1249.996809][ T7496] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1252.036452][ T7498] wlan1: Trigger new scan to find an IBSS to join [ 1252.196200][T25473] netlink: 'syz.2.5942': attribute type 10 has an invalid length. [ 1252.209916][T25473] team0: Device wg1 is of different type [ 1252.226156][T25477] netlink: 'syz.0.5944': attribute type 10 has an invalid length. [ 1252.240068][T25477] team0: Device wg1 is of different type [ 1252.265909][T25481] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1252.297631][T25484] netlink: 'syz.1.5945': attribute type 10 has an invalid length. [ 1252.767635][T25501] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1252.781566][T25501] bridge_slave_1: default FDB implementation only supports local addresses [ 1252.808227][T25504] netlink: 'syz.0.5954': attribute type 10 has an invalid length. [ 1252.894292][T25504] team0: Device wg1 is of different type [ 1252.938526][ T7496] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1253.327881][T25513] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1253.345880][T25516] netlink: 'syz.1.5958': attribute type 10 has an invalid length. [ 1253.363446][T25516] team0: Device wg1 is of different type [ 1253.382844][T25519] netlink: 'syz.0.5957': attribute type 10 has an invalid length. [ 1254.993985][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1255.637408][T25536] netlink: 'syz.0.5965': attribute type 4 has an invalid length. [ 1255.645720][T25536] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5965'. [ 1255.813459][T25543] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1255.846838][T25543] netlink: 'syz.2.5968': attribute type 10 has an invalid length. [ 1255.868824][T25542] netlink: 'syz.0.5966': attribute type 10 has an invalid length. [ 1255.891772][T25542] team0: Device wg1 is of different type [ 1255.919587][T25548] netlink: 'syz.1.5969': attribute type 1 has an invalid length. [ 1255.936198][T25548] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.5969'. [ 1256.033852][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1256.153377][T25555] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5972'. [ 1256.167198][T25555] bridge_slave_1: default FDB implementation only supports local addresses [ 1256.439432][T25564] netlink: 71 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1257.133069][T25572] netlink: 'syz.1.5979': attribute type 12 has an invalid length. [ 1257.148331][T25572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5979'. [ 1257.167930][T25574] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1257.251110][T25574] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1257.277812][T25575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1257.309290][T25579] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1257.375791][T25581] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1257.405542][T25581] netlink: 'syz.1.5981': attribute type 10 has an invalid length. [ 1257.494535][T25584] netlink: 'syz.3.5982': attribute type 10 has an invalid length. [ 1257.543569][T25584] team0: Device wg1 is of different type [ 1257.696903][T25592] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5986'. [ 1257.738022][T25592] bridge_slave_1: default FDB implementation only supports local addresses [ 1258.179977][T25607] tap0: tun_chr_ioctl cmd 35111 [ 1258.338728][T25611] can: request_module (can-proto-0) failed. [ 1258.592710][T25622] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1258.638647][T25622] netlink: 'syz.3.5993': attribute type 10 has an invalid length. [ 1258.824065][T25627] netlink: 'syz.0.5995': attribute type 10 has an invalid length. [ 1258.849788][T25627] team0: Device wg1 is of different type [ 1258.983196][T25634] netlink: 'syz.1.5997': attribute type 10 has an invalid length. [ 1259.079824][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1259.709985][T25655] bridge_slave_1: default FDB implementation only supports local addresses [ 1259.845429][T25664] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1259.920795][T25667] team0: Device wg1 is of different type [ 1260.032755][ T7480] wlan1: Trigger new scan to find an IBSS to join [ 1260.056880][T25669] team0: Device wg1 is of different type [ 1260.207113][T25673] openvswitch: netlink: Flow key attr not present in new flow. [ 1260.801992][T25691] FAULT_INJECTION: forcing a failure. [ 1260.801992][T25691] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.816105][T25691] CPU: 1 PID: 25691 Comm: syz.3.6021 Not tainted syzkaller #0 [ 1260.823641][T25691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1260.833733][T25691] Call Trace: [ 1260.837037][T25691] [ 1260.840081][T25691] dump_stack_lvl+0x18c/0x250 [ 1260.844799][T25691] ? sctp_sendmsg+0x1519/0x27b0 [ 1260.849677][T25691] ? ___sys_sendmsg+0x2a6/0x360 [ 1260.854565][T25691] ? show_regs_print_info+0x20/0x20 [ 1260.859804][T25691] ? load_image+0x420/0x420 [ 1260.864354][T25691] should_fail_ex+0x394/0x4c0 [ 1260.869082][T25691] should_failslab+0x9/0x20 [ 1260.873625][T25691] slab_pre_alloc_hook+0x59/0x300 [ 1260.878693][T25691] ? sctp_add_bind_addr+0x8c/0x360 [ 1260.883835][T25691] __kmem_cache_alloc_node+0x53/0x250 [ 1260.889250][T25691] ? sctp_add_bind_addr+0x8c/0x360 [ 1260.894385][T25691] kmalloc_trace+0x2a/0xe0 [ 1260.898836][T25691] sctp_add_bind_addr+0x8c/0x360 [ 1260.903809][T25691] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1260.909477][T25691] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1260.915224][T25691] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1260.921318][T25691] ? sctp_v4_is_any+0x35/0x60 [ 1260.926032][T25691] ? sctp_copy_one_addr+0x8c/0x350 [ 1260.931173][T25691] sctp_bind_addr_copy+0xb3/0x3c0 [ 1260.936229][T25691] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1260.942593][T25691] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1260.947909][T25691] ? __sctp_connect+0xd80/0xd80 [ 1260.952806][T25691] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1260.958248][T25691] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1260.963835][T25691] ? security_sctp_bind_connect+0x89/0xb0 [ 1260.969587][T25691] sctp_sendmsg+0x1519/0x27b0 [ 1260.974324][T25691] ? sctp_getsockopt+0xb60/0xb60 [ 1260.979327][T25691] ? aa_af_perm+0x330/0x330 [ 1260.983865][T25691] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1260.990313][T25691] ? sock_rps_record_flow+0x19/0x3f0 [ 1260.995635][T25691] ? inet_sendmsg+0xce/0x2a0 [ 1261.000261][T25691] ? inet_send_prepare+0x250/0x250 [ 1261.005426][T25691] ____sys_sendmsg+0x61b/0x980 [ 1261.010244][T25691] ? __asan_memset+0x22/0x40 [ 1261.014886][T25691] ? __sys_sendmsg_sock+0x30/0x30 [ 1261.019940][T25691] ? __import_iovec+0x5f2/0x850 [ 1261.024843][T25691] ? import_iovec+0x73/0xa0 [ 1261.029385][T25691] ___sys_sendmsg+0x2a6/0x360 [ 1261.034109][T25691] ? __sys_sendmsg+0x2b0/0x2b0 [ 1261.038928][T25691] ? __lock_acquire+0x7d80/0x7d80 [ 1261.044000][T25691] __se_sys_sendmsg+0x1d0/0x2c0 [ 1261.048888][T25691] ? __x64_sys_sendmsg+0x80/0x80 [ 1261.053874][T25691] ? lockdep_hardirqs_on+0x98/0x150 [ 1261.059111][T25691] do_syscall_64+0x55/0xb0 [ 1261.063568][T25691] ? clear_bhb_loop+0x40/0x90 [ 1261.068268][T25691] ? clear_bhb_loop+0x40/0x90 [ 1261.072970][T25691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1261.078901][T25691] RIP: 0033:0x7fa13e59de59 [ 1261.083349][T25691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.102992][T25691] RSP: 002b:00007fa13f45e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1261.111437][T25691] RAX: ffffffffffffffda RBX: 00007fa13e825fa0 RCX: 00007fa13e59de59 [ 1261.119439][T25691] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1261.127456][T25691] RBP: 00007fa13f45e090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.135456][T25691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1261.143460][T25691] R13: 00007fa13e826038 R14: 00007fa13e825fa0 R15: 00007fff73bdd558 [ 1261.151480][T25691] [ 1261.160343][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1261.414656][T25700] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1261.448023][T25700] validate_nla: 6 callbacks suppressed [ 1261.448041][T25700] netlink: 'syz.0.6022': attribute type 10 has an invalid length. [ 1261.497662][T25703] netlink: 'syz.3.6023': attribute type 10 has an invalid length. [ 1261.525172][T25703] team0: Device wg1 is of different type [ 1261.776807][T25712] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1261.814127][T25714] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1261.834335][T25712] netlink: 'syz.0.6033': attribute type 10 has an invalid length. [ 1261.852629][T25716] netlink: 'syz.3.6026': attribute type 5 has an invalid length. [ 1261.892617][T25714] netlink: 'syz.2.6025': attribute type 10 has an invalid length. [ 1262.005599][T25717] netlink: 'syz.1.6024': attribute type 10 has an invalid length. [ 1262.036259][T25717] team0: Device wg1 is of different type [ 1262.140001][T25719] netlink: 'syz.3.6026': attribute type 25 has an invalid length. [ 1262.158490][T25719] netlink: 'syz.3.6026': attribute type 28 has an invalid length. [ 1262.198310][T25721] __nla_validate_parse: 16 callbacks suppressed [ 1262.198351][T25721] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6027'. [ 1262.217376][T25721] bridge_slave_1: default FDB implementation only supports local addresses [ 1263.024602][T25736] netlink: 'syz.0.6034': attribute type 6 has an invalid length. [ 1263.072450][T25736] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6034'. [ 1263.816922][T25748] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1263.852872][T25748] netlink: 'syz.3.6038': attribute type 10 has an invalid length. [ 1263.963558][T25755] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1264.042879][ T7480] wlan1: Trigger new scan to find an IBSS to join [ 1264.153385][T25762] team0: Device wg1 is of different type [ 1264.232609][T25764] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1264.451259][T25772] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6044'. [ 1264.488513][T25772] bridge_slave_1: default FDB implementation only supports local addresses [ 1265.013283][T25783] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6048'. [ 1265.440098][T25797] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1265.511423][T25802] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1265.977278][T25820] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6064'. [ 1265.995224][T25820] bridge_slave_1: default FDB implementation only supports local addresses [ 1266.029841][T25819] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1266.179996][T25825] FAULT_INJECTION: forcing a failure. [ 1266.179996][T25825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.195445][T25825] CPU: 0 PID: 25825 Comm: syz.0.6066 Not tainted syzkaller #0 [ 1266.202984][T25825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1266.213173][T25825] Call Trace: [ 1266.216513][T25825] [ 1266.219484][T25825] dump_stack_lvl+0x18c/0x250 [ 1266.224229][T25825] ? show_regs_print_info+0x20/0x20 [ 1266.229501][T25825] ? load_image+0x420/0x420 [ 1266.234066][T25825] ? __lock_acquire+0x7d80/0x7d80 [ 1266.239163][T25825] should_fail_ex+0x394/0x4c0 [ 1266.243875][T25825] _copy_from_user+0x2f/0xe0 [ 1266.248488][T25825] __copy_msghdr+0x388/0x560 [ 1266.253121][T25825] ___sys_sendmsg+0x214/0x360 [ 1266.257838][T25825] ? get_pid_task+0x20/0x1e0 [ 1266.262551][T25825] ? __sys_sendmsg+0x2b0/0x2b0 [ 1266.267363][T25825] ? __lock_acquire+0x7d80/0x7d80 [ 1266.272451][T25825] __se_sys_sendmsg+0x1d0/0x2c0 [ 1266.277354][T25825] ? __x64_sys_sendmsg+0x80/0x80 [ 1266.282345][T25825] ? lockdep_hardirqs_on+0x98/0x150 [ 1266.287573][T25825] do_syscall_64+0x55/0xb0 [ 1266.292044][T25825] ? clear_bhb_loop+0x40/0x90 [ 1266.296741][T25825] ? clear_bhb_loop+0x40/0x90 [ 1266.301447][T25825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.307382][T25825] RIP: 0033:0x7fb56899de59 [ 1266.311827][T25825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.331455][T25825] RSP: 002b:00007fb5698d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.339891][T25825] RAX: ffffffffffffffda RBX: 00007fb568c25fa0 RCX: 00007fb56899de59 [ 1266.347885][T25825] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1266.355889][T25825] RBP: 00007fb5698d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.363884][T25825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.371903][T25825] R13: 00007fb568c26038 R14: 00007fb568c25fa0 R15: 00007ffc23cf3338 [ 1266.379943][T25825] [ 1266.385269][T25823] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1266.571941][T25832] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1266.612018][T25832] validate_nla: 10 callbacks suppressed [ 1266.612040][T25832] netlink: 'syz.2.6068': attribute type 10 has an invalid length. [ 1267.005120][T25852] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6074'. [ 1267.035170][T25852] netlink: 'syz.3.6074': attribute type 3 has an invalid length. [ 1267.059143][T25851] netlink: 'syz.0.6076': attribute type 3 has an invalid length. [ 1267.083163][T25855] netlink: 'syz.2.6078': attribute type 10 has an invalid length. [ 1267.091762][T25855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6078'. [ 1267.102085][T25851] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6076'. [ 1267.180258][T25855] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1267.195430][T25855] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.242895][T25855] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1267.626936][T25866] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1267.688191][T25866] netlink: 'syz.0.6081': attribute type 10 has an invalid length. [ 1267.937602][T25873] netlink: 'syz.1.6082': attribute type 6 has an invalid length. [ 1267.959454][T25873] __nla_validate_parse: 1 callbacks suppressed [ 1267.959493][T25873] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1268.019129][T25878] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1268.033006][ T7497] wlan1: Trigger new scan to find an IBSS to join [ 1268.044413][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1268.083706][T25878] netlink: 'syz.0.6090': attribute type 10 has an invalid length. [ 1268.180374][T25884] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6086'. [ 1268.198096][T25884] bridge_slave_1: default FDB implementation only supports local addresses [ 1268.261956][T25888] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.6087'. [ 1268.427358][T25895] netlink: 'syz.0.6092': attribute type 10 has an invalid length. [ 1268.437696][T25895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6092'. [ 1268.463547][T25895] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1268.470466][T25895] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.497930][T25895] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1268.795464][T25869] delete_channel: no stack [ 1268.813872][T25902] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6093'. [ 1268.866868][T25902] netlink: 'syz.0.6093': attribute type 3 has an invalid length. [ 1268.902505][T25902] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.6093'. [ 1269.533967][T25908] netlink: 'syz.1.6097': attribute type 29 has an invalid length. [ 1269.814746][T25914] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1270.043349][ T7497] wlan1: Trigger new scan to find an IBSS to join [ 1270.155320][T25925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6103'. [ 1270.191242][T25925] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1270.198740][T25925] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.231706][T25925] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1270.455409][T25936] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6106'. [ 1270.473231][T25936] bridge_slave_1: default FDB implementation only supports local addresses [ 1270.584215][T25948] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1270.841204][T25956] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6113'. [ 1270.961135][T25957] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6112'. [ 1271.083823][ T7497] wlan1: Trigger new scan to find an IBSS to join [ 1271.225653][T25963] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1271.308599][T25965] hsr0: entered promiscuous mode [ 1271.356918][T25965] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1271.421419][T25965] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1271.472940][T25965] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1271.549660][T25965] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1271.668913][T25967] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1271.699100][T25967] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.782637][T25967] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1271.960026][T25982] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1272.013289][T25982] validate_nla: 8 callbacks suppressed [ 1272.013307][T25982] netlink: 'syz.1.6121': attribute type 10 has an invalid length. [ 1272.053181][T25980] netlink: 'syz.0.6122': attribute type 10 has an invalid length. [ 1272.088778][T25980] team0: entered promiscuous mode [ 1272.121336][T25980] team_slave_0: entered promiscuous mode [ 1272.138225][T25980] team_slave_1: entered promiscuous mode [ 1272.163729][T25980] team0: entered allmulticast mode [ 1272.169065][T25980] team_slave_0: entered allmulticast mode [ 1272.214061][T25980] team_slave_1: entered allmulticast mode [ 1272.240622][T25980] bridge0: port 3(team0) entered blocking state [ 1272.253972][T25980] bridge0: port 3(team0) entered disabled state [ 1272.333908][T25980] bridge0: port 3(team0) entered blocking state [ 1272.341855][T25980] bridge0: port 3(team0) entered forwarding state [ 1272.373815][T25989] bridge_slave_1: default FDB implementation only supports local addresses [ 1273.072512][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1273.333511][T26016] netlink: 'syz.3.6133': attribute type 10 has an invalid length. [ 1273.374400][T26016] __nla_validate_parse: 8 callbacks suppressed [ 1273.374435][T26016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6133'. [ 1273.481420][T26019] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1273.544356][T26021] netlink: 'syz.2.6130': attribute type 3 has an invalid length. [ 1273.628886][T26021] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1274.033675][ T7492] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1274.041328][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1274.318885][T26027] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1274.380748][T26029] netlink: 'syz.3.6136': attribute type 10 has an invalid length. [ 1274.392659][T26029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6136'. [ 1274.422603][T26029] team0: entered promiscuous mode [ 1274.428219][T26029] team_slave_0: entered promiscuous mode [ 1274.479141][T26029] team_slave_1: entered promiscuous mode [ 1274.507052][T26029] team0: entered allmulticast mode [ 1274.546092][T26029] team_slave_0: entered allmulticast mode [ 1274.577592][T26029] team_slave_1: entered allmulticast mode [ 1274.590784][T26029] bridge0: port 3(team0) entered blocking state [ 1274.615786][T26029] bridge0: port 3(team0) entered disabled state [ 1274.646972][T26029] bridge0: port 3(team0) entered blocking state [ 1274.654339][T26029] bridge0: port 3(team0) entered forwarding state [ 1274.680006][T26027] netlink: 'syz.0.6134': attribute type 10 has an invalid length. [ 1274.712757][T26037] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1274.736406][T26037] bridge_slave_1: default FDB implementation only supports local addresses [ 1274.748647][T26041] netlink: 'syz.1.6140': attribute type 4 has an invalid length. [ 1274.765664][T26041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6140'. [ 1274.934779][T26048] FAULT_INJECTION: forcing a failure. [ 1274.934779][T26048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.957113][T26048] CPU: 0 PID: 26048 Comm: syz.3.6143 Not tainted syzkaller #0 [ 1274.964661][T26048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1274.974756][T26048] Call Trace: [ 1274.978097][T26048] [ 1274.981065][T26048] dump_stack_lvl+0x18c/0x250 [ 1274.985809][T26048] ? show_regs_print_info+0x20/0x20 [ 1274.991065][T26048] ? load_image+0x420/0x420 [ 1274.995607][T26048] ? __might_fault+0xaa/0x120 [ 1275.000324][T26048] ? __lock_acquire+0x7d80/0x7d80 [ 1275.005398][T26048] should_fail_ex+0x394/0x4c0 [ 1275.010130][T26048] _copy_from_user+0x2f/0xe0 [ 1275.014783][T26048] __sys_bpf+0x23e/0x890 [ 1275.019068][T26048] ? bpf_link_show_fdinfo+0x390/0x390 [ 1275.024490][T26048] ? lock_chain_count+0x20/0x20 [ 1275.029396][T26048] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1275.035436][T26048] __x64_sys_bpf+0x7c/0x90 [ 1275.039897][T26048] do_syscall_64+0x55/0xb0 [ 1275.044368][T26048] ? clear_bhb_loop+0x40/0x90 [ 1275.049078][T26048] ? clear_bhb_loop+0x40/0x90 [ 1275.053793][T26048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1275.059730][T26048] RIP: 0033:0x7fa13e59de59 [ 1275.064184][T26048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.083844][T26048] RSP: 002b:00007fa13f45e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1275.092291][T26048] RAX: ffffffffffffffda RBX: 00007fa13e825fa0 RCX: 00007fa13e59de59 [ 1275.100294][T26048] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1275.108306][T26048] RBP: 00007fa13f45e090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.116318][T26048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.124340][T26048] R13: 00007fa13e826038 R14: 00007fa13e825fa0 R15: 00007fff73bdd558 [ 1275.132366][T26048] [ 1275.828551][T26054] netlink: 'syz.1.6145': attribute type 10 has an invalid length. [ 1275.861822][T26054] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1275.902538][T26058] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1276.031977][T26058] netlink: 'syz.2.6147': attribute type 10 has an invalid length. [ 1276.047027][T26058] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1276.057183][T26058] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1276.107374][T26067] netlink: 'syz.1.6150': attribute type 29 has an invalid length. [ 1276.203535][T26068] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1276.231423][T26069] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6148'. [ 1276.246020][T26069] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.6148'. [ 1276.716478][T26078] team0: entered promiscuous mode [ 1276.732617][T26078] team_slave_0: entered promiscuous mode [ 1276.747973][T26078] team_slave_1: entered promiscuous mode [ 1276.770906][T26078] team0: entered allmulticast mode [ 1276.824439][T26078] team_slave_0: entered allmulticast mode [ 1276.886011][T26078] team_slave_1: entered allmulticast mode [ 1276.923691][T26078] bridge0: port 3(team0) entered blocking state [ 1276.942802][T26078] bridge0: port 3(team0) entered disabled state [ 1276.994796][T26078] bridge0: port 3(team0) entered blocking state [ 1277.002254][T26078] bridge0: port 3(team0) entered forwarding state [ 1277.013558][ T742] wlan1: Trigger new scan to find an IBSS to join [ 1277.042779][T26086] bridge_slave_1: default FDB implementation only supports local addresses [ 1277.458313][T26101] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1277.551830][T26101] validate_nla: 7 callbacks suppressed [ 1277.551850][T26101] netlink: 'syz.2.6161': attribute type 10 has an invalid length. [ 1278.041056][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1278.794391][T26121] FAULT_INJECTION: forcing a failure. [ 1278.794391][T26121] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.849889][T26121] CPU: 1 PID: 26121 Comm: syz.2.6169 Not tainted syzkaller #0 [ 1278.857496][T26121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1278.867601][T26121] Call Trace: [ 1278.870924][T26121] [ 1278.873900][T26121] dump_stack_lvl+0x18c/0x250 [ 1278.878639][T26121] ? show_regs_print_info+0x20/0x20 [ 1278.883895][T26121] ? load_image+0x420/0x420 [ 1278.888463][T26121] ? rt6_remove_exception+0x270/0x270 [ 1278.893897][T26121] should_fail_ex+0x394/0x4c0 [ 1278.898631][T26121] should_failslab+0x9/0x20 [ 1278.903188][T26121] slab_pre_alloc_hook+0x59/0x300 [ 1278.908275][T26121] kmem_cache_alloc+0x5a/0x2c0 [ 1278.913094][T26121] ? dst_alloc+0x105/0x170 [ 1278.917556][T26121] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 1278.923244][T26121] dst_alloc+0x105/0x170 [ 1278.927542][T26121] ip6_rt_cache_alloc+0x3b0/0xa20 [ 1278.932637][T26121] ? rt6_find_cached_rt+0x270/0x270 [ 1278.937899][T26121] ? ip6_pol_route+0x171/0x1230 [ 1278.942812][T26121] ip6_pol_route+0xffa/0x1230 [ 1278.947537][T26121] ? ip6_pol_route+0x171/0x1230 [ 1278.952450][T26121] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 1278.958149][T26121] fib6_rule_lookup+0x226/0x580 [ 1278.963051][T26121] ? skb_header_pointer+0x120/0x120 [ 1278.968313][T26121] ? fib6_lookup+0x2d0/0x2d0 [ 1278.972949][T26121] ? perf_trace_lock+0xfc/0x3b0 [ 1278.977854][T26121] ? read_lock_is_recursive+0x20/0x20 [ 1278.983286][T26121] ip6_route_output_flags+0x364/0x5d0 [ 1278.988791][T26121] ? ip6_route_output_flags+0x2e/0x5d0 [ 1278.994288][T26121] ip6_dst_lookup_tail+0x1a5/0x1660 [ 1278.999564][T26121] ? ip6_dst_lookup+0x60/0x60 [ 1279.004297][T26121] ? txopt_get+0x7a/0x3f0 [ 1279.008664][T26121] ? txopt_get+0x7a/0x3f0 [ 1279.013050][T26121] ? txopt_get+0x344/0x3f0 [ 1279.017503][T26121] ? fl6_sock_lookup+0xc0/0xc0 [ 1279.022292][T26121] ip6_dst_lookup_flow+0x48/0xe0 [ 1279.027257][T26121] rawv6_sendmsg+0xd53/0x1740 [ 1279.032008][T26121] ? compat_rawv6_ioctl+0x70/0x70 [ 1279.037110][T26121] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1279.043569][T26121] ? aa_sock_msg_perm+0x94/0x150 [ 1279.048554][T26121] ? inet_sendmsg+0x7e/0x2a0 [ 1279.053170][T26121] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1279.058484][T26121] ? inet_send_prepare+0x250/0x250 [ 1279.063635][T26121] ____sys_sendmsg+0x61b/0x980 [ 1279.068447][T26121] ? __asan_memset+0x22/0x40 [ 1279.073060][T26121] ? __sys_sendmsg_sock+0x30/0x30 [ 1279.078138][T26121] ? __import_iovec+0x5f2/0x850 [ 1279.083045][T26121] ? import_iovec+0x73/0xa0 [ 1279.087630][T26121] ___sys_sendmsg+0x2a6/0x360 [ 1279.092357][T26121] ? __sys_sendmsg+0x2b0/0x2b0 [ 1279.097190][T26121] ? __lock_acquire+0x7d80/0x7d80 [ 1279.102273][T26121] __se_sys_sendmsg+0x1d0/0x2c0 [ 1279.107166][T26121] ? __x64_sys_sendmsg+0x80/0x80 [ 1279.112155][T26121] ? lockdep_hardirqs_on+0x98/0x150 [ 1279.117393][T26121] do_syscall_64+0x55/0xb0 [ 1279.121849][T26121] ? clear_bhb_loop+0x40/0x90 [ 1279.126553][T26121] ? clear_bhb_loop+0x40/0x90 [ 1279.131260][T26121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1279.137185][T26121] RIP: 0033:0x7f28f5d9de59 [ 1279.141630][T26121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.161274][T26121] RSP: 002b:00007f28f6c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1279.169715][T26121] RAX: ffffffffffffffda RBX: 00007f28f6025fa0 RCX: 00007f28f5d9de59 [ 1279.177713][T26121] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1279.185707][T26121] RBP: 00007f28f6c25090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.193727][T26121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.201723][T26121] R13: 00007f28f6026038 R14: 00007f28f6025fa0 R15: 00007ffcac20ffa8 [ 1279.209729][T26121] [ 1279.321613][T26124] netlink: 'syz.1.6168': attribute type 10 has an invalid length. [ 1279.338179][T26124] __nla_validate_parse: 5 callbacks suppressed [ 1279.338196][T26124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6168'. [ 1279.390940][T26124] team0: entered promiscuous mode [ 1279.423326][T26124] team_slave_0: entered promiscuous mode [ 1279.451480][T26124] team_slave_1: entered promiscuous mode [ 1279.458322][T26124] team0: entered allmulticast mode [ 1279.464929][T26124] team_slave_0: entered allmulticast mode [ 1279.470853][T26124] team_slave_1: entered allmulticast mode [ 1279.478037][T26124] bridge0: port 3(team0) entered blocking state [ 1279.495560][T26124] bridge0: port 3(team0) entered disabled state [ 1279.515984][T26124] bridge0: port 3(team0) entered blocking state [ 1279.522519][T26124] bridge0: port 3(team0) entered forwarding state [ 1279.544583][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1279.663947][T26133] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1279.699787][T26137] netlink: 'syz.2.6171': attribute type 10 has an invalid length. [ 1279.948277][T26145] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6174'. [ 1279.999528][T26143] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6173'. [ 1280.033810][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1280.055898][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1280.070663][T26143] bridge_slave_1: default FDB implementation only supports local addresses [ 1280.533078][T26151] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1281.016631][T26159] netlink: 'syz.1.6178': attribute type 3 has an invalid length. [ 1281.049281][T26159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6178'. [ 1281.195056][T26157] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1281.486952][T26170] netlink: 'syz.1.6182': attribute type 3 has an invalid length. [ 1281.512379][T26170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6182'. [ 1282.995020][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1283.296205][T26168] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1283.316545][T26173] netlink: 'syz.3.6181': attribute type 10 has an invalid length. [ 1283.919720][T26191] netlink: 'syz.1.6189': attribute type 10 has an invalid length. [ 1283.978767][T26193] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6188'. [ 1283.996395][T26193] bridge_slave_1: default FDB implementation only supports local addresses [ 1284.021644][T26197] netlink: 'syz.0.6191': attribute type 3 has an invalid length. [ 1284.029876][T26197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6191'. [ 1284.212719][T26206] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1284.252830][T26200] netlink: 'syz.3.6192': attribute type 10 has an invalid length. [ 1285.234972][T26231] mac80211_hwsim hwsim92 wlan1: entered allmulticast mode [ 1285.261515][T26234] netlink: 'syz.3.6203': attribute type 3 has an invalid length. [ 1285.312934][T26234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1285.421247][T26231] À: port 1(veth1_virt_wifi) entered blocking state [ 1285.487876][T26231] À: port 1(veth1_virt_wifi) entered disabled state [ 1285.563167][T26231] veth1_virt_wifi: entered allmulticast mode [ 1285.655576][T26231] veth1_virt_wifi: left allmulticast mode [ 1285.715639][T26240] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1285.804944][T26246] netlink: 'syz.3.6205': attribute type 7 has an invalid length. [ 1285.853126][T26243] netlink: 'syz.2.6204': attribute type 10 has an invalid length. [ 1286.072424][T26248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6207'. [ 1286.165952][T26248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6207'. [ 1286.186368][T26251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6207'. [ 1286.544300][T26260] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1286.596578][T26257] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6209'. [ 1286.646088][T26257] bridge_slave_1: default FDB implementation only supports local addresses [ 1286.732984][T26264] netlink: 'syz.2.6216': attribute type 10 has an invalid length. [ 1286.902767][T26269] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6211'. [ 1287.006590][T26269] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6211'. [ 1287.045509][T26270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6211'. [ 1287.771236][T26279] netlink: 'syz.2.6213': attribute type 3 has an invalid length. [ 1287.797571][T26279] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6213'. [ 1287.835146][T26281] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6214'. [ 1287.903502][T26283] FAULT_INJECTION: forcing a failure. [ 1287.903502][T26283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.964654][T26283] CPU: 1 PID: 26283 Comm: syz.3.6214 Not tainted syzkaller #0 [ 1287.972210][T26283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1287.982293][T26283] Call Trace: [ 1287.985612][T26283] [ 1287.988579][T26283] dump_stack_lvl+0x18c/0x250 [ 1287.993305][T26283] ? show_regs_print_info+0x20/0x20 [ 1287.998555][T26283] ? load_image+0x420/0x420 [ 1288.003094][T26283] ? __might_fault+0xaa/0x120 [ 1288.007805][T26283] ? __lock_acquire+0x7d80/0x7d80 [ 1288.012871][T26283] should_fail_ex+0x394/0x4c0 [ 1288.017592][T26283] _copy_from_user+0x2f/0xe0 [ 1288.022216][T26283] ___sys_recvmsg+0x174/0x590 [ 1288.026926][T26283] ? __sys_recvmsg+0x2a0/0x2a0 [ 1288.031721][T26283] ? trace_call_bpf+0xc3/0x6c0 [ 1288.036531][T26283] ? trace_call_bpf+0x5e9/0x6c0 [ 1288.041427][T26283] ? __fget_files+0x3fc/0x460 [ 1288.046154][T26283] __x64_sys_recvmsg+0x21e/0x2f0 [ 1288.051113][T26283] ? perf_trace_preemptirq_template+0x269/0x330 [ 1288.057399][T26283] ? ___sys_recvmsg+0x590/0x590 [ 1288.062292][T26283] ? lockdep_hardirqs_on+0x98/0x150 [ 1288.067538][T26283] do_syscall_64+0x55/0xb0 [ 1288.072017][T26283] ? clear_bhb_loop+0x40/0x90 [ 1288.076716][T26283] ? clear_bhb_loop+0x40/0x90 [ 1288.081419][T26283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1288.087337][T26283] RIP: 0033:0x7fa13e59de59 [ 1288.091772][T26283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.111435][T26283] RSP: 002b:00007fa13f43d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1288.119889][T26283] RAX: ffffffffffffffda RBX: 00007fa13e826090 RCX: 00007fa13e59de59 [ 1288.127892][T26283] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 1288.135891][T26283] RBP: 00007fa13f43d090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.143907][T26283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.151913][T26283] R13: 00007fa13e826128 R14: 00007fa13e826090 R15: 00007fff73bdd558 [ 1288.159933][T26283] [ 1288.171175][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1288.204770][T26285] bridge_slave_1: default FDB implementation only supports local addresses [ 1289.265591][T26300] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1289.304446][T26300] netlink: 'syz.2.6220': attribute type 10 has an invalid length. [ 1289.692423][T26308] ªªªªªª: renamed from vlan0 (while UP) [ 1289.988809][T26314] netlink: 'syz.1.6225': attribute type 3 has an invalid length. [ 1290.367612][T26322] netlink: 'syz.1.6235': attribute type 3 has an invalid length. [ 1290.402462][T26322] __nla_validate_parse: 3 callbacks suppressed [ 1290.402499][T26322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6235'. [ 1290.741101][T26331] FAULT_INJECTION: forcing a failure. [ 1290.741101][T26331] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.754284][T26331] CPU: 0 PID: 26331 Comm: syz.1.6230 Not tainted syzkaller #0 [ 1290.761811][T26331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1290.771946][T26331] Call Trace: [ 1290.775266][T26331] [ 1290.778251][T26331] dump_stack_lvl+0x18c/0x250 [ 1290.782981][T26331] ? show_regs_print_info+0x20/0x20 [ 1290.788237][T26331] ? load_image+0x420/0x420 [ 1290.792783][T26331] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1290.799075][T26331] ? lockdep_hardirqs_on+0x98/0x150 [ 1290.804335][T26331] should_fail_ex+0x394/0x4c0 [ 1290.809062][T26331] should_failslab+0x9/0x20 [ 1290.813605][T26331] slab_pre_alloc_hook+0x59/0x300 [ 1290.818685][T26331] ? validate_xmit_xfrm+0x2bb/0x1340 [ 1290.824031][T26331] kmem_cache_alloc+0x5a/0x2c0 [ 1290.828837][T26331] ? skb_clone+0x1eb/0x370 [ 1290.833306][T26331] skb_clone+0x1eb/0x370 [ 1290.837591][T26331] ? dev_queue_xmit_nit+0x204/0xba0 [ 1290.842823][T26331] dev_queue_xmit_nit+0x23f/0xba0 [ 1290.847880][T26331] ? dev_queue_xmit_nit+0x2d/0xba0 [ 1290.853032][T26331] dev_hard_start_xmit+0x150/0x790 [ 1290.858194][T26331] ? __dev_queue_xmit+0x275/0x3630 [ 1290.863349][T26331] __dev_queue_xmit+0x198c/0x3630 [ 1290.868533][T26331] ? __dev_queue_xmit+0x275/0x3630 [ 1290.873705][T26331] ? netdev_core_pick_tx+0x370/0x370 [ 1290.879027][T26331] ? __copy_skb_header+0xa3/0x4a0 [ 1290.884097][T26331] ? __asan_memcpy+0x40/0x70 [ 1290.888733][T26331] ? __skb_clone+0x5c/0x6c0 [ 1290.893276][T26331] ? __skb_clone+0x446/0x6c0 [ 1290.897905][T26331] ? skb_clone+0x21f/0x370 [ 1290.902360][T26331] __netlink_deliver_tap+0x579/0x7f0 [ 1290.907702][T26331] ? netlink_deliver_tap+0x2e/0x1b0 [ 1290.912940][T26331] netlink_deliver_tap+0x19c/0x1b0 [ 1290.918087][T26331] netlink_unicast+0x77b/0x930 [ 1290.922901][T26331] netlink_sendmsg+0x8d0/0xbf0 [ 1290.927704][T26331] ? netlink_getsockopt+0x590/0x590 [ 1290.932937][T26331] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1290.938508][T26331] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1290.943855][T26331] ? security_socket_sendmsg+0x80/0xa0 [ 1290.949355][T26331] ? netlink_getsockopt+0x590/0x590 [ 1290.954593][T26331] ____sys_sendmsg+0x61b/0x980 [ 1290.959408][T26331] ? __asan_memset+0x22/0x40 [ 1290.964235][T26331] ? __sys_sendmsg_sock+0x30/0x30 [ 1290.969305][T26331] ? __import_iovec+0x5f2/0x850 [ 1290.974211][T26331] ? import_iovec+0x73/0xa0 [ 1290.978756][T26331] ___sys_sendmsg+0x2a6/0x360 [ 1290.983486][T26331] ? __sys_sendmsg+0x2b0/0x2b0 [ 1290.988335][T26331] __se_sys_sendmsg+0x1d0/0x2c0 [ 1290.993228][T26331] ? __x64_sys_sendmsg+0x80/0x80 [ 1290.998226][T26331] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1291.004155][T26331] do_syscall_64+0x55/0xb0 [ 1291.008604][T26331] ? clear_bhb_loop+0x40/0x90 [ 1291.013301][T26331] ? clear_bhb_loop+0x40/0x90 [ 1291.018022][T26331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.023954][T26331] RIP: 0033:0x7fc9b8d9de59 [ 1291.028389][T26331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.048015][T26331] RSP: 002b:00007fc9b9cdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.056456][T26331] RAX: ffffffffffffffda RBX: 00007fc9b9025fa0 RCX: 00007fc9b8d9de59 [ 1291.064460][T26331] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1291.072457][T26331] RBP: 00007fc9b9cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.080472][T26331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.088466][T26331] R13: 00007fc9b9026038 R14: 00007fc9b9025fa0 R15: 00007ffdd8f17568 [ 1291.096487][T26331] [ 1291.112684][T26331] netlink: 'syz.1.6230': attribute type 3 has an invalid length. [ 1291.142601][T26331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6230'. [ 1291.215255][T26334] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1291.227716][T26334] bridge_slave_1: default FDB implementation only supports local addresses [ 1291.367542][T26341] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1291.410389][T26340] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6233'. [ 1291.438359][T26340] bridge_slave_1: default FDB implementation only supports local addresses [ 1291.466549][T26341] netlink: 'syz.3.6232': attribute type 10 has an invalid length. [ 1292.141523][T26345] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6234'. [ 1292.513461][T26348] sit0: entered allmulticast mode [ 1292.657980][T26348] sit0: entered promiscuous mode [ 1293.359134][T26357] netlink: 'syz.3.6239': attribute type 10 has an invalid length. [ 1293.405796][T26357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6239'. [ 1293.427128][T26357] batman_adv: batadv0: Adding interface: veth0_vlan [ 1293.442382][T26357] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.520170][T26357] batman_adv: batadv0: Interface activated: veth0_vlan [ 1294.020737][T26372] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1294.045866][ T7497] wlan1: Trigger new scan to find an IBSS to join [ 1294.103854][T26377] netlink: 'syz.1.6244': attribute type 10 has an invalid length. [ 1294.155314][T26378] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6245'. [ 1294.214230][T26378] bridge_slave_1: default FDB implementation only supports local addresses [ 1294.258379][T26381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6246'. [ 1295.176008][T26391] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6247'. [ 1295.262347][T26391] bridge_slave_1: default FDB implementation only supports local addresses [ 1295.280588][T26388] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6248'. [ 1295.297353][T26389] bridge_slave_1: default FDB implementation only supports local addresses [ 1296.032422][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1296.525632][T26409] netlink: 'syz.1.6254': attribute type 12 has an invalid length. [ 1296.632965][T26409] __nla_validate_parse: 1 callbacks suppressed [ 1296.632990][T26409] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6254'. [ 1296.653887][T26410] netlink: 'syz.0.6253': attribute type 10 has an invalid length. [ 1296.764710][T26410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6253'. [ 1296.888423][T26410] batman_adv: batadv0: Adding interface: veth0_vlan [ 1296.903249][T26410] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.933177][T26410] batman_adv: batadv0: Interface activated: veth0_vlan [ 1296.988916][T26417] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1297.037846][T26420] netlink: 'syz.3.6256': attribute type 10 has an invalid length. [ 1297.245534][T26422] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6258'. [ 1297.286825][T26424] FAULT_INJECTION: forcing a failure. [ 1297.286825][T26424] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.302621][T26424] CPU: 0 PID: 26424 Comm: syz.1.6257 Not tainted syzkaller #0 [ 1297.310164][T26424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1297.320274][T26424] Call Trace: [ 1297.323600][T26424] [ 1297.326587][T26424] dump_stack_lvl+0x18c/0x250 [ 1297.331332][T26424] ? show_regs_print_info+0x20/0x20 [ 1297.336617][T26424] ? load_image+0x420/0x420 [ 1297.341191][T26424] ? __lock_acquire+0x7d80/0x7d80 [ 1297.346277][T26424] should_fail_ex+0x394/0x4c0 [ 1297.351035][T26424] should_failslab+0x9/0x20 [ 1297.355593][T26424] slab_pre_alloc_hook+0x59/0x300 [ 1297.360664][T26424] ? rxrpc_alloc_peer+0x7e/0x340 [ 1297.365649][T26424] __kmem_cache_alloc_node+0x53/0x250 [ 1297.371139][T26424] ? rxrpc_alloc_peer+0x7e/0x340 [ 1297.376155][T26424] kmalloc_trace+0x2a/0xe0 [ 1297.380622][T26424] rxrpc_alloc_peer+0x7e/0x340 [ 1297.385459][T26424] rxrpc_lookup_peer+0x3f4/0x850 [ 1297.390436][T26424] rxrpc_new_client_call+0xba9/0x1400 [ 1297.395858][T26424] rxrpc_do_sendmsg+0xe03/0x12d0 [ 1297.400843][T26424] ? rxrpc_propose_abort+0x1f0/0x1f0 [ 1297.406171][T26424] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1297.411574][T26424] ? _local_bh_enable+0xa0/0xa0 [ 1297.416461][T26424] ? rxrpc_sendmsg+0x109/0x5b0 [ 1297.421268][T26424] ? rxrpc_sendmsg+0x373/0x5b0 [ 1297.426069][T26424] ? rxrpc_getsockopt+0x150/0x150 [ 1297.431143][T26424] ____sys_sendmsg+0x61b/0x980 [ 1297.435958][T26424] ? __sys_sendmsg_sock+0x30/0x30 [ 1297.441015][T26424] ? __import_iovec+0x3fa/0x850 [ 1297.445917][T26424] ? import_iovec+0x73/0xa0 [ 1297.450461][T26424] ___sys_sendmsg+0x2a6/0x360 [ 1297.455184][T26424] ? __sys_sendmsg+0x2b0/0x2b0 [ 1297.460006][T26424] ? trace_call_bpf+0xc3/0x6c0 [ 1297.464835][T26424] __se_sys_sendmsg+0x1d0/0x2c0 [ 1297.469722][T26424] ? perf_trace_preemptirq_template+0x269/0x330 [ 1297.476003][T26424] ? __x64_sys_sendmsg+0x80/0x80 [ 1297.480989][T26424] ? lockdep_hardirqs_on+0x98/0x150 [ 1297.486220][T26424] do_syscall_64+0x55/0xb0 [ 1297.490671][T26424] ? clear_bhb_loop+0x40/0x90 [ 1297.495461][T26424] ? clear_bhb_loop+0x40/0x90 [ 1297.500172][T26424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1297.506104][T26424] RIP: 0033:0x7fc9b8d9de59 [ 1297.510552][T26424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.530185][T26424] RSP: 002b:00007fc9b9cdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1297.538631][T26424] RAX: ffffffffffffffda RBX: 00007fc9b9025fa0 RCX: 00007fc9b8d9de59 [ 1297.546630][T26424] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1297.554634][T26424] RBP: 00007fc9b9cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.562639][T26424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.570656][T26424] R13: 00007fc9b9026038 R14: 00007fc9b9025fa0 R15: 00007ffdd8f17568 [ 1297.578672][T26424] [ 1297.818764][T26429] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6260'. [ 1297.830336][T26429] bridge_slave_1: default FDB implementation only supports local addresses [ 1297.932986][T26432] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6261'. [ 1297.959747][T26432] bridge_slave_1: default FDB implementation only supports local addresses [ 1297.978144][T26434] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6262'. [ 1297.994929][T26434] bridge_slave_1: default FDB implementation only supports local addresses [ 1298.942539][T26444] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6272'. [ 1298.980860][T26444] bridge_slave_1: default FDB implementation only supports local addresses [ 1298.993357][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1299.029139][T26446] netlink: 'syz.3.6265': attribute type 12 has an invalid length. [ 1299.057239][T26446] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1299.202066][T26450] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1299.244335][T26455] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1299.293790][T26455] netlink: 'syz.2.6267': attribute type 10 has an invalid length. [ 1299.470029][T26462] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1299.509111][T26462] netlink: 'syz.3.6278': attribute type 10 has an invalid length. [ 1299.531790][T26460] netlink: 'syz.2.6268': attribute type 10 has an invalid length. [ 1299.543030][T26460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6268'. [ 1299.564448][T26460] batman_adv: batadv0: Adding interface: veth0_vlan [ 1299.571413][T26460] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.608076][T26460] batman_adv: batadv0: Interface activated: veth0_vlan [ 1299.929285][T26476] bridge_slave_1: default FDB implementation only supports local addresses [ 1300.357955][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.364548][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.971092][T26488] netlink: 'syz.2.6279': attribute type 12 has an invalid length. [ 1301.086045][ T742] wlan1: Trigger new scan to find an IBSS to join [ 1301.090221][T26490] netlink: 'syz.1.6281': attribute type 10 has an invalid length. [ 1301.140186][T26490] batman_adv: batadv0: Adding interface: veth0_vlan [ 1301.148877][T26490] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.185632][T26490] batman_adv: batadv0: Interface activated: veth0_vlan [ 1301.330127][T26496] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1301.379790][T26496] netlink: 'syz.0.6282': attribute type 10 has an invalid length. [ 1301.593562][T26504] bridge_slave_1: default FDB implementation only supports local addresses [ 1301.975979][T26513] validate_nla: 1 callbacks suppressed [ 1301.975995][T26513] netlink: 'syz.2.6289': attribute type 19 has an invalid length. [ 1301.990114][T26513] __nla_validate_parse: 6 callbacks suppressed [ 1301.990131][T26513] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1302.035395][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1302.122901][ T742] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1302.137097][T26515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1302.146521][T26515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1302.160124][T26513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1302.171913][T26514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1302.266705][T26517] netlink: 'syz.0.6298': attribute type 10 has an invalid length. [ 1302.277071][T26517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1302.308316][T26519] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6290'. [ 1302.335371][T26519] bridge_slave_1: default FDB implementation only supports local addresses [ 1302.538003][T26524] netlink: 'syz.1.6292': attribute type 10 has an invalid length. [ 1302.547847][T26524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6292'. [ 1303.514342][T26537] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1303.587024][T26533] netlink: 'syz.2.6296': attribute type 10 has an invalid length. [ 1303.614412][T26533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6296'. [ 1303.643516][T26536] netlink: 'syz.0.6294': attribute type 12 has an invalid length. [ 1303.671397][T26536] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6294'. [ 1303.695107][T26538] netlink: 'syz.1.6295': attribute type 10 has an invalid length. [ 1303.793925][ T8] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1304.187340][T26556] bridge_slave_1: default FDB implementation only supports local addresses [ 1305.072656][ T742] wlan1: Trigger new scan to find an IBSS to join [ 1305.184027][T26590] bridge_slave_1: default FDB implementation only supports local addresses [ 1306.033086][ T7480] wlan1: Trigger new scan to find an IBSS to join [ 1308.750125][T26606] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1308.778577][T26610] netlink: 'syz.3.6309': attribute type 10 has an invalid length. [ 1308.871634][T26612] __nla_validate_parse: 2 callbacks suppressed [ 1308.871652][T26612] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.6310'. [ 1309.096860][T26614] netlink: 'syz.3.6311': attribute type 12 has an invalid length. [ 1309.112665][T26614] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6311'. [ 1309.224285][T26621] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6314'. [ 1309.234615][T26621] bridge_slave_1: default FDB implementation only supports local addresses [ 1309.822270][T26632] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6317'. [ 1309.929798][T26642] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1309.947133][T26642] netlink: 'syz.0.6319': attribute type 10 has an invalid length. [ 1310.100960][T26646] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6320'. [ 1310.131418][T26646] bridge_slave_1: default FDB implementation only supports local addresses [ 1310.154240][T26648] netlink: 'syz.2.6321': attribute type 10 has an invalid length. [ 1310.163213][T26648] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1310.182253][T26648] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1310.202592][T26648] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1310.234313][T26648] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1310.535669][T26661] netlink: 'syz.0.6326': attribute type 12 has an invalid length. [ 1310.549160][T26661] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1310.995012][ T7498] wlan1: Trigger new scan to find an IBSS to join [ 1311.030789][T26674] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1311.043816][T26674] bridge_slave_1: default FDB implementation only supports local addresses [ 1311.072609][ T742] wlan1: Trigger new scan to find an IBSS to join [ 1311.274289][T26685] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1311.299221][T26685] netlink: 'syz.2.6332': attribute type 10 has an invalid length. [ 1311.543477][T26694] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1311.606825][T26691] netlink: 'syz.0.6342': attribute type 10 has an invalid length. [ 1311.803505][T26700] netlink: 'syz.2.6336': attribute type 12 has an invalid length. [ 1311.812076][T26700] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6336'. [ 1311.999345][ T742] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1312.011825][T26710] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6339'. [ 1312.023832][T26710] bridge_slave_1: default FDB implementation only supports local addresses [ 1312.087115][T26708] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6349'. [ 1312.101071][T26708] bridge_slave_1: default FDB implementation only supports local addresses [ 1312.117733][T26713] netlink: 'syz.1.6350': attribute type 12 has an invalid length. [ 1312.736904][T26738] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1312.759734][T26738] netlink: 'syz.3.6347': attribute type 10 has an invalid length. [ 1312.984595][T26746] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1313.319775][T26749] geneve1: entered promiscuous mode [ 1313.358697][T26749] geneve1: entered allmulticast mode [ 1313.445884][T26749] team0: Port device geneve1 added [ 1313.582780][T26766] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1313.682881][T26761] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1313.690330][T26761] syzkaller1: Linktype set failed because interface is up [ 1313.703688][ T8] syzkaller1: tun_net_xmit 90 [ 1313.766316][T26772] bridge_slave_1: default FDB implementation only supports local addresses [ 1313.872315][T26770] __nla_validate_parse: 4 callbacks suppressed [ 1313.872349][T26770] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6361'. [ 1313.890415][T26770] bridge_slave_1: default FDB implementation only supports local addresses [ 1313.994968][T26779] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1314.040502][T26779] validate_nla: 2 callbacks suppressed [ 1314.040520][T26779] netlink: 'syz.2.6363': attribute type 10 has an invalid length. [ 1314.069153][T26781] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1314.080437][T26781] bridge_slave_1: default FDB implementation only supports local addresses [ 1314.479090][T26788] syz.2.6367[26788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1314.479299][T26788] syz.2.6367[26788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1314.997544][ T742] wlan1: Trigger new scan to find an IBSS to join [ 1315.053515][T26795] netlink: 'syz.0.6368': attribute type 10 has an invalid length. [ 1315.120554][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1317.035606][T26795] geneve1: entered promiscuous mode [ 1317.052443][T26795] geneve1: entered allmulticast mode [ 1317.065452][T26795] team0: Port device geneve1 added [ 1317.312801][T26814] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1317.337254][T26814] netlink: 'syz.1.6373': attribute type 10 has an invalid length. [ 1317.353708][T26820] FAULT_INJECTION: forcing a failure. [ 1317.353708][T26820] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.392868][T26820] CPU: 0 PID: 26820 Comm: syz.2.6375 Not tainted syzkaller #0 [ 1317.400477][T26820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1317.410600][T26820] Call Trace: [ 1317.413947][T26820] [ 1317.416929][T26820] dump_stack_lvl+0x18c/0x250 [ 1317.421687][T26820] ? show_regs_print_info+0x20/0x20 [ 1317.426950][T26820] ? load_image+0x420/0x420 [ 1317.431530][T26820] ? __might_sleep+0xe0/0xe0 [ 1317.436179][T26820] ? __lock_acquire+0x7d80/0x7d80 [ 1317.441296][T26820] should_fail_ex+0x394/0x4c0 [ 1317.446055][T26820] should_failslab+0x9/0x20 [ 1317.450613][T26820] slab_pre_alloc_hook+0x59/0x300 [ 1317.455721][T26820] kmem_cache_alloc_node+0x5e/0x310 [ 1317.460977][T26820] ? __alloc_skb+0x103/0x2c0 [ 1317.465647][T26820] __alloc_skb+0x103/0x2c0 [ 1317.470146][T26820] netlink_dump+0x1ee/0xec0 [ 1317.474724][T26820] ? rcu_is_watching+0x15/0xb0 [ 1317.479580][T26820] ? __mutex_lock+0x30d/0xc80 [ 1317.484309][T26820] ? netlink_lookup+0x200/0x200 [ 1317.489265][T26820] ? netlink_lookup+0x30/0x200 [ 1317.494098][T26820] ? netlink_lookup+0x30/0x200 [ 1317.498936][T26820] __netlink_dump_start+0x57c/0x7a0 [ 1317.504205][T26820] rtnetlink_rcv_msg+0xe19/0xf90 [ 1317.509191][T26820] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1317.514358][T26820] ? rtnl_dellink+0x7c0/0x7c0 [ 1317.519105][T26820] ? rtnetlink_bind+0x80/0x80 [ 1317.523840][T26820] ? trace_call_bpf+0xc3/0x6c0 [ 1317.528696][T26820] ? trace_call_bpf+0xc3/0x6c0 [ 1317.533521][T26820] ? __lock_acquire+0x7d80/0x7d80 [ 1317.538621][T26820] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1317.544061][T26820] ? trace_call_bpf+0xc3/0x6c0 [ 1317.548881][T26820] ? trace_call_bpf+0xc3/0x6c0 [ 1317.553694][T26820] ? trace_call_bpf+0x5e9/0x6c0 [ 1317.558593][T26820] ? trace_call_bpf+0xc3/0x6c0 [ 1317.563425][T26820] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1317.569541][T26820] ? __dev_queue_xmit+0x275/0x3630 [ 1317.574733][T26820] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1317.580602][T26820] ? rtnl_dellink+0x7c0/0x7c0 [ 1317.585354][T26820] ? perf_trace_lock+0x303/0x3b0 [ 1317.590376][T26820] netlink_rcv_skb+0x235/0x4c0 [ 1317.595206][T26820] ? rtnetlink_bind+0x80/0x80 [ 1317.599939][T26820] ? netlink_ack+0x1160/0x1160 [ 1317.604796][T26820] ? __lock_acquire+0x7d80/0x7d80 [ 1317.609891][T26820] ? netlink_deliver_tap+0x2e/0x1b0 [ 1317.615168][T26820] netlink_unicast+0x7b1/0x930 [ 1317.620017][T26820] netlink_sendmsg+0x8d0/0xbf0 [ 1317.624870][T26820] ? netlink_getsockopt+0x590/0x590 [ 1317.630155][T26820] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1317.635791][T26820] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1317.641129][T26820] ? security_socket_sendmsg+0x80/0xa0 [ 1317.646729][T26820] ? netlink_getsockopt+0x590/0x590 [ 1317.651992][T26820] ____sys_sendmsg+0x61b/0x980 [ 1317.656833][T26820] ? __asan_memset+0x22/0x40 [ 1317.661474][T26820] ? __sys_sendmsg_sock+0x30/0x30 [ 1317.666560][T26820] ? __import_iovec+0x5f2/0x850 [ 1317.671489][T26820] ? import_iovec+0x73/0xa0 [ 1317.676060][T26820] ___sys_sendmsg+0x2a6/0x360 [ 1317.680809][T26820] ? __sys_sendmsg+0x2b0/0x2b0 [ 1317.685735][T26820] ? __lock_acquire+0x7d80/0x7d80 [ 1317.690895][T26820] __se_sys_sendmsg+0x1d0/0x2c0 [ 1317.695821][T26820] ? __x64_sys_sendmsg+0x80/0x80 [ 1317.700860][T26820] ? lockdep_hardirqs_on+0x98/0x150 [ 1317.706132][T26820] do_syscall_64+0x55/0xb0 [ 1317.710601][T26820] ? clear_bhb_loop+0x40/0x90 [ 1317.715327][T26820] ? clear_bhb_loop+0x40/0x90 [ 1317.720062][T26820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.726005][T26820] RIP: 0033:0x7f28f5d9de59 [ 1317.730478][T26820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.750121][T26820] RSP: 002b:00007f28f6c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.758585][T26820] RAX: ffffffffffffffda RBX: 00007f28f6025fa0 RCX: 00007f28f5d9de59 [ 1317.766601][T26820] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1317.774614][T26820] RBP: 00007f28f6c25090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.782633][T26820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.790647][T26820] R13: 00007f28f6026038 R14: 00007f28f6025fa0 R15: 00007ffcac20ffa8 [ 1317.798702][T26820] [ 1317.995554][T26812] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1318.030128][T26812] syzkaller1: linktype set to 769 [ 1318.173193][T26825] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6376'. [ 1318.188489][T26825] bridge_slave_1: default FDB implementation only supports local addresses [ 1319.073839][ T7498] wlan1: Trigger new scan to find an IBSS to join [ 1319.141301][T26840] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1319.169893][T26840] bridge_slave_1: default FDB implementation only supports local addresses [ 1319.197081][T26843] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1319.210049][T26843] bridge_slave_1: default FDB implementation only supports local addresses [ 1319.317332][T26850] netlink: 'syz.1.6382': attribute type 2 has an invalid length. [ 1319.339451][T26850] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1319.531214][T26852] netlink: 'syz.1.6383': attribute type 10 has an invalid length. [ 1319.581226][T26852] geneve1: entered promiscuous mode [ 1319.597559][T26852] geneve1: entered allmulticast mode [ 1319.612689][T26852] team0: Port device geneve1 added [ 1319.785528][T26855] netlink: 'syz.1.6384': attribute type 12 has an invalid length. [ 1319.802300][T26855] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6384'. [ 1319.901550][T26858] mac80211_hwsim hwsim87 wlan0: entered promiscuous mode [ 1319.911306][T26858] mac80211_hwsim hwsim87 wlan0: entered allmulticast mode [ 1320.016715][ T7498] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1320.038740][ T7498] wlan1: Trigger new scan to find an IBSS to join [ 1320.127194][T26864] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1320.173207][T26864] netlink: 'syz.0.6387': attribute type 10 has an invalid length. [ 1320.200075][T26869] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6397'. [ 1320.213286][T26869] bridge_slave_1: default FDB implementation only supports local addresses [ 1320.522660][T26874] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1320.529043][T26874] syzkaller1: Linktype set failed because interface is up [ 1320.542497][ T27] syzkaller1: tun_net_xmit 90 [ 1320.584293][ T7496] syzkaller1: tun_net_xmit 86 [ 1321.084531][T26882] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1321.098073][T26882] bridge_slave_1: default FDB implementation only supports local addresses [ 1321.189758][T26884] netlink: 'syz.1.6395': attribute type 12 has an invalid length. [ 1321.198291][T26884] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1321.249247][T26886] netlink: 'syz.3.6394': attribute type 10 has an invalid length. [ 1321.346653][T26886] geneve1: entered promiscuous mode [ 1321.353653][T26886] geneve1: entered allmulticast mode [ 1321.365416][T26886] team0: Port device geneve1 added [ 1321.418589][T26891] netlink: 'syz.1.6396': attribute type 1 has an invalid length. [ 1321.427128][T26891] netlink: 13439 bytes leftover after parsing attributes in process `syz.1.6396'. [ 1321.640961][T26895] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6398'. [ 1321.655769][T26895] bridge_slave_1: default FDB implementation only supports local addresses [ 1321.692803][T26899] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1321.707555][T26894] netlink: 'syz.2.6407': attribute type 12 has an invalid length. [ 1321.717348][T26894] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6407'. [ 1321.746235][T26899] netlink: 'syz.1.6399': attribute type 10 has an invalid length. [ 1322.277808][T26911] bridge_slave_1: default FDB implementation only supports local addresses [ 1322.422586][T26913] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1322.428745][T26913] syzkaller1: Linktype set failed because interface is up [ 1322.446613][ T8] syzkaller1: tun_net_xmit 90 [ 1322.649109][T26918] netlink: 'syz.3.6406': attribute type 12 has an invalid length. [ 1323.082628][T26931] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1323.358441][T26940] bridge_slave_1: default FDB implementation only supports local addresses [ 1323.400817][T26942] bridge_slave_1: default FDB implementation only supports local addresses [ 1323.776630][T26949] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1323.784542][T26949] syzkaller1: Linktype set failed because interface is up [ 1324.043676][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1324.296221][T26957] FAULT_INJECTION: forcing a failure. [ 1324.296221][T26957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.331261][T26957] CPU: 1 PID: 26957 Comm: syz.2.6422 Not tainted syzkaller #0 [ 1324.338843][T26957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1324.348983][T26957] Call Trace: [ 1324.352306][T26957] [ 1324.355298][T26957] dump_stack_lvl+0x18c/0x250 [ 1324.360043][T26957] ? show_regs_print_info+0x20/0x20 [ 1324.365305][T26957] ? load_image+0x420/0x420 [ 1324.369871][T26957] ? __might_fault+0xaa/0x120 [ 1324.374603][T26957] ? __lock_acquire+0x7d80/0x7d80 [ 1324.379684][T26957] should_fail_ex+0x394/0x4c0 [ 1324.384432][T26957] _copy_from_user+0x2f/0xe0 [ 1324.389079][T26957] get_user_ifreq+0x6b/0x180 [ 1324.393734][T26957] sock_ioctl+0x6f1/0x7e0 [ 1324.398119][T26957] ? sock_poll+0x3e0/0x3e0 [ 1324.402606][T26957] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1324.407605][T26957] ? security_file_ioctl+0x80/0xa0 [ 1324.412779][T26957] ? sock_poll+0x3e0/0x3e0 [ 1324.417272][T26957] __se_sys_ioctl+0xfd/0x170 [ 1324.421936][T26957] do_syscall_64+0x55/0xb0 [ 1324.426417][T26957] ? clear_bhb_loop+0x40/0x90 [ 1324.431138][T26957] ? clear_bhb_loop+0x40/0x90 [ 1324.435866][T26957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1324.441816][T26957] RIP: 0033:0x7f28f5d9de59 [ 1324.446278][T26957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.465924][T26957] RSP: 002b:00007f28f6c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.474377][T26957] RAX: ffffffffffffffda RBX: 00007f28f6025fa0 RCX: 00007f28f5d9de59 [ 1324.482382][T26957] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 1324.490388][T26957] RBP: 00007f28f6c25090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.498396][T26957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.506391][T26957] R13: 00007f28f6026038 R14: 00007f28f6025fa0 R15: 00007ffcac20ffa8 [ 1324.514406][T26957] [ 1324.519949][T26959] __nla_validate_parse: 6 callbacks suppressed [ 1324.519982][T26959] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6421'. [ 1324.550688][T26959] bridge_slave_1: default FDB implementation only supports local addresses [ 1324.629657][T26960] validate_nla: 4 callbacks suppressed [ 1324.629672][T26960] netlink: 'syz.0.6428': attribute type 12 has an invalid length. [ 1324.652111][T26960] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6428'. [ 1324.852561][T26972] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1324.870355][T26972] netlink: 'syz.3.6424': attribute type 10 has an invalid length. [ 1324.929524][T26977] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6426'. [ 1325.198645][T26984] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1325.254639][T26980] netlink: 'syz.0.6436': attribute type 10 has an invalid length. [ 1325.332557][T26987] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1325.338584][T26987] syzkaller1: linktype set to 769 [ 1325.528727][T26989] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6439'. [ 1325.540981][T26989] bridge_slave_1: default FDB implementation only supports local addresses [ 1325.591560][T26991] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6431'. [ 1325.608742][T26991] bridge_slave_1: default FDB implementation only supports local addresses [ 1325.704277][T26995] netlink: 'syz.3.6430': attribute type 12 has an invalid length. [ 1325.723739][T26995] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6430'. [ 1325.947983][T27005] netlink: 'syz.2.6434': attribute type 12 has an invalid length. [ 1325.953228][T27008] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1325.959321][T27005] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6434'. [ 1326.109249][T27012] netlink: 'syz.3.6438': attribute type 10 has an invalid length. [ 1326.119293][T27012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1326.139576][T27012] batman_adv: batadv0: Adding interface: vlan1 [ 1326.151448][T27012] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.179528][T27012] batman_adv: batadv0: Interface activated: vlan1 [ 1326.271291][T27017] mac80211_hwsim hwsim81 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1326.308450][T27017] netlink: 'syz.2.6440': attribute type 10 has an invalid length. [ 1326.397953][T27020] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1326.416771][T27020] syzkaller1: linktype set to 769 [ 1326.469116][T27022] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6442'. [ 1326.494250][T27022] bridge_slave_1: default FDB implementation only supports local addresses [ 1326.854277][T27039] netlink: 'syz.1.6448': attribute type 12 has an invalid length. [ 1326.904445][T27042] FAULT_INJECTION: forcing a failure. [ 1326.904445][T27042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.918535][T27042] CPU: 0 PID: 27042 Comm: syz.3.6449 Not tainted syzkaller #0 [ 1326.926048][T27042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1326.936142][T27042] Call Trace: [ 1326.939456][T27042] [ 1326.942419][T27042] dump_stack_lvl+0x18c/0x250 [ 1326.947151][T27042] ? show_regs_print_info+0x20/0x20 [ 1326.952392][T27042] ? load_image+0x420/0x420 [ 1326.956935][T27042] ? __might_fault+0xaa/0x120 [ 1326.961646][T27042] ? __lock_acquire+0x7d80/0x7d80 [ 1326.966705][T27042] should_fail_ex+0x394/0x4c0 [ 1326.971430][T27042] _copy_from_user+0x2f/0xe0 [ 1326.976072][T27042] ___sys_sendmsg+0x1c7/0x360 [ 1326.980800][T27042] ? get_pid_task+0x20/0x1e0 [ 1326.985448][T27042] ? __sys_sendmsg+0x2b0/0x2b0 [ 1326.990267][T27042] ? __lock_acquire+0x7d80/0x7d80 [ 1326.995440][T27042] __se_sys_sendmsg+0x1d0/0x2c0 [ 1327.000335][T27042] ? __x64_sys_sendmsg+0x80/0x80 [ 1327.005323][T27042] ? lockdep_hardirqs_on+0x98/0x150 [ 1327.010580][T27042] do_syscall_64+0x55/0xb0 [ 1327.015045][T27042] ? clear_bhb_loop+0x40/0x90 [ 1327.019751][T27042] ? clear_bhb_loop+0x40/0x90 [ 1327.024456][T27042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1327.030393][T27042] RIP: 0033:0x7fa13e59de59 [ 1327.034834][T27042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.054470][T27042] RSP: 002b:00007fa13f45e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.062912][T27042] RAX: ffffffffffffffda RBX: 00007fa13e825fa0 RCX: 00007fa13e59de59 [ 1327.070901][T27042] RDX: 0000000000000040 RSI: 0000200000000540 RDI: 0000000000000004 [ 1327.078889][T27042] RBP: 00007fa13f45e090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.086888][T27042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.094893][T27042] R13: 00007fa13e826038 R14: 00007fa13e825fa0 R15: 00007fff73bdd558 [ 1327.102905][T27042] [ 1327.108656][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1327.115142][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1327.240533][T27047] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1327.276760][T27047] netlink: 'syz.0.6450': attribute type 10 has an invalid length. [ 1327.374318][T27052] bridge_slave_1: default FDB implementation only supports local addresses [ 1327.389607][T27051] syz.1.6451: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1327.404823][T27051] CPU: 1 PID: 27051 Comm: syz.1.6451 Not tainted syzkaller #0 [ 1327.412328][T27051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1327.422433][T27051] Call Trace: [ 1327.425781][T27051] [ 1327.428762][T27051] dump_stack_lvl+0x18c/0x250 [ 1327.433551][T27051] ? show_regs_print_info+0x20/0x20 [ 1327.438827][T27051] ? load_image+0x420/0x420 [ 1327.443401][T27051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1327.449882][T27051] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1327.456451][T27051] warn_alloc+0x246/0x340 [ 1327.460835][T27051] ? stack_trace_save+0xaa/0x100 [ 1327.465839][T27051] ? zone_watermark_ok_safe+0x230/0x230 [ 1327.471459][T27051] ? kasan_set_track+0x5f/0x70 [ 1327.476278][T27051] ? kasan_set_track+0x4e/0x70 [ 1327.481096][T27051] ? __kasan_kmalloc+0x8f/0xa0 [ 1327.485912][T27051] ? xsk_init_queue+0xad/0x100 [ 1327.490737][T27051] ? xsk_setsockopt+0x4c9/0x750 [ 1327.495822][T27051] ? do_sock_setsockopt+0x175/0x1a0 [ 1327.501050][T27051] ? __x64_sys_setsockopt+0x182/0x200 [ 1327.506472][T27051] __vmalloc_node_range+0x129/0x1320 [ 1327.511823][T27051] ? free_vm_area+0x50/0x50 [ 1327.516385][T27051] vmalloc_user+0x74/0x80 [ 1327.520754][T27051] ? xskq_create+0xbf/0x170 [ 1327.525310][T27051] xskq_create+0xbf/0x170 [ 1327.529696][T27051] xsk_init_queue+0xad/0x100 [ 1327.534322][T27051] xsk_setsockopt+0x4c9/0x750 [ 1327.539058][T27051] ? xsk_poll+0x670/0x670 [ 1327.543425][T27051] ? __fget_files+0x28/0x460 [ 1327.548043][T27051] ? aa_sock_opt_perm+0x74/0x100 [ 1327.553004][T27051] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1327.558581][T27051] ? security_socket_setsockopt+0x7e/0xa0 [ 1327.564325][T27051] ? xsk_poll+0x670/0x670 [ 1327.568676][T27051] do_sock_setsockopt+0x175/0x1a0 [ 1327.573733][T27051] ? __fdget+0x180/0x210 [ 1327.578033][T27051] __x64_sys_setsockopt+0x182/0x200 [ 1327.583288][T27051] do_syscall_64+0x55/0xb0 [ 1327.587742][T27051] ? clear_bhb_loop+0x40/0x90 [ 1327.592449][T27051] ? clear_bhb_loop+0x40/0x90 [ 1327.597172][T27051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1327.603118][T27051] RIP: 0033:0x7fc9b8d9de59 [ 1327.607575][T27051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.627245][T27051] RSP: 002b:00007fc9b9cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1327.635700][T27051] RAX: ffffffffffffffda RBX: 00007fc9b9026090 RCX: 00007fc9b8d9de59 [ 1327.643724][T27051] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 1327.651733][T27051] RBP: 00007fc9b8e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1327.659746][T27051] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1327.667749][T27051] R13: 00007fc9b9026128 R14: 00007fc9b9026090 R15: 00007ffdd8f17568 [ 1327.675844][T27051] [ 1327.693456][T27051] Mem-Info: [ 1327.703997][T27051] active_anon:8436 inactive_anon:0 isolated_anon:0 [ 1327.703997][T27051] active_file:19221 inactive_file:40435 isolated_file:0 [ 1327.703997][T27051] unevictable:768 dirty:272 writeback:0 [ 1327.703997][T27051] slab_reclaimable:10679 slab_unreclaimable:93784 [ 1327.703997][T27051] mapped:24762 shmem:2011 pagetables:511 [ 1327.703997][T27051] sec_pagetables:0 bounce:0 [ 1327.703997][T27051] kernel_misc_reclaimable:0 [ 1327.703997][T27051] free:1334352 free_pcp:13006 free_cma:0 [ 1327.749974][T27051] Node 0 active_anon:33744kB inactive_anon:0kB active_file:76884kB inactive_file:161540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99048kB dirty:1088kB writeback:0kB shmem:6508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9940kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no [ 1327.782587][T27051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1327.813521][T27051] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.841497][T27051] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1327.848047][T27051] Node 0 DMA32 free:1430608kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:33704kB inactive_anon:0kB active_file:76884kB inactive_file:160716kB unevictable:1536kB writepending:1088kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:28256kB local_pcp:20824kB free_cma:0kB [ 1327.879132][T27051] lowmem_reserve[]: 0 0 0 0 0 [ 1327.884461][T27051] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.911626][T27051] lowmem_reserve[]: 0 0 0 0 0 [ 1327.916793][T27051] Node 1 Normal free:3891432kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23700kB local_pcp:9732kB free_cma:0kB [ 1327.947075][T27051] lowmem_reserve[]: 0 0 0 0 0 [ 1327.951936][T27051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1327.972371][T27051] Node 0 DMA32: 2*4kB (UM) 215*8kB (ME) 1283*16kB (UME) 1663*32kB (UME) 646*64kB (UME) 210*128kB (UME) 117*256kB (UME) 61*512kB (UME) 23*1024kB (UM) 7*2048kB (ME) 290*4096kB (M) = 1430608kB [ 1327.991757][T27051] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1328.004798][T27051] Node 1 Normal: 250*4kB (UME) 62*8kB (UME) 45*16kB (UME) 68*32kB (UME) 21*64kB (UME) 3*128kB (UE) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3891432kB [ 1328.023621][T27051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.033933][T27051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.043850][T27051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.053911][T27051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.069397][T27051] 61699 total pagecache pages [ 1328.076800][T27051] 0 pages in swap cache [ 1328.081046][T27051] Free swap = 124996kB [ 1328.085570][T27051] Total swap = 124996kB [ 1328.089867][T27051] 2097051 pages RAM [ 1328.094053][T27051] 0 pages HighMem/MovableOnly [ 1328.098779][T27051] 416953 pages reserved [ 1328.103592][T27051] 0 pages cma reserved [ 1328.287101][T27060] bridge_slave_1: default FDB implementation only supports local addresses [ 1328.299207][T27058] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1328.310620][T27058] syzkaller1: linktype set to 769 [ 1328.338295][T27063] bridge_slave_1: default FDB implementation only supports local addresses [ 1329.467875][T27075] netlink: 'syz.2.6459': attribute type 12 has an invalid length. [ 1329.532645][T27084] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1329.589803][T27085] __nla_validate_parse: 5 callbacks suppressed [ 1329.589841][T27085] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1329.616839][T27085] bridge_slave_1: default FDB implementation only supports local addresses [ 1330.244765][T27094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1330.259530][T27094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1330.268095][T27094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1330.283594][T27094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1330.292922][T27094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1330.300364][T27094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1330.713157][T27103] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6467'. [ 1330.745687][T27103] bridge_slave_1: default FDB implementation only supports local addresses [ 1330.779028][T27105] validate_nla: 1 callbacks suppressed [ 1330.779047][T27105] netlink: 'syz.0.6468': attribute type 15 has an invalid length. [ 1330.797199][T27105] netlink: 'syz.0.6468': attribute type 7 has an invalid length. [ 1330.805245][T27105] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6468'. [ 1330.892161][T27092] chnl_net:caif_netlink_parms(): no params data found [ 1330.995278][ T7492] wlan1: Trigger new scan to find an IBSS to join [ 1331.150082][T18322] bond0: (slave syz_tun): Releasing backup interface [ 1331.177252][T27092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.184858][T27092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.192792][T27092] bridge_slave_0: entered allmulticast mode [ 1331.200631][T27092] bridge_slave_0: entered promiscuous mode [ 1331.210115][T27092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.217504][T27092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.227381][T27092] bridge_slave_1: entered allmulticast mode [ 1331.235790][T27092] bridge_slave_1: entered promiscuous mode [ 1331.971345][ T7498] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1332.042702][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1332.111241][ T7492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.161355][T27092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.219837][T27126] netlink: 'syz.1.6474': attribute type 12 has an invalid length. [ 1332.247986][ T7492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.259087][T27126] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1332.291762][T27092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.306129][T27127] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1332.332955][T27124] netlink: 'syz.0.6473': attribute type 10 has an invalid length. [ 1332.357169][ T7492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.362913][T27094] Bluetooth: hci4: command tx timeout [ 1332.405175][T27092] team0: Port device team_slave_0 added [ 1332.415555][T27092] team0: Port device team_slave_1 added [ 1332.473431][T27092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.480552][T27092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.558601][T27092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.611566][T27092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.625287][T27092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.659820][T27092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.687660][ T7492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.788404][T27136] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6475'. [ 1332.820201][T27136] bridge_slave_1: default FDB implementation only supports local addresses [ 1332.936473][T27092] hsr_slave_0: entered promiscuous mode [ 1332.944327][T27092] hsr_slave_1: entered promiscuous mode [ 1332.950525][T27092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.960477][T27092] Cannot create hsr debugfs directory [ 1333.166735][T27148] FAULT_INJECTION: forcing a failure. [ 1333.166735][T27148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.180047][T27148] CPU: 0 PID: 27148 Comm: syz.1.6478 Not tainted syzkaller #0 [ 1333.187566][T27148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1333.197786][T27148] Call Trace: [ 1333.201110][T27148] [ 1333.204074][T27148] dump_stack_lvl+0x18c/0x250 [ 1333.208799][T27148] ? show_regs_print_info+0x20/0x20 [ 1333.214038][T27148] ? load_image+0x420/0x420 [ 1333.218577][T27148] ? __lock_acquire+0x7d80/0x7d80 [ 1333.223650][T27148] ? snprintf+0xe9/0x140 [ 1333.227932][T27148] should_fail_ex+0x394/0x4c0 [ 1333.232657][T27148] _copy_to_user+0x2f/0xa0 [ 1333.237105][T27148] simple_read_from_buffer+0xe7/0x150 [ 1333.242533][T27148] proc_fail_nth_read+0x1e8/0x260 [ 1333.247608][T27148] ? proc_fault_inject_write+0x360/0x360 [ 1333.253295][T27148] ? fsnotify_perm+0x271/0x5e0 [ 1333.258101][T27148] ? proc_fault_inject_write+0x360/0x360 [ 1333.263769][T27148] vfs_read+0x298/0x990 [ 1333.267966][T27148] ? kernel_read+0x1e0/0x1e0 [ 1333.272587][T27148] ? __fget_files+0x28/0x460 [ 1333.277227][T27148] ? __fget_files+0x3fc/0x460 [ 1333.281937][T27148] ? __fdget_pos+0x2a3/0x330 [ 1333.286558][T27148] ? ksys_read+0x74/0x260 [ 1333.290921][T27148] ksys_read+0x151/0x260 [ 1333.295213][T27148] ? vfs_write+0x9a0/0x9a0 [ 1333.299711][T27148] ? lockdep_hardirqs_on+0x98/0x150 [ 1333.304963][T27148] do_syscall_64+0x55/0xb0 [ 1333.309411][T27148] ? clear_bhb_loop+0x40/0x90 [ 1333.314116][T27148] ? clear_bhb_loop+0x40/0x90 [ 1333.318842][T27148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1333.324796][T27148] RIP: 0033:0x7fc9b8d5e68e [ 1333.329254][T27148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1333.348883][T27148] RSP: 002b:00007fc9b9cdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1333.357329][T27148] RAX: ffffffffffffffda RBX: 00007fc9b9cdb6c0 RCX: 00007fc9b8d5e68e [ 1333.365336][T27148] RDX: 000000000000000f RSI: 00007fc9b9cdb0a0 RDI: 0000000000000006 [ 1333.373340][T27148] RBP: 00007fc9b9cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.381338][T27148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.389338][T27148] R13: 00007fc9b9026038 R14: 00007fc9b9025fa0 R15: 00007ffdd8f17568 [ 1333.397355][T27148] [ 1333.600525][T27151] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6479'. [ 1333.617897][T27151] bridge_slave_1: default FDB implementation only supports local addresses [ 1334.097205][T27165] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1334.311236][T27169] netlink: 'syz.1.6482': attribute type 10 has an invalid length. [ 1334.443391][T27094] Bluetooth: hci4: command tx timeout [ 1334.804084][T27176] netlink: 'syz.3.6483': attribute type 12 has an invalid length. [ 1334.812727][T27176] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6483'. [ 1335.526323][T27202] netlink: 'syz.1.6489': attribute type 1 has an invalid length. [ 1335.534444][T27202] netlink: 'syz.1.6489': attribute type 3 has an invalid length. [ 1335.542348][T27202] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1335.717129][T27206] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6490'. [ 1335.741289][T27206] bridge_slave_1: default FDB implementation only supports local addresses [ 1335.752374][T27092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1335.849890][T27092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1335.877241][T27211] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1335.891690][T27092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1335.907236][T27092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1335.958448][T27209] netlink: 'syz.3.6491': attribute type 10 has an invalid length. [ 1336.133119][T27216] netlink: 'syz.0.6492': attribute type 12 has an invalid length. [ 1336.141080][T27216] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6492'. [ 1336.317235][ T7492] hsr_slave_0: left promiscuous mode [ 1336.329583][ T7492] hsr_slave_1: left promiscuous mode [ 1336.340521][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.354619][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.376245][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.393440][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.407377][ T7492] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1336.425069][ T7492] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1336.443659][ T7492] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1336.450867][ T7492] batman_adv: batadv0: Removing interface: veth0_vlan [ 1336.473817][ T7492] bridge0: port 3(team0) entered disabled state [ 1336.485727][ T7492] bridge_slave_1: left allmulticast mode [ 1336.491474][ T7492] bridge_slave_1: left promiscuous mode [ 1336.512365][T27094] Bluetooth: hci4: command tx timeout [ 1336.523512][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.550224][ T7492] bridge_slave_0: left allmulticast mode [ 1336.559312][ T7492] bridge_slave_0: left promiscuous mode [ 1336.565321][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.580591][T27227] netlink: 'syz.0.6494': attribute type 3 has an invalid length. [ 1336.612017][T27227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1336.626158][ T7492] veth1_macvtap: left promiscuous mode [ 1336.631751][ T7492] veth0_macvtap: left promiscuous mode [ 1336.642377][ T7492] veth1_vlan: left promiscuous mode [ 1336.647858][ T7492] veth0_vlan: left promiscuous mode [ 1336.668359][T27227] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1336.708378][T27230] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6495'. [ 1336.722672][T27227] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1338.033128][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1338.039814][ T742] wlan1: Trigger new scan to find an IBSS to join [ 1338.592311][T27094] Bluetooth: hci4: command tx timeout [ 1341.072396][ T742] wlan1: Trigger new scan to find an IBSS to join [ 1341.072442][ T7496] wlan1: Trigger new scan to find an IBSS to join [ 1341.982707][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1344.032545][ T742] wlan1: Trigger new scan to find an IBSS to join [ 1344.923652][ T7496] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:32:31 [ 1351.586516][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1351.602522][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1351.610801][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1351.626960][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1351.635104][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1351.647499][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1352.753973][T27094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1352.763700][T27094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1352.771511][T27094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1352.783842][T27094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1352.796316][T27094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1352.804586][T27094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1352.831536][ T5083] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1352.851380][ T5083] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1352.861195][ T5083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1352.874700][ T5083] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1352.886292][ T5083] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1352.894799][ T5083] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1353.712602][T27094] Bluetooth: hci0: command tx timeout [ 1354.832244][T27094] Bluetooth: hci5: command tx timeout [ 1354.998038][T27094] Bluetooth: hci6: command tx timeout [ 1355.792284][T27094] Bluetooth: hci0: command tx timeout [ 1356.926338][T27094] Bluetooth: hci5: command tx timeout [ 1357.072367][T27094] Bluetooth: hci6: command tx timeout [ 1357.872532][T27094] Bluetooth: hci0: command tx timeout [ 1358.992281][T27094] Bluetooth: hci5: command tx timeout [ 1359.152303][T27094] Bluetooth: hci6: command tx timeout [ 1359.952637][T27094] Bluetooth: hci0: command tx timeout [ 1361.072324][T27094] Bluetooth: hci5: command tx timeout [ 1361.242337][T27094] Bluetooth: hci6: command tx timeout [ 1361.798064][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.804865][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.057238][ T7497] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1377.155954][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1390.881990][ T5083] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1390.896642][ T5083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1390.904990][ T5083] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1390.914813][ T5083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1390.923497][ T5083] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1390.931504][ T5083] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1392.992388][T27094] Bluetooth: hci7: command tx timeout [ 1395.072278][T27094] Bluetooth: hci7: command tx timeout [ 1397.152377][T27094] Bluetooth: hci7: command tx timeout [ 1399.233567][T27094] Bluetooth: hci7: command tx timeout [ 1403.084406][ T742] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1408.512237][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1411.815435][ T5083] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1411.834519][ T5083] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1411.843464][ T5083] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1411.857849][ T5083] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1411.865725][ T5083] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1411.873465][ T5083] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1412.999605][ T5083] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1413.009661][ T5083] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1413.020020][ T5083] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1413.028252][ T5083] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1413.036279][ T5083] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1413.044546][ T5083] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1413.081939][T27094] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1413.091255][T27094] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1413.100048][T27094] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1413.109809][T27094] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1413.120207][T27094] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1413.128503][T27094] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1413.952257][T27094] Bluetooth: hci8: command tx timeout [ 1415.072528][T27094] Bluetooth: hci9: command tx timeout [ 1415.156715][T27094] Bluetooth: hci10: command tx timeout [ 1416.032229][T27094] Bluetooth: hci8: command tx timeout [ 1417.152242][T27094] Bluetooth: hci9: command tx timeout [ 1417.232313][T27094] Bluetooth: hci10: command tx timeout [ 1418.113142][T27094] Bluetooth: hci8: command tx timeout [ 1419.232354][T27094] Bluetooth: hci9: command tx timeout [ 1419.312374][T27094] Bluetooth: hci10: command tx timeout [ 1420.192314][T27094] Bluetooth: hci8: command tx timeout [ 1421.312168][T27094] Bluetooth: hci9: command tx timeout [ 1421.392192][T27094] Bluetooth: hci10: command tx timeout [ 1423.236618][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.244158][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.009214][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1440.512304][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1451.969833][ T5083] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1451.981167][ T5083] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1451.989494][ T5083] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1451.998447][ T5083] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1452.007777][ T5083] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1452.015440][ T5083] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1454.112217][ T5083] Bluetooth: hci11: command tx timeout [ 1456.036568][ T5083] Bluetooth: hci4: command 0x0406 tx timeout [ 1456.192374][T27094] Bluetooth: hci11: command tx timeout [ 1458.272241][T27094] Bluetooth: hci11: command tx timeout [ 1460.352245][T27094] Bluetooth: hci11: command tx timeout [ 1464.933951][ T7497] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1471.893140][ T5083] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1471.902830][ T5083] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1471.912505][ T5083] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1471.920942][ T5083] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1471.929639][ T5083] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1471.938165][ T5083] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1472.512551][ T7496] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1473.546080][ T5083] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1473.556229][ T5083] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1473.570029][ T5083] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1473.579049][ T5083] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1473.588102][ T5083] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1473.596951][ T5083] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1473.632748][T27313] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1473.643531][T27313] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1473.652040][T27313] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1473.660677][T27313] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1473.668994][T27313] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1473.681705][T27313] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1473.952379][T27313] Bluetooth: hci12: command tx timeout [ 1475.632311][T27316] Bluetooth: hci13: command tx timeout [ 1475.712286][T27316] Bluetooth: hci14: command tx timeout [ 1476.042263][T27316] Bluetooth: hci12: command tx timeout [ 1476.512216][T27316] Bluetooth: hci0: command 0x0406 tx timeout [ 1476.518417][T27316] Bluetooth: hci5: command 0x0406 tx timeout [ 1476.528935][ T5083] Bluetooth: hci6: command 0x0406 tx timeout [ 1477.712327][T27094] Bluetooth: hci13: command tx timeout [ 1477.792193][T27094] Bluetooth: hci14: command tx timeout [ 1478.112247][T27094] Bluetooth: hci12: command tx timeout [ 1479.792419][T27094] Bluetooth: hci13: command tx timeout [ 1479.882383][T27094] Bluetooth: hci14: command tx timeout [ 1480.192275][T27094] Bluetooth: hci12: command tx timeout [ 1481.873516][T27094] Bluetooth: hci13: command tx timeout [ 1481.952185][T27094] Bluetooth: hci14: command tx timeout [ 1484.676583][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.684945][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.432240][ T29] INFO: task kworker/u4:16:7480 blocked for more than 143 seconds. [ 1490.440212][ T29] Not tainted syzkaller #0 [ 1490.447099][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1490.460161][ T29] task:kworker/u4:16 state:D stack:20904 pid:7480 ppid:2 flags:0x00004000 [ 1490.470645][ T29] Workqueue: events_unbound linkwatch_event [ 1490.476797][ T29] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1490.480174][ T29] [ 1490.484472][ T29] __schedule+0x15ae/0x4660 [ 1490.489120][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 1490.496217][ T29] ? asan.module_dtor+0x20/0x20 [ 1490.501195][ T29] ? __mutex_lock+0x66e/0xc80 [ 1490.510433][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1490.516052][ T29] ? kthread_data+0x4f/0xc0 [ 1490.520665][ T29] ? wq_worker_sleeping+0x63/0x240 [ 1490.526620][ T29] schedule+0xbd/0x170 [ 1490.530818][ T29] schedule_preempt_disabled+0x13/0x20 [ 1490.538113][ T29] __mutex_lock+0x673/0xc80 [ 1490.542754][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1490.547540][ T29] ? linkwatch_event+0xe/0x60 [ 1490.552377][ T29] ? mutex_lock_nested+0x20/0x20 [ 1490.557445][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1490.562934][ T29] ? process_scheduled_works+0x975/0x1600 [ 1490.568777][ T29] ? process_scheduled_works+0x975/0x1600 [ 1490.574683][ T29] linkwatch_event+0xe/0x60 [ 1490.579296][ T29] process_scheduled_works+0xa60/0x1600 [ 1490.587954][ T29] ? worker_attach_to_pool+0x370/0x370 [ 1490.605284][ T29] ? assign_work+0x3cc/0x5d0 [ 1490.610956][ T29] worker_thread+0xa5e/0xfe0 [ 1490.616040][ T29] kthread+0x2fa/0x390 [ 1490.620213][ T29] ? pr_cont_work+0x550/0x550 [ 1490.625415][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1490.630140][ T29] ret_from_fork+0x48/0x80 [ 1490.635123][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1490.640153][ T29] ret_from_fork_asm+0x11/0x20 [ 1490.645563][ T29] [ 1490.648755][ T29] INFO: task kworker/u4:29:7498 blocked for more than 143 seconds. [ 1490.657967][ T29] Not tainted syzkaller #0 [ 1490.663345][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1490.672519][ T29] task:kworker/u4:29 state:D stack:21736 pid:7498 ppid:2 flags:0x00004000 [ 1490.681967][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 1490.688507][ T29] Call Trace: [ 1490.691886][ T29] [ 1490.696304][ T29] __schedule+0x15ae/0x4660 [ 1490.700965][ T29] ? asan.module_dtor+0x20/0x20 [ 1490.707331][ T29] ? __mutex_lock+0x66e/0xc80 [ 1490.713532][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1490.719124][ T29] ? kthread_data+0x4f/0xc0 [ 1490.724042][ T29] ? wq_worker_sleeping+0x63/0x240 [ 1490.729276][ T29] schedule+0xbd/0x170 [ 1490.733809][ T29] schedule_preempt_disabled+0x13/0x20 [ 1490.740177][ T29] __mutex_lock+0x673/0xc80 [ 1490.752498][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1490.758356][ T29] ? addrconf_dad_work+0xce/0x1550 [ 1490.792122][ T29] ? mutex_lock_nested+0x20/0x20 [ 1490.799186][ T29] addrconf_dad_work+0xce/0x1550 [ 1490.814037][ T29] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 1490.832596][ T29] ? read_lock_is_recursive+0x20/0x20 [ 1490.839164][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1490.845480][ T29] ? process_scheduled_works+0x975/0x1600 [ 1490.851318][ T29] ? process_scheduled_works+0x975/0x1600 [ 1490.864558][ T29] process_scheduled_works+0xa60/0x1600 [ 1490.871790][ T29] ? worker_attach_to_pool+0x370/0x370 [ 1490.877697][ T29] ? assign_work+0x3cc/0x5d0 [ 1490.882899][ T29] worker_thread+0xa5e/0xfe0 [ 1490.887713][ T29] kthread+0x2fa/0x390 [ 1490.891878][ T29] ? pr_cont_work+0x550/0x550 [ 1490.896737][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1490.901645][ T29] ret_from_fork+0x48/0x80 [ 1490.906339][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1490.911051][ T29] ret_from_fork_asm+0x11/0x20 [ 1490.916080][ T29] [ 1490.919399][ T29] INFO: task kworker/0:1:19682 blocked for more than 143 seconds. [ 1490.927496][ T29] Not tainted syzkaller #0 [ 1490.933802][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1490.942650][ T29] task:kworker/0:1 state:D stack:24840 pid:19682 ppid:2 flags:0x00004000 [ 1490.952516][ T29] Workqueue: events switchdev_deferred_process_work [ 1490.959253][ T29] Call Trace: [ 1490.962716][ T29] [ 1490.965981][ T29] __schedule+0x15ae/0x4660 [ 1490.970545][ T29] ? schedule+0x6b/0x170 [ 1490.974949][ T29] ? mark_lock+0x94/0x320 [ 1490.979459][ T29] ? asan.module_dtor+0x20/0x20 [ 1490.984412][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1490.989524][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1490.995162][ T29] schedule+0xbd/0x170 [ 1490.999298][ T29] schedule_preempt_disabled+0x13/0x20 [ 1491.004914][ T29] __mutex_lock+0x673/0xc80 [ 1491.009510][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1491.014301][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 1491.020559][ T29] ? mutex_lock_nested+0x20/0x20 [ 1491.025679][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1491.031118][ T29] ? process_scheduled_works+0x975/0x1600 [ 1491.037069][ T29] ? process_scheduled_works+0x975/0x1600 [ 1491.042917][ T29] switchdev_deferred_process_work+0xe/0x20 [ 1491.049171][ T29] process_scheduled_works+0xa60/0x1600 [ 1491.054912][ T29] ? worker_attach_to_pool+0x370/0x370 [ 1491.060564][ T29] ? assign_work+0x3cc/0x5d0 [ 1491.065314][ T29] worker_thread+0xa5e/0xfe0 [ 1491.070043][ T29] ? _raw_spin_unlock+0x40/0x40 [ 1491.075187][ T29] ? __kthread_parkme+0x71/0x1c0 [ 1491.080190][ T29] kthread+0x2fa/0x390 [ 1491.084729][ T29] ? pr_cont_work+0x550/0x550 [ 1491.089475][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1491.094184][ T29] ret_from_fork+0x48/0x80 [ 1491.098694][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1491.103393][ T29] ret_from_fork_asm+0x11/0x20 [ 1491.108230][ T29] [ 1491.111358][ T29] INFO: task syz-executor:27092 blocked for more than 144 seconds. [ 1491.119692][ T29] Not tainted syzkaller #0 [ 1491.124806][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1491.133591][ T29] task:syz-executor state:D stack:21896 pid:27092 ppid:1 flags:0x00004004 [ 1491.144104][ T29] Call Trace: [ 1491.147433][ T29] [ 1491.150770][ T29] __schedule+0x15ae/0x4660 [ 1491.155715][ T29] ? asan.module_dtor+0x20/0x20 [ 1491.160630][ T29] ? __mutex_lock+0x66e/0xc80 [ 1491.165503][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1491.171021][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1491.177848][ T29] schedule+0xbd/0x170 [ 1491.181980][ T29] schedule_preempt_disabled+0x13/0x20 [ 1491.188832][ T29] __mutex_lock+0x673/0xc80 [ 1491.193693][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1491.198498][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1491.203882][ T29] ? mutex_lock_nested+0x20/0x20 [ 1491.208922][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 1491.214142][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1491.219326][ T29] ? rtnetlink_bind+0x80/0x80 [ 1491.224124][ T29] ? mark_lock+0x94/0x320 [ 1491.228530][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1491.233819][ T29] ? mark_lock+0x94/0x320 [ 1491.238205][ T29] ? mark_lock+0x94/0x320 [ 1491.242642][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1491.247738][ T29] ? kmalloc_reserve+0x95/0x240 [ 1491.253223][ T29] ? verify_lock_unused+0x140/0x140 [ 1491.258510][ T29] ? verify_lock_unused+0x140/0x140 [ 1491.263896][ T29] netlink_rcv_skb+0x235/0x4c0 [ 1491.268798][ T29] ? rtnetlink_bind+0x80/0x80 [ 1491.273659][ T29] ? netlink_ack+0x1160/0x1160 [ 1491.278569][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1491.283769][ T29] ? net_generic+0x1e/0x240 [ 1491.288386][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1491.293779][ T29] netlink_unicast+0x7b1/0x930 [ 1491.298674][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1491.303630][ T29] ? netlink_getsockopt+0x590/0x590 [ 1491.308932][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1491.314659][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1491.320011][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1491.325609][ T29] __sys_sendto+0x4a9/0x6b0 [ 1491.330168][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 1491.335732][ T29] ? slab_free_freelist_hook+0x130/0x1a0 [ 1491.341444][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1491.347534][ T29] ? __fput+0x67e/0x940 [ 1491.351734][ T29] ? lock_chain_count+0x20/0x20 [ 1491.357142][ T29] __x64_sys_sendto+0xde/0xf0 [ 1491.361888][ T29] do_syscall_64+0x55/0xb0 [ 1491.366556][ T29] ? clear_bhb_loop+0x40/0x90 [ 1491.371285][ T29] ? clear_bhb_loop+0x40/0x90 [ 1491.376154][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1491.382170][ T29] RIP: 0033:0x7f7a3375e68e [ 1491.386643][ T29] RSP: 002b:00007fff64facd98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1491.395315][ T29] RAX: ffffffffffffffda RBX: 00005555835aa500 RCX: 00007f7a3375e68e [ 1491.403374][ T29] RDX: 0000000000000040 RSI: 00007f7a34554670 RDI: 0000000000000003 [ 1491.411400][ T29] RBP: 0000000000000001 R08: 00007fff64face14 R09: 000000000000000c [ 1491.419729][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1491.428041][ T29] R13: 0000000000000000 R14: 00007f7a34554670 R15: 0000000000000000 [ 1491.437167][ T29] [ 1491.440311][ T29] INFO: task syz.3.6493:27221 blocked for more than 144 seconds. [ 1491.448148][ T29] Not tainted syzkaller #0 [ 1491.453184][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1491.462243][ T29] task:syz.3.6493 state:D stack:24200 pid:27221 ppid:21033 flags:0x00004004 [ 1491.471504][ T29] Call Trace: [ 1491.475321][ T29] [ 1491.478301][ T29] __schedule+0x15ae/0x4660 [ 1491.483100][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 1491.489077][ T29] ? asan.module_dtor+0x20/0x20 [ 1491.494202][ T29] ? __mutex_lock+0x66e/0xc80 [ 1491.498935][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1491.504698][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1491.510917][ T29] schedule+0xbd/0x170 [ 1491.515333][ T29] schedule_preempt_disabled+0x13/0x20 [ 1491.520859][ T29] __mutex_lock+0x673/0xc80 [ 1491.525658][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1491.530382][ T29] ? tun_chr_close+0x41/0x1c0 [ 1491.536251][ T29] ? mutex_lock_nested+0x20/0x20 [ 1491.541265][ T29] ? tun_chr_open+0x510/0x510 [ 1491.547208][ T29] tun_chr_close+0x41/0x1c0 [ 1491.551772][ T29] ? tun_chr_open+0x510/0x510 [ 1491.556574][ T29] __fput+0x221/0x940 [ 1491.560967][ T29] __se_sys_close+0x15c/0x1e0 [ 1491.565798][ T29] do_syscall_64+0x55/0xb0 [ 1491.570307][ T29] ? clear_bhb_loop+0x40/0x90 [ 1491.575101][ T29] ? clear_bhb_loop+0x40/0x90 [ 1491.579822][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1491.586184][ T29] RIP: 0033:0x7fa13e59de59 [ 1491.590658][ T29] RSP: 002b:00007fa13f45e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1491.599359][ T29] RAX: ffffffffffffffda RBX: 00007fa13e825fa0 RCX: 00007fa13e59de59 [ 1491.607567][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 1491.615794][ T29] RBP: 00007fa13e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1491.624070][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1491.632411][ T29] R13: 00007fa13e826038 R14: 00007fa13e825fa0 R15: 00007fff73bdd558 [ 1491.640463][ T29] [ 1491.648657][ T29] INFO: task syz.0.6496:27235 blocked for more than 144 seconds. [ 1491.658568][ T29] Not tainted syzkaller #0 [ 1491.664296][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1491.673241][ T29] task:syz.0.6496 state:D stack:23656 pid:27235 ppid:21728 flags:0x00004004 [ 1491.682720][ T29] Call Trace: [ 1491.686049][ T29] [ 1491.689023][ T29] __schedule+0x15ae/0x4660 [ 1491.694017][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 1491.699992][ T29] ? asan.module_dtor+0x20/0x20 [ 1491.705145][ T29] ? __mutex_lock+0x66e/0xc80 [ 1491.709887][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1491.715788][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1491.722013][ T29] schedule+0xbd/0x170 [ 1491.726384][ T29] schedule_preempt_disabled+0x13/0x20 [ 1491.731906][ T29] __mutex_lock+0x673/0xc80 [ 1491.736750][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1491.741493][ T29] ? wext_ioctl_dispatch+0x106/0x650 [ 1491.747096][ T29] ? mutex_lock_nested+0x20/0x20 [ 1491.754797][ T29] ? dev_load+0x21/0x1f0 [ 1491.759190][ T29] ? dev_load+0x21/0x1f0 [ 1491.765500][ T29] wext_ioctl_dispatch+0x106/0x650 [ 1491.770675][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1491.776563][ T29] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1491.782722][ T29] ? wext_ioctl_dispatch+0x650/0x650 [ 1491.788128][ T29] ? iw_handler_get_private+0x1f0/0x1f0 [ 1491.796561][ T29] ? wext_handle_ioctl+0x1e0/0x1e0 [ 1491.801730][ T29] ? __might_fault+0xaa/0x120 [ 1491.806811][ T29] ? __might_fault+0xc6/0x120 [ 1491.811534][ T29] ? __might_fault+0xaa/0x120 [ 1491.816367][ T29] wext_handle_ioctl+0x118/0x1e0 [ 1491.821543][ T29] ? call_commit_handler+0xf0/0xf0 [ 1491.826822][ T29] sock_ioctl+0x15d/0x7e0 [ 1491.831354][ T29] ? sock_poll+0x3e0/0x3e0 [ 1491.837407][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1491.845362][ T29] ? security_file_ioctl+0x80/0xa0 [ 1491.850541][ T29] ? sock_poll+0x3e0/0x3e0 [ 1491.855040][ T29] __se_sys_ioctl+0xfd/0x170 [ 1491.859690][ T29] do_syscall_64+0x55/0xb0 [ 1491.864344][ T29] ? clear_bhb_loop+0x40/0x90 [ 1491.869361][ T29] ? clear_bhb_loop+0x40/0x90 [ 1491.875596][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1491.881551][ T29] RIP: 0033:0x7fb56899de59 [ 1491.886319][ T29] RSP: 002b:00007fb5698d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.895045][ T29] RAX: ffffffffffffffda RBX: 00007fb568c25fa0 RCX: 00007fb56899de59 [ 1491.903268][ T29] RDX: 0000200000000000 RSI: 0000000000008b28 RDI: 000000000000000d [ 1491.911305][ T29] RBP: 00007fb568a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1491.919751][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1491.927978][ T29] R13: 00007fb568c26038 R14: 00007fb568c25fa0 R15: 00007ffc23cf3338 [ 1491.936261][ T29] [ 1491.939453][ T29] INFO: task syz.0.6496:27239 blocked for more than 144 seconds. [ 1491.948082][ T29] Not tainted syzkaller #0 [ 1491.953235][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1491.961957][ T29] task:syz.0.6496 state:D stack:25832 pid:27239 ppid:21728 flags:0x00004004 [ 1491.971857][ T29] Call Trace: [ 1491.975374][ T29] [ 1491.978382][ T29] __schedule+0x15ae/0x4660 [ 1491.983229][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 1491.989213][ T29] ? asan.module_dtor+0x20/0x20 [ 1491.994367][ T29] ? __mutex_lock+0x66e/0xc80 [ 1491.999104][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1492.004856][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1492.011060][ T29] schedule+0xbd/0x170 [ 1492.015429][ T29] schedule_preempt_disabled+0x13/0x20 [ 1492.020947][ T29] __mutex_lock+0x673/0xc80 [ 1492.026025][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1492.030926][ T29] ? __tun_chr_ioctl+0x3f7/0x2070 [ 1492.036355][ T29] ? mutex_lock_nested+0x20/0x20 [ 1492.041370][ T29] ? __might_fault+0xaa/0x120 [ 1492.046171][ T29] ? __might_fault+0xc6/0x120 [ 1492.050904][ T29] ? __might_fault+0xaa/0x120 [ 1492.055698][ T29] __tun_chr_ioctl+0x3f7/0x2070 [ 1492.060607][ T29] ? tun_flow_create+0x310/0x310 [ 1492.065952][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1492.071299][ T29] ? security_file_ioctl+0x80/0xa0 [ 1492.076726][ T29] ? tun_chr_poll+0x630/0x630 [ 1492.081463][ T29] __se_sys_ioctl+0xfd/0x170 [ 1492.086388][ T29] do_syscall_64+0x55/0xb0 [ 1492.090956][ T29] ? clear_bhb_loop+0x40/0x90 [ 1492.095929][ T29] ? clear_bhb_loop+0x40/0x90 [ 1492.100667][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1492.107247][ T29] RIP: 0033:0x7fb56899de59 [ 1492.111725][ T29] RSP: 002b:00007fb5698af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.120704][ T29] RAX: ffffffffffffffda RBX: 00007fb568c26090 RCX: 00007fb56899de59 [ 1492.128935][ T29] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 000000000000000a [ 1492.137279][ T29] RBP: 00007fb568a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1492.145495][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1492.153720][ T29] R13: 00007fb568c26128 R14: 00007fb568c26090 R15: 00007ffc23cf3338 [ 1492.161771][ T29] [ 1492.165099][ T29] INFO: task syz.0.6496:27241 blocked for more than 145 seconds. [ 1492.173785][ T29] Not tainted syzkaller #0 [ 1492.178766][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1492.187537][ T29] task:syz.0.6496 state:D stack:28520 pid:27241 ppid:21728 flags:0x00004004 [ 1492.197695][ T29] Call Trace: [ 1492.201104][ T29] [ 1492.204146][ T29] __schedule+0x15ae/0x4660 [ 1492.208706][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 1492.214766][ T29] ? lock_chain_count+0x20/0x20 [ 1492.219764][ T29] ? asan.module_dtor+0x20/0x20 [ 1492.224957][ T29] ? __mutex_lock+0x66e/0xc80 [ 1492.229751][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1492.235861][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1492.242402][ T29] schedule+0xbd/0x170 [ 1492.246585][ T29] schedule_preempt_disabled+0x13/0x20 [ 1492.252375][ T29] __mutex_lock+0x673/0xc80 [ 1492.256937][ T29] ? module_enforce_rwx_sections+0x150/0x150 [ 1492.263111][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1492.267893][ T29] ? dev_ioctl+0x7a4/0x1140 [ 1492.273096][ T29] ? mutex_lock_nested+0x20/0x20 [ 1492.278490][ T29] ? dev_load+0x21/0x1f0 [ 1492.282936][ T29] dev_ioctl+0x7a4/0x1140 [ 1492.287328][ T29] sock_do_ioctl+0x239/0x310 [ 1492.291966][ T29] ? sock_show_fdinfo+0xb0/0xb0 [ 1492.297340][ T29] sock_ioctl+0x5be/0x7e0 [ 1492.301738][ T29] ? sock_poll+0x3e0/0x3e0 [ 1492.306523][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1492.311535][ T29] ? security_file_ioctl+0x80/0xa0 [ 1492.316955][ T29] ? sock_poll+0x3e0/0x3e0 [ 1492.321449][ T29] __se_sys_ioctl+0xfd/0x170 [ 1492.326385][ T29] do_syscall_64+0x55/0xb0 [ 1492.330878][ T29] ? clear_bhb_loop+0x40/0x90 [ 1492.335880][ T29] ? clear_bhb_loop+0x40/0x90 [ 1492.340617][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1492.346831][ T29] RIP: 0033:0x7fb56899de59 [ 1492.351316][ T29] RSP: 002b:00007fb56988e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.360930][ T29] RAX: ffffffffffffffda RBX: 00007fb568c26180 RCX: 00007fb56899de59 [ 1492.369259][ T29] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 000000000000000c [ 1492.377825][ T29] RBP: 00007fb568a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1492.386095][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1492.394395][ T29] R13: 00007fb568c26218 R14: 00007fb568c26180 R15: 00007ffc23cf3338 [ 1492.402661][ T29] [ 1492.405774][ T29] INFO: task syz.1.6498:27247 blocked for more than 145 seconds. [ 1492.413834][ T29] Not tainted syzkaller #0 [ 1492.419005][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1492.427948][ T29] task:syz.1.6498 state:D stack:23400 pid:27247 ppid:21292 flags:0x00004004 [ 1492.437291][ T29] Call Trace: [ 1492.440609][ T29] [ 1492.443629][ T29] __schedule+0x15ae/0x4660 [ 1492.448193][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 1492.454229][ T29] ? asan.module_dtor+0x20/0x20 [ 1492.459138][ T29] ? __mutex_lock+0x66e/0xc80 [ 1492.464044][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1492.469555][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1492.475823][ T29] schedule+0xbd/0x170 [ 1492.480305][ T29] schedule_preempt_disabled+0x13/0x20 [ 1492.485941][ T29] __mutex_lock+0x673/0xc80 [ 1492.490497][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1492.495274][ T29] ? __tun_chr_ioctl+0x3f7/0x2070 [ 1492.500366][ T29] ? mutex_lock_nested+0x20/0x20 [ 1492.505440][ T29] ? __might_fault+0xaa/0x120 [ 1492.510160][ T29] ? __might_fault+0xc6/0x120 [ 1492.515350][ T29] ? __might_fault+0xaa/0x120 [ 1492.520089][ T29] __tun_chr_ioctl+0x3f7/0x2070 [ 1492.525264][ T29] ? tun_flow_create+0x310/0x310 [ 1492.530290][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1492.535556][ T29] ? security_file_ioctl+0x80/0xa0 [ 1492.540735][ T29] ? tun_chr_poll+0x630/0x630 [ 1492.545723][ T29] __se_sys_ioctl+0xfd/0x170 [ 1492.550371][ T29] do_syscall_64+0x55/0xb0 [ 1492.555087][ T29] ? clear_bhb_loop+0x40/0x90 [ 1492.559831][ T29] ? clear_bhb_loop+0x40/0x90 [ 1492.564789][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1492.570749][ T29] RIP: 0033:0x7fc9b8d9de59 [ 1492.575580][ T29] RSP: 002b:00007fc9b9cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.584628][ T29] RAX: ffffffffffffffda RBX: 00007fc9b9025fa0 RCX: 00007fc9b8d9de59 [ 1492.594950][ T29] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 000000000000000b [ 1492.603268][ T29] RBP: 00007fc9b8e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1492.611282][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1492.619348][ T29] R13: 00007fc9b9026038 R14: 00007fc9b9025fa0 R15: 00007ffdd8f17568 [ 1492.627587][ T29] [ 1492.630669][ T29] INFO: task syz.1.6498:27249 blocked for more than 145 seconds. [ 1492.638479][ T29] Not tainted syzkaller #0 [ 1492.643503][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1492.652483][ T29] task:syz.1.6498 state:D stack:29096 pid:27249 ppid:21292 flags:0x00004004 [ 1492.661798][ T29] Call Trace: [ 1492.665536][ T29] [ 1492.668521][ T29] __schedule+0x15ae/0x4660 [ 1492.680382][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 1492.686956][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 1492.694226][ T29] ? asan.module_dtor+0x20/0x20 [ 1492.699155][ T29] ? __mutex_lock+0x66e/0xc80 [ 1492.704318][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1492.709842][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1492.716613][ T29] schedule+0xbd/0x170 [ 1492.720744][ T29] schedule_preempt_disabled+0x13/0x20 [ 1492.726623][ T29] __mutex_lock+0x673/0xc80 [ 1492.731209][ T29] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1492.737288][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1492.742128][ T29] ? __tun_chr_ioctl+0x3f7/0x2070 [ 1492.747312][ T29] ? mutex_lock_nested+0x20/0x20 [ 1492.752732][ T29] ? tun_chr_poll+0x630/0x630 [ 1492.757475][ T29] ? tun_chr_poll+0x630/0x630 [ 1492.762525][ T29] __tun_chr_ioctl+0x3f7/0x2070 [ 1492.767592][ T29] ? tun_flow_create+0x310/0x310 [ 1492.772929][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1492.777923][ T29] ? security_file_ioctl+0x80/0xa0 [ 1492.783725][ T29] ? tun_chr_poll+0x630/0x630 [ 1492.788992][ T29] __se_sys_ioctl+0xfd/0x170 [ 1492.794041][ T29] do_syscall_64+0x55/0xb0 [ 1492.798526][ T29] ? clear_bhb_loop+0x40/0x90 [ 1492.804726][ T29] ? clear_bhb_loop+0x40/0x90 [ 1492.809484][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1492.816740][ T29] RIP: 0033:0x7fc9b8d9de59 [ 1492.821223][ T29] RSP: 002b:00007fc9b9cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.830079][ T29] RAX: ffffffffffffffda RBX: 00007fc9b9026090 RCX: 00007fc9b8d9de59 [ 1492.838384][ T29] RDX: ba98575a95aeb70d RSI: 00000000400454c9 RDI: 000000000000000b [ 1492.846680][ T29] RBP: 00007fc9b8e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1492.855146][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1492.863202][ T29] R13: 00007fc9b9026128 R14: 00007fc9b9026090 R15: 00007ffdd8f17568 [ 1492.871222][ T29] [ 1492.874770][ T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1492.884120][ T29] [ 1492.884120][ T29] Showing all locks held in the system: [ 1492.892777][ T29] 1 lock held by khungtaskd/29: [ 1492.897669][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1492.908317][ T29] 1 lock held by syslogd/5120: [ 1492.916913][ T29] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1492.929448][ T29] 2 locks held by getty/5532: [ 1492.936971][ T29] #0: ffff8880319790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1492.948742][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 1492.961865][ T29] 3 locks held by kworker/u4:16/7480: [ 1492.969276][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1492.985707][ T29] #1: ffffc90005067d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1492.997657][ T29] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1493.006992][ T29] 4 locks held by kworker/u4:23/7492: [ 1493.012473][ T29] #0: ffff88801a25c938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1493.028036][ T29] #1: ffffc90005007d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1493.040491][ T29] #2: ffffffff8e3c8b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1493.050287][ T29] #3: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa00 [ 1493.060637][ T29] 3 locks held by kworker/u4:29/7498: [ 1493.066329][ T29] #0: ffff88802c919538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1493.078748][ T29] #1: ffffc90005157d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1493.091931][ T29] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550 [ 1493.102208][ T29] 3 locks held by kworker/0:1/19682: [ 1493.107554][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1493.118956][ T29] #1: ffffc9000b8dfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1493.130084][ T29] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1493.145418][ T29] 1 lock held by syz-executor/27092: [ 1493.150752][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.163138][ T29] 1 lock held by syz.3.6493/27221: [ 1493.168320][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1493.180605][ T29] 1 lock held by syz.0.6496/27235: [ 1493.187777][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0x106/0x650 [ 1493.198087][ T29] 1 lock held by syz.0.6496/27239: [ 1493.203339][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 1493.212807][ T29] 1 lock held by syz.0.6496/27241: [ 1493.217953][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 1493.226898][ T29] 1 lock held by syz.1.6498/27247: [ 1493.232299][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 1493.241704][ T29] 1 lock held by syz.1.6498/27249: [ 1493.247260][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 1493.258974][ T29] 1 lock held by syz.1.6498/27250: [ 1493.264445][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 1493.274103][ T29] 1 lock held by syz-executor/27259: [ 1493.279437][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.289285][ T29] 1 lock held by syz-executor/27265: [ 1493.294974][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.305220][ T29] 1 lock held by syz-executor/27267: [ 1493.310544][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.320675][ T29] 1 lock held by syz-executor/27271: [ 1493.326286][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.336034][ T29] 1 lock held by syz-executor/27282: [ 1493.341369][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.351388][ T29] 1 lock held by syz-executor/27287: [ 1493.356968][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.368971][ T29] 1 lock held by syz-executor/27289: [ 1493.374641][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.384387][ T29] 1 lock held by syz-executor/27292: [ 1493.389708][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.399735][ T29] 1 lock held by syz-executor/27303: [ 1493.407723][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.419988][ T29] 1 lock held by syz-executor/27310: [ 1493.427305][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.439639][ T29] 1 lock held by syz-executor/27312: [ 1493.446895][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1493.459136][ T29] [ 1493.461512][ T29] ============================================= [ 1493.461512][ T29] [ 1493.470144][ T29] NMI backtrace for cpu 1 [ 1493.474515][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1493.481763][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1493.491933][ T29] Call Trace: [ 1493.495238][ T29] [ 1493.498216][ T29] dump_stack_lvl+0x18c/0x250 [ 1493.502947][ T29] ? __wake_up_klogd+0xd9/0x100 [ 1493.507857][ T29] ? show_regs_print_info+0x20/0x20 [ 1493.513119][ T29] ? load_image+0x420/0x420 [ 1493.517687][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1493.522669][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1493.528877][ T29] ? load_image+0x420/0x420 [ 1493.533444][ T29] ? wq_watchdog_touch+0xef/0x170 [ 1493.538518][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1493.544672][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1493.550694][ T29] watchdog+0xf59/0xfa0 [ 1493.554897][ T29] ? watchdog+0x1e1/0xfa0 [ 1493.559277][ T29] kthread+0x2fa/0x390 [ 1493.563392][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1493.568463][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1493.573092][ T29] ret_from_fork+0x48/0x80 [ 1493.577557][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1493.582196][ T29] ret_from_fork_asm+0x11/0x20 [ 1493.587047][ T29] [ 1493.590799][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1493.596146][ C0] NMI backtrace for cpu 0 [ 1493.596157][ C0] CPU: 0 PID: 5120 Comm: syslogd Not tainted syzkaller #0 [ 1493.596175][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1493.596186][ C0] RIP: 0010:__skb_wait_for_more_packets+0x20e/0x590 [ 1493.596215][ C0] Code: 31 ff e8 b5 96 0a f9 f6 c3 01 75 71 49 8d 9f 8a 03 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ec 02 00 00 0f b7 1b <83> e3 fb bf 01 00 00 00 89 de e8 13 97 0a f9 83 fb 01 0f 85 dd 00 [ 1493.596230][ C0] RSP: 0018:ffffc90003267920 EFLAGS: 00000246 [ 1493.596246][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 1493.596257][ C0] RDX: ffff88807de33c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1493.596268][ C0] RBP: ffffc90003267a30 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 1493.596282][ C0] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: 1ffff9200064cf2c [ 1493.596295][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880209ab800 [ 1493.596307][ C0] FS: 00007f3d86bf8c80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1493.596323][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1493.596335][ C0] CR2: 000055e709147f70 CR3: 000000007d848000 CR4: 00000000003506f0 [ 1493.596350][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1493.596360][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1493.596371][ C0] Call Trace: [ 1493.596377][ C0] [ 1493.596386][ C0] ? skb_checksum_setup_ip+0xab0/0xab0 [ 1493.596408][ C0] ? __skb_wait_for_more_packets+0x590/0x590 [ 1493.596431][ C0] ? sock_load_diag_module+0x140/0x140 [ 1493.596460][ C0] __unix_dgram_recvmsg+0x2a5/0xd90 [ 1493.596490][ C0] ? unix_unhash+0x10/0x10 [ 1493.596515][ C0] ? aa_af_perm+0x330/0x330 [ 1493.596535][ C0] ? aa_file_perm+0x3e3/0xee0 [ 1493.596557][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1493.596580][ C0] ? security_socket_recvmsg+0x89/0xb0 [ 1493.596605][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 1493.596622][ C0] sock_read_iter+0x2db/0x3f0 [ 1493.596640][ C0] ? kernel_sock_ip_overhead+0x5a0/0x5a0 [ 1493.596669][ C0] ? common_file_perm+0x198/0x1f0 [ 1493.596691][ C0] vfs_read+0x486/0x990 [ 1493.596717][ C0] ? kernel_read+0x1e0/0x1e0 [ 1493.596741][ C0] ? __rseq_handle_notify_resume+0x33f/0x1140 [ 1493.596771][ C0] ? __fdget_pos+0x1d8/0x330 [ 1493.596795][ C0] ksys_read+0x151/0x260 [ 1493.596819][ C0] ? vfs_write+0x9a0/0x9a0 [ 1493.596842][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1493.596864][ C0] do_syscall_64+0x55/0xb0 [ 1493.596889][ C0] ? clear_bhb_loop+0x40/0x90 [ 1493.596905][ C0] ? clear_bhb_loop+0x40/0x90 [ 1493.596921][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1493.596945][ C0] RIP: 0033:0x7f3d86d48407 [ 1493.596958][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1493.596971][ C0] RSP: 002b:00007ffc4ec29450 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1493.596987][ C0] RAX: ffffffffffffffda RBX: 00007f3d86bf8c80 RCX: 00007f3d86d48407 [ 1493.596999][ C0] RDX: 00000000000000ff RSI: 0000556d93105950 RDI: 0000000000000000 [ 1493.597009][ C0] RBP: 0000556d93105910 R08: 0000000000000000 R09: 0000000000000000 [ 1493.597019][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000556d931059a1 [ 1493.597030][ C0] R13: 0000000000000000 R14: 0000556d93105950 R15: 0000556d7ffdad98 [ 1493.597049][ C0] [ 1493.652370][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1493.652410][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1493.652469][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1493.652510][ T29] Call Trace: [ 1493.652531][ T29] [ 1493.652558][ T29] dump_stack_lvl+0x18c/0x250 [ 1493.652677][ T29] ? show_regs_print_info+0x20/0x20 [ 1493.652764][ T29] ? load_image+0x420/0x420 [ 1493.652904][ T29] panic+0x2ca/0x720 [ 1493.652986][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1493.653056][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1493.653127][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1493.653196][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1493.653275][ T29] watchdog+0xf98/0xfa0 [ 1493.653338][ T29] ? watchdog+0x1e1/0xfa0 [ 1493.653421][ T29] kthread+0x2fa/0x390 [ 1493.653479][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1493.653550][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1493.653601][ T29] ret_from_fork+0x48/0x80 [ 1493.653690][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1493.653750][ T29] ret_from_fork_asm+0x11/0x20 [ 1493.653858][ T29] [ 1493.656617][ T29] Kernel Offset: disabled [ 1494.049783][ T29] Rebooting in 86400 seconds..