last executing test programs: 1m53.986388852s ago: executing program 1 (id=19): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b87031300ff001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/uts\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000002300)='ns/uts\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000700)='cpu.weight\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r1, 0x7, 0x0, 0x347, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x2f, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa83b217, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff0001}}, @call={0x85, 0x0, 0x0, 0x47}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x9651}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x3, 0x50, &(0x7f0000000380)=""/80, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x9, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x7, 0x3}, {0x5, 0x4, 0x5, 0x4}, {0x4, 0x2, 0x2, 0xc}, {0x2, 0x3, 0xf, 0xa}, {0x2, 0x2, 0xd, 0xc}], 0x10, 0x40}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r6, r4, 0x22, 0xe, 0xffffffffffffffff, @void, @value=r7, @void, @void, r5}, 0x20) 1m53.327101946s ago: executing program 1 (id=22): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000100)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 1m52.929440579s ago: executing program 1 (id=25): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, &(0x7f0000000340)=""/34}, 0x20) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0xffffffffffffff7a) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@o_path={&(0x7f0000000240)='./file0\x00', r2, 0x4000, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x101000, 0x32, 0x3, 0x2, 0x9, 0xb5c4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000ceb7cada5aef04000000000000000000b9a1ca4bf26c539e1a8eb54bb940", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xff93, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d81500010084c06fb300000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 1m52.172655854s ago: executing program 1 (id=28): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000), 0x8) r1 = socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="131000002c0091bcd8b8fa9f53812e4ca67e9aa648"], 0xfe33) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) openat$cgroup_int(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x7}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x20000041) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 1m49.949293198s ago: executing program 1 (id=29): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900000000fc000e03000000010000000a0000000000000203000000000000000500000d0000000006"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7020000010000e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu<02||!') write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3e971d"], 0x9a) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000d0000000d00000002000000010000000000000f01000000c70000000000b6df11e318544a1778d75d82bb63d36aa78bb3b0dd28a80f8e5e2c2de62ec2d274a318b5641e87a491e582a4a746fdbdf7f7071f23af71d43c028d4bce4a6276cad0817244a6474c8cd08a840ace78e0e06fe7b4472eca9c178bdbce62a32fa172adc3615b0620e9a813988eaf126eaab2f2a9b5f9933dbe2491"], &(0x7f0000000280)=""/128, 0x2a, 0x80, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r9 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "84"}, @func={0x6, 0x0, 0x0, 0xc, 0x7}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @const={0x3, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x6c, 0x2, 0x1, 0x800000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r12, &(0x7f0000000200)={&(0x7f0000000000)=@generic={0x1, "cb8db8704d5c5ca55a8edf10e8ed3f5a5090e9f7c449b0075f3de7447578995c7f350d558674acba80ac38a8ce3643a9c18503eebd7d7edc5cd2aac271c800d24f54710369e0a24d07b7e433ff41125387e30099d9000b7c669be8bb99c0c4f5adb51a382804f5252bea2d4f7d5ff1745d88639edfcd8078ac2b7f7fd599"}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRES16=r3], 0x0, 0xf94, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfa, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r13, 0x2000000, 0x6e, 0x0, &(0x7f0000000540)="c9f7b9867f3b628fa70000000000000000000000ce00be07da8b2bd04b06e90f3e74ad0d2ee827e7e3821235610f4a5572206c748bccb1bd411ce7bca69c66dee2bda49998dcdf08ed58983af7cc9d42d3a574880000001ff4639a46c7888d2d3002de2a422544c8cf13631bb4d8", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m49.60784051s ago: executing program 1 (id=34): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = openat$cgroup(r2, 0x0, 0x200002, 0x0) mkdirat$cgroup(r5, 0x0, 0x1ff) write$cgroup_freezer_state(r3, 0x0, 0x0) 1m33.938773468s ago: executing program 32 (id=34): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = openat$cgroup(r2, 0x0, 0x200002, 0x0) mkdirat$cgroup(r5, 0x0, 0x1ff) write$cgroup_freezer_state(r3, 0x0, 0x0) 2.918720882s ago: executing program 2 (id=836): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000001840)=""/136, 0x88}, {&(0x7f0000001900)=""/133, 0x85}, {&(0x7f00000019c0)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/144, 0x90}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/71, 0x47}, {&(0x7f0000001d00)=""/111, 0x6f}, {&(0x7f0000001d80)=""/40, 0x28}], 0xa}, 0x40010001) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xa, 0x0, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x10221, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1, 0x765c}, 0x1, 0xfffffffffffffff0, 0xfffffffa, 0x4, 0x3, 0x800, 0x1574, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848020000005e0c0000000000000e0004001400000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="909b5651ec5cb672000000ee3582989d71b875c094478802c554da8a39d40022c64b508c0bfed43b2f65e9f99da198fd26e0b2cd3b8fb53a50cf6bd9cb565cf58db9a698b53c80aa91650b4a968cbd7126938320ea9038c0a492e6bdc323df19da1d30edff291a"], &(0x7f0000000140)='GPL\x00', 0x7, 0xa1, &(0x7f0000000180)=""/161, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x517, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x1, 0xc, 0x6}, {0x0, 0x3, 0x5}, {0x5, 0x5, 0x3, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x1, 0x1, 0x10, 0x8}, {0x0, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4071, 0x1023}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000500)=""/181, 0xb5}], 0x4}, 0x0) 2.660833473s ago: executing program 4 (id=847): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.548890764s ago: executing program 4 (id=838): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x8, 0x0, 0x7fffffff, 0x9d6d1, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x800, 0x7fff, 0x7, 0x1, 0x81, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x80000001}, 0x0, 0xc, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) (fail_nth: 3) 2.547255723s ago: executing program 2 (id=839): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0x3) 2.193846626s ago: executing program 2 (id=843): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000001840)=""/136, 0x88}, {&(0x7f0000001900)=""/133, 0x85}, {&(0x7f00000019c0)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/144, 0x90}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/71, 0x47}, {&(0x7f0000001d00)=""/111, 0x6f}, {&(0x7f0000001d80)=""/40, 0x28}], 0xa}, 0x40010001) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xa, 0x0, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x10221, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1, 0x765c}, 0x1, 0xfffffffffffffff0, 0xfffffffa, 0x4, 0x3, 0x800, 0x1574, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848020000005e0c0000000000000e0004001400000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x400) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="909b5651ec5cb672000000ee3582989d71b875c094478802c554da8a39d40022c64b508c0bfed43b2f65e9f99da198fd26e0b2cd3b8fb53a50cf6bd9cb565cf58db9a698b53c80aa91650b4a968cbd7126938320ea9038c0a492e6bdc323df19da1d30edff291a"], &(0x7f0000000140)='GPL\x00', 0x7, 0xa1, &(0x7f0000000180)=""/161, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x517, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x1, 0xc, 0x6}, {0x0, 0x3, 0x5}, {0x5, 0x5, 0x3, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x1, 0x1, 0x10, 0x8}, {0x0, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 1.922807067s ago: executing program 2 (id=848): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) 1.854134298s ago: executing program 4 (id=849): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.683554089s ago: executing program 4 (id=851): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00000000030000000300"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r7, 0x0, r6}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000400"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="010000000400"/18], 0x50) sendmsg$inet(r4, &(0x7f0000000700)={&(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000002c0)="099d192effece6ee742d8822202319528e5477ceafde56cc427077164fa4e6a41f13d06355afae246d5381b853a696162b44e3a04c5eeeb3e4189eebdf2e0cc8bc07fb56531b84962953c861e166f8e353f7fdee7f9abcb8f7082cda44fb923c9f1cf36dcca945aa6a1013b79d3fdf6767585f4fc749b53a8af176a5913a761960756d9d9245304c77a6fd0ed116c1052159f71ad3ffe9aa4e3a9ef1f0", 0x9d}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000240)="bedd8f94edb36d8e67b0b73b453468acfd9a8ce5", 0x14}, {&(0x7f0000000380)="995bf6319cbffef7c3579994dee82578a83a24fe352e48481774239ef4912819259301301ca38b379a1f6329c983299a817b6f4eeeb7b86767494b24cff30b3e55a58cea1d8ead148a406322511a306bb2a13a6ac38ecd8eb0646e37a366367e58132a957c0b16c87243fbd97fd0a2798c057ce25edecaec6d1888ff187232b604ebf129f020f394cb80fd7cc6c5bd1fb18f01dae418cf99f4d802d28eb8133f69b282524414cf2465841eaf7ba9df107913cdbad45604ed376027e13ef7353909439644e7acfe0dd4cf6c", 0xcb}], 0x4, &(0x7f0000000600)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x8a, [@empty, @empty, @rand_addr=0x64010100, @local, @empty, @empty]}, @generic={0x86, 0x7, "afdc3f0975"}, @end, @timestamp_addr={0x44, 0xc, 0x33, 0x1, 0x2, [{@remote, 0x40000}]}, @end, @ssrr={0x89, 0x13, 0xdf, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102]}, @timestamp={0x44, 0x14, 0xca, 0x0, 0x4, [0x8001, 0x1, 0x0, 0x7]}, @timestamp={0x44, 0x10, 0x70, 0x0, 0xd, [0xf, 0xda09, 0x5]}, @timestamp_addr={0x44, 0x24, 0x29, 0x1, 0x7, [{@private=0xa010101, 0x2}, {@broadcast, 0x7fffffff}, {@broadcast, 0x4}, {@loopback, 0x9}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xf0}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 1.141922832s ago: executing program 0 (id=852): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000001840)=""/136, 0x88}, {&(0x7f0000001900)=""/133, 0x85}, {&(0x7f00000019c0)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/144, 0x90}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/71, 0x47}, {&(0x7f0000001d00)=""/111, 0x6f}, {&(0x7f0000001d80)=""/40, 0x28}], 0xa}, 0x40010001) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xa, 0x0, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x10221, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1, 0x765c}, 0x1, 0xfffffffffffffff0, 0xfffffffa, 0x4, 0x3, 0x800, 0x1574, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848020000005e0c0000000000000e0004001400000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="909b5651ec5cb672000000ee3582989d71b875c094478802c554da8a39d40022c64b508c0bfed43b2f65e9f99da198fd26e0b2cd3b8fb53a50cf6bd9cb565cf58db9a698b53c80aa91650b4a968cbd7126938320ea9038c0a492e6bdc323df19da1d30edff291a"], &(0x7f0000000140)='GPL\x00', 0x7, 0xa1, &(0x7f0000000180)=""/161, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x517, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x1, 0xc, 0x6}, {0x0, 0x3, 0x5}, {0x5, 0x5, 0x3, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x1, 0x1, 0x10, 0x8}, {0x0, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4071, 0x1023}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000500)=""/181, 0xb5}], 0x4}, 0x0) 1.141543182s ago: executing program 4 (id=853): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb58", 0x2}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x8, 0x0, 0x7fffffff, 0x9d6d1, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x800, 0x7fff, 0x7, 0x1, 0x81, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x80000001}, 0x0, 0xc, r0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x102d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3b, 0x5}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x12) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 1.141330552s ago: executing program 3 (id=854): r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0xc05, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x2, 0x0, 0xff, 0x0, 0x0, 0x20028, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc, @perf_bp={&(0x7f00000000c0), 0x1}, 0x11619d, 0x2000000000009, 0xfffffbff, 0x5, 0x2, 0x200, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x678) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x7eae}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.138406443s ago: executing program 2 (id=860): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d29ffb7c18000000000000001800001a237ee5af2ad9253f001800000005000000010000040900000002000000020000000600000000002e5f000cfe4a90e3ac1452636158d3d3"], 0x0, 0x35, 0x0, 0x1, 0x20}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x1fffffffffffffca, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x16}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x10001}, 0x108008, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x4000080) recvmsg$kcm(r2, 0x0, 0x2062) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000001b2105e034210061", @ANYRES64=r1, @ANYRES16=r1, @ANYRES32=r0], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x2001) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r6 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xdc5, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) 975.272354ms ago: executing program 3 (id=855): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000001840)=""/136, 0x88}, {&(0x7f0000001900)=""/133, 0x85}, {&(0x7f00000019c0)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/144, 0x90}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/71, 0x47}, {&(0x7f0000001d00)=""/111, 0x6f}, {&(0x7f0000001d80)=""/40, 0x28}], 0xa}, 0x40010001) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xa, 0x0, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x10221, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1, 0x765c}, 0x1, 0xfffffffffffffff0, 0xfffffffa, 0x4, 0x3, 0x800, 0x1574, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848020000005e0c0000000000000e0004001400000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="909b5651ec5cb672000000ee3582989d71b875c094478802c554da8a39d40022c64b508c0bfed43b2f65e9f99da198fd26e0b2cd3b8fb53a50cf6bd9cb565cf58db9a698b53c80aa91650b4a968cbd7126938320ea9038c0a492e6bdc323df19da1d30edff291a"], &(0x7f0000000140)='GPL\x00', 0x7, 0xa1, &(0x7f0000000180)=""/161, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x517, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x1, 0xc, 0x6}, {0x0, 0x3, 0x5}, {0x5, 0x5, 0x3, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x1, 0x1, 0x10, 0x8}, {0x0, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4071, 0x1023}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000500)=""/181, 0xb5}], 0x4}, 0x0) 953.285414ms ago: executing program 0 (id=856): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000001840)=""/136, 0x88}, {&(0x7f0000001900)=""/133, 0x85}, {&(0x7f00000019c0)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/144, 0x90}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/71, 0x47}, {&(0x7f0000001d00)=""/111, 0x6f}, {&(0x7f0000001d80)=""/40, 0x28}], 0xa}, 0x40010001) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xa, 0x0, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x10221, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1, 0x765c}, 0x1, 0xfffffffffffffff0, 0xfffffffa, 0x4, 0x3, 0x800, 0x1574, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848020000005e0c0000000000000e0004001400000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x400) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="909b5651ec5cb672000000ee3582989d71b875c094478802c554da8a39d40022c64b508c0bfed43b2f65e9f99da198fd26e0b2cd3b8fb53a50cf6bd9cb565cf58db9a698b53c80aa91650b4a968cbd7126938320ea9038c0a492e6bdc323df19da1d30edff291a"], &(0x7f0000000140)='GPL\x00', 0x7, 0xa1, &(0x7f0000000180)=""/161, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x517, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x1, 0xc, 0x6}, {0x0, 0x3, 0x5}, {0x5, 0x5, 0x3, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x1, 0x1, 0x10, 0x8}, {0x0, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 743.725785ms ago: executing program 2 (id=857): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x16, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @exit, @map_idx={0x18, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xadf629446573fbbb}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x79, &(0x7f0000000580)=""/121, 0x41100, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x4, 0x2, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[r5, r5], &(0x7f0000000600)=[{0x0, 0x1, 0x4, 0x7}, {0x4, 0x2, 0xf, 0x5}], 0x10, 0x8}, 0x94) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 644.464645ms ago: executing program 3 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x6000, 0x0}, 0x10) 583.354496ms ago: executing program 0 (id=859): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a118", 0x1d}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 472.775147ms ago: executing program 3 (id=861): r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0xc05, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x2, 0x0, 0xff, 0x0, 0x0, 0x20028, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc, @perf_bp={&(0x7f00000000c0), 0x1}, 0x11619d, 0x2000000000009, 0xfffffbff, 0x5, 0x2, 0x200, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x678) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000fc0)="a4caa29a1f57", 0x6}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x7eae}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 471.740297ms ago: executing program 0 (id=862): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000001840)=""/136, 0x88}, {&(0x7f0000001900)=""/133, 0x85}, {&(0x7f00000019c0)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/144, 0x90}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/71, 0x47}, {&(0x7f0000001d00)=""/111, 0x6f}, {&(0x7f0000001d80)=""/40, 0x28}], 0xa}, 0x40010001) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xa, 0x0, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x10221, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1, 0x765c}, 0x1, 0xfffffffffffffff0, 0xfffffffa, 0x4, 0x3, 0x800, 0x1574, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848020000005e0c0000000000000e0004001400000002800000121f", 0x2e}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="909b5651ec5cb672000000ee3582989d71b875c094478802c554da8a39d40022c64b508c0bfed43b2f65e9f99da198fd26e0b2cd3b8fb53a50cf6bd9cb565cf58db9a698b53c80aa91650b4a968cbd7126938320ea9038c0a492e6bdc323df19da1d30edff291a"], &(0x7f0000000140)='GPL\x00', 0x7, 0xa1, &(0x7f0000000180)=""/161, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x517, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x1, 0xc, 0x6}, {0x0, 0x3, 0x5}, {0x5, 0x5, 0x3, 0x7}, {0x2, 0x4, 0x1, 0x2}, {0x1, 0x1, 0x10, 0x8}, {0x0, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4071, 0x1023}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000500)=""/181, 0xb5}], 0x4}, 0x0) 195.491948ms ago: executing program 3 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000110000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 149.924759ms ago: executing program 4 (id=864): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000380)=0x9) close(0x3) socket$kcm(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0xfe85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) socket$kcm(0x10, 0x2, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x12, 0x7e, 0xf3, 0x0, 0x2, 0x826, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x7}, 0x400, 0x9, 0xbf4, 0x2, 0x7, 0x0, 0x5, 0x0, 0x9, 0x0, 0xb}, r8, 0x5, r2, 0x5) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61, 0x0, 0x0, 0x400}, {0x6}]}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000380)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_ext={0x1c, 0x14, &(0x7f0000000a40)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8f}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000440)='syzkaller\x00', 0x37, 0xc1, &(0x7f0000000c00)=""/193, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0xa, 0x400, 0x5}, 0x10, 0xea4a, r7, 0x5, &(0x7f0000000b00)=[r1, 0xffffffffffffffff, r1, r1], &(0x7f0000000e40)=[{0x4, 0x4, 0xd, 0xe}, {0x0, 0x4, 0x10}, {0x1, 0x1, 0x0, 0xa}, {0x0, 0x4, 0x6, 0xa}, {0x5, 0x1, 0x3, 0x6}], 0x10, 0x9e}, 0x94) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.37024ms ago: executing program 0 (id=865): r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0xc05, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x2, 0x0, 0xff, 0x0, 0x0, 0x20028, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc, @perf_bp={&(0x7f00000000c0), 0x1}, 0x11619d, 0x2000000000009, 0xfffffbff, 0x5, 0x2, 0x200, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x678) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x7eae}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 0s ago: executing program 3 (id=867): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d29ffb7c18000000000000001800001a237ee5af2ad9253f001800000005000000010000040900000002000000020000000600000000002e5f000cfe4a90e3ac1452636158d3d3"], 0x0, 0x35, 0x0, 0x1, 0x20}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x1fffffffffffffca, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x16}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x10001}, 0x108008, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x4000080) recvmsg$kcm(r2, 0x0, 0x2062) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000001b2105e034210061", @ANYRES64=r1, @ANYRES16=r1, @ANYRES32=r0], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x2001) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r6 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xdc5, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 336.033365][ T5820] cgroup: Unknown subsys name 'net' [ 336.196624][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 337.916328][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 339.570415][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.581815][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.590124][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.592197][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.599198][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.608830][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.612387][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.621256][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.627216][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.632585][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.640790][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.655738][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.663229][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.673294][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.682578][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.688468][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.691094][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.711631][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.726547][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.734708][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.746949][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.754348][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.765836][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.774093][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.155305][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 340.371569][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.388438][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.395905][ T5831] bridge_slave_0: entered allmulticast mode [ 340.417464][ T5831] bridge_slave_0: entered promiscuous mode [ 340.432966][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.440293][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.447502][ T5831] bridge_slave_1: entered allmulticast mode [ 340.454673][ T5831] bridge_slave_1: entered promiscuous mode [ 340.474925][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 340.506825][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.522570][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 340.535554][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.544891][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 340.679832][ T5831] team0: Port device team_slave_0 added [ 340.722499][ T5831] team0: Port device team_slave_1 added [ 340.763003][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.770746][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.778072][ T5834] bridge_slave_0: entered allmulticast mode [ 340.785803][ T5834] bridge_slave_0: entered promiscuous mode [ 340.805674][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.812972][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.820368][ T5830] bridge_slave_0: entered allmulticast mode [ 340.827324][ T5830] bridge_slave_0: entered promiscuous mode [ 340.852861][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.860241][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.867374][ T5834] bridge_slave_1: entered allmulticast mode [ 340.875179][ T5834] bridge_slave_1: entered promiscuous mode [ 340.905254][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.912526][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.919959][ T5830] bridge_slave_1: entered allmulticast mode [ 340.926892][ T5830] bridge_slave_1: entered promiscuous mode [ 340.959701][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.966711][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.992831][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.022549][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.030457][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.037637][ T5835] bridge_slave_0: entered allmulticast mode [ 341.044717][ T5835] bridge_slave_0: entered promiscuous mode [ 341.056565][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.069929][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.079671][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.086629][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.112854][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.142219][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.149574][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.156790][ T5835] bridge_slave_1: entered allmulticast mode [ 341.164465][ T5835] bridge_slave_1: entered promiscuous mode [ 341.214162][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.243105][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.255039][ T5834] team0: Port device team_slave_0 added [ 341.264557][ T5834] team0: Port device team_slave_1 added [ 341.273183][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.296657][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.344606][ T5830] team0: Port device team_slave_0 added [ 341.407320][ T5831] hsr_slave_0: entered promiscuous mode [ 341.413883][ T5831] hsr_slave_1: entered promiscuous mode [ 341.424550][ T5830] team0: Port device team_slave_1 added [ 341.446365][ T5835] team0: Port device team_slave_0 added [ 341.453621][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.460953][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.487020][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.499825][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.506797][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.532926][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.575395][ T5835] team0: Port device team_slave_1 added [ 341.608190][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.615335][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.642407][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.687849][ T5834] hsr_slave_0: entered promiscuous mode [ 341.694251][ T5834] hsr_slave_1: entered promiscuous mode [ 341.700736][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.709335][ T5834] Cannot create hsr debugfs directory [ 341.715549][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.722833][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.749019][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.766422][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.774026][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.779499][ T5847] Bluetooth: hci2: command tx timeout [ 341.800653][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.806046][ T51] Bluetooth: hci0: command tx timeout [ 341.822395][ T5843] Bluetooth: hci3: command tx timeout [ 341.858396][ T51] Bluetooth: hci1: command tx timeout [ 341.865050][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.872128][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.898408][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.983567][ T5830] hsr_slave_0: entered promiscuous mode [ 341.990199][ T5830] hsr_slave_1: entered promiscuous mode [ 341.996366][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.004014][ T5830] Cannot create hsr debugfs directory [ 342.109944][ T5835] hsr_slave_0: entered promiscuous mode [ 342.116702][ T5835] hsr_slave_1: entered promiscuous mode [ 342.124338][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.132048][ T5835] Cannot create hsr debugfs directory [ 342.352468][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.390631][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.435729][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.460125][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.524289][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.540526][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 342.554956][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.573895][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.649538][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.664305][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.687661][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.712629][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.776000][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.796768][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.822670][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.833106][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.932942][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.979082][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.995994][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.003521][ T5864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.062752][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.069979][ T5864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.159129][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.174387][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.220116][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.244910][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.271067][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.281798][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.311664][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.318886][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.331133][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.338382][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.349440][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.356619][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.384059][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.391424][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.404396][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.411606][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.439112][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.446276][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.582980][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.616094][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.713377][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.850551][ T5831] veth0_vlan: entered promiscuous mode [ 343.859377][ T51] Bluetooth: hci0: command tx timeout [ 343.865861][ T51] Bluetooth: hci3: command tx timeout [ 343.872142][ T5843] Bluetooth: hci2: command tx timeout [ 343.931773][ T5831] veth1_vlan: entered promiscuous mode [ 343.938584][ T51] Bluetooth: hci1: command tx timeout [ 344.056387][ T5831] veth0_macvtap: entered promiscuous mode [ 344.077537][ T5831] veth1_macvtap: entered promiscuous mode [ 344.102819][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.143451][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.154521][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.193458][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.234103][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.243610][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.252414][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.261336][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.302871][ T5834] veth0_vlan: entered promiscuous mode [ 344.315272][ T5830] veth0_vlan: entered promiscuous mode [ 344.330823][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.347070][ T5834] veth1_vlan: entered promiscuous mode [ 344.383509][ T5830] veth1_vlan: entered promiscuous mode [ 344.479106][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.487145][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.530735][ T5834] veth0_macvtap: entered promiscuous mode [ 344.567005][ T5834] veth1_macvtap: entered promiscuous mode [ 344.593056][ T5835] veth0_vlan: entered promiscuous mode [ 344.601184][ T5864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.610771][ T5864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.617696][ T5830] veth0_macvtap: entered promiscuous mode [ 344.635426][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.646137][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.664215][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.682307][ T5835] veth1_vlan: entered promiscuous mode [ 344.695995][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.707670][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.723791][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.732412][ T5830] veth1_macvtap: entered promiscuous mode [ 344.757750][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.771282][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.780769][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.791006][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.867409][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.881085][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.892077][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.902877][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.915124][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.925080][ T5835] veth0_macvtap: entered promiscuous mode [ 344.965388][ C0] hrtimer: interrupt took 66643 ns [ 344.974326][ T5835] veth1_macvtap: entered promiscuous mode [ 344.997394][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.010765][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.021497][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.032194][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.046842][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.116854][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.134760][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.147155][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.157687][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.167725][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.178348][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.190370][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.200221][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.209655][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.220497][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.229404][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.304686][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.316963][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.327440][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.345392][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.357017][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.372057][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.383675][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.406607][ T5864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.423532][ T5864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.435725][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.450185][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.478491][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.487265][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.609271][ T5864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.617155][ T5864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.709904][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.727040][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.853549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.893107][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.939843][ T51] Bluetooth: hci3: command tx timeout [ 345.945305][ T51] Bluetooth: hci2: command tx timeout [ 345.950906][ T5847] Bluetooth: hci0: command tx timeout [ 345.957413][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.988493][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.025025][ T51] Bluetooth: hci1: command tx timeout [ 346.299242][ T5931] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 346.306260][ T5931] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 346.524284][ T5933] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 346.549022][ T5933] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 346.571422][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.584620][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.969747][ T5939] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 347.012606][ T5939] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 347.093033][ T5938] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 347.499264][ T5949] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 347.512777][ T5949] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 347.546111][ T5947] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 347.554373][ T5947] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 347.572704][ T5947] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 347.580965][ T5947] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 347.677015][ T5952] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11'. [ 347.792657][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.801090][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.816300][ T5959] bridge0: entered allmulticast mode [ 347.924506][ T5952] IPv6: Can't replace route, no match found [ 347.996778][ T5959] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 348.019405][ T5843] Bluetooth: hci3: command tx timeout [ 348.021991][ T51] Bluetooth: hci0: command tx timeout [ 348.030781][ T51] Bluetooth: hci2: command tx timeout [ 348.067826][ T5961] bridge_slave_1: left allmulticast mode [ 348.139637][ T5961] bridge_slave_1: left promiscuous mode [ 348.148284][ T5843] Bluetooth: hci1: command tx timeout [ 348.202360][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.301794][ T5961] bridge_slave_0: left allmulticast mode [ 348.307900][ T5961] bridge_slave_0: left promiscuous mode [ 348.345589][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.578060][ T5958] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 348.632034][ T5958] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 348.744703][ T5962] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 348.779523][ T5962] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 348.848500][ T5965] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 349.127717][ T5968] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 349.179832][ T5968] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 349.341294][ T5972] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 349.357390][ T5972] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 349.374374][ T5975] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 349.408197][ T5975] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 349.518976][ T5978] netlink: 'syz.1.19': attribute type 19 has an invalid length. [ 349.526748][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19'. [ 349.602039][ T5976] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 349.619863][ T5976] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 349.814256][ T5983] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 349.842021][ T5983] netlink: 'syz.3.21': attribute type 2 has an invalid length. [ 349.852013][ T5983] netlink: 'syz.3.21': attribute type 2 has an invalid length. [ 349.866856][ T5983] netlink: 'syz.3.21': attribute type 3 has an invalid length. [ 349.874933][ T5983] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 349.883013][ T5983] netlink: 'syz.3.21': attribute type 5 has an invalid length. [ 349.914186][ T5983] netlink: 'syz.3.21': attribute type 6 has an invalid length. [ 349.965435][ T5987] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 349.985370][ T5983] netlink: 'syz.3.21': attribute type 7 has an invalid length. [ 349.989730][ T5987] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 350.039108][ T5983] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.21'. [ 350.103411][ T5991] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 350.120432][ T5991] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 350.487027][ T6002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25'. [ 350.534268][ T5998] team0: Port device netdevsim0 added [ 350.574571][ T5994] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 350.609952][ T5994] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 350.767220][ T5998] syz.1.25 (5998) used greatest stack depth: 19304 bytes left [ 351.192579][ T6010] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.28'. [ 351.265105][ T6008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 351.417994][ T6008] Zero length message leads to an empty skb [ 351.736981][ T6012] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.27'. [ 351.770721][ T6012] netlink: zone id is out of range [ 351.777153][ T6012] netlink: zone id is out of range [ 351.804095][ T6012] netlink: zone id is out of range [ 353.003531][ T6006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.27'. [ 353.026993][ T6010] team0: Port device wlan1 added [ 353.227512][ T6021] netlink: 14 bytes leftover after parsing attributes in process `syz.2.31'. [ 353.289585][ T6021] mac80211_hwsim hwsim5 O3ãc¤±: renamed from wlan1 (while UP) [ 353.447143][ T6023] team0: Port device netdevsim0 added [ 353.587902][ T6023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.32'. [ 353.695605][ T6034] netlink: 192 bytes leftover after parsing attributes in process `syz.2.36'. [ 354.145009][ T6044] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 354.157616][ T6044] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 354.210655][ T6048] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 354.238722][ T6048] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 355.026027][ T6074] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 356.901174][ T6126] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 356.918884][ T6126] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 356.953441][ T6129] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 356.960593][ T6129] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 357.224918][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.233318][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.263780][ T6133] bridge0: entered allmulticast mode [ 357.347767][ T6133] bridge_slave_1: left allmulticast mode [ 357.360424][ T6133] bridge_slave_1: left promiscuous mode [ 357.366383][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.378856][ T6133] bridge_slave_0: left allmulticast mode [ 357.385958][ T6133] bridge_slave_0: left promiscuous mode [ 357.393339][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.807604][ T6148] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 357.820581][ T6148] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 357.858008][ T6151] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 357.869416][ T6151] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 358.166578][ T6159] validate_nla: 10 callbacks suppressed [ 358.166618][ T6159] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 358.352704][ T6160] netlink: 'syz.2.90': attribute type 3 has an invalid length. [ 358.364908][ T6159] team0: Port device netdevsim0 added [ 358.466583][ T6155] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 358.481567][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.90'. [ 358.483068][ T6155] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 358.569895][ T6159] syz.2.90 (6159) used greatest stack depth: 18536 bytes left [ 358.588110][ T6161] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 358.606580][ T6161] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 358.855509][ T6168] netlink: 14 bytes leftover after parsing attributes in process `syz.0.96'. [ 358.965410][ T6168] mac80211_hwsim hwsim9 O3ãc¤±: renamed from wlan1 (while UP) [ 359.299848][ T6183] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 359.319791][ T6183] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 360.136120][ T6200] netlink: 'syz.0.104': attribute type 10 has an invalid length. [ 360.339792][ T6200] team0: Port device netdevsim0 added [ 360.372037][ T6196] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 360.386152][ T6196] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 360.437852][ T6201] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 360.460546][ T6201] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 360.469199][ T6200] netlink: 'syz.0.104': attribute type 3 has an invalid length. [ 360.483640][ T6200] netlink: 132 bytes leftover after parsing attributes in process `syz.0.104'. [ 360.675434][ T6210] netlink: 14 bytes leftover after parsing attributes in process `syz.3.109'. [ 360.729816][ T6210] mac80211_hwsim hwsim7 O3ãc¤±: renamed from wlan1 (while UP) [ 360.885555][ T6213] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 360.898839][ T6213] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 360.966856][ T6215] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 360.975285][ T6215] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 369.309052][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.323664][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.331504][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.340094][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.348063][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.355855][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.526450][ T6217] chnl_net:caif_netlink_parms(): no params data found [ 369.597551][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.604860][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.612600][ T6217] bridge_slave_0: entered allmulticast mode [ 369.620911][ T6217] bridge_slave_0: entered promiscuous mode [ 369.630138][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.637471][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.645247][ T6217] bridge_slave_1: entered allmulticast mode [ 369.652316][ T6217] bridge_slave_1: entered promiscuous mode [ 369.685029][ T6217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.697356][ T6217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.736643][ T6217] team0: Port device team_slave_0 added [ 369.744806][ T6217] team0: Port device team_slave_1 added [ 369.773621][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.782007][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.808620][ T6217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.821695][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.829070][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.855387][ T6217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.900414][ T6217] hsr_slave_0: entered promiscuous mode [ 369.906836][ T6217] hsr_slave_1: entered promiscuous mode [ 369.914025][ T6217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.921679][ T6217] Cannot create hsr debugfs directory [ 370.070409][ T6217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.081458][ T6217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.091654][ T6217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.104351][ T6217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.134497][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.141873][ T6217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.150061][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.157200][ T6217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.220109][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.237698][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.247374][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.267135][ T6217] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.293455][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.300828][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.310166][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.317294][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.538862][ T6217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.790159][ T6217] veth0_vlan: entered promiscuous mode [ 370.803256][ T6217] veth1_vlan: entered promiscuous mode [ 370.836623][ T6217] veth0_macvtap: entered promiscuous mode [ 370.847666][ T6217] veth1_macvtap: entered promiscuous mode [ 370.866370][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.877528][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.887494][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.898748][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.909153][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.919671][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.929669][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.940437][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.953374][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.964534][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.975155][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.988261][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.002036][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.012037][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.022627][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.033615][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.044959][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.056690][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.090558][ T6217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.099562][ T6217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.109172][ T6217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.118099][ T6217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.204110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.218999][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.248650][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.256533][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.382427][ T51] Bluetooth: hci4: command tx timeout [ 371.430022][ T6251] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.123'. [ 371.458001][ T6251] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 371.684102][ T6251] team0: Port device O3ãc¤± added [ 371.771793][ T6246] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 371.798773][ T6246] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 371.824657][ T6251] syz.3.123 (6251) used greatest stack depth: 17192 bytes left [ 371.886928][ T6254] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 371.894321][ T6254] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 373.189250][ T6266] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 373.198748][ T6266] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 373.209802][ T6262] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 373.216732][ T6262] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 373.253037][ T6268] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 373.268475][ T6268] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 373.437044][ T6281] netlink: 'syz.4.124': attribute type 21 has an invalid length. [ 373.458764][ T51] Bluetooth: hci4: command tx timeout [ 373.464533][ T6281] netlink: 132 bytes leftover after parsing attributes in process `syz.4.124'. [ 373.714658][ T6291] netlink: 'syz.3.128': attribute type 10 has an invalid length. [ 373.728865][ T6281] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.124'. [ 373.738806][ T6289] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.127'. [ 373.766603][ T6281] netlink: zone id is out of range [ 373.772602][ T6281] netlink: zone id is out of range [ 373.778486][ T6281] netlink: zone id is out of range [ 373.836045][ T6289] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 373.940886][ T6291] netlink: 'syz.3.128': attribute type 3 has an invalid length. [ 373.970311][ T6291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.128'. [ 374.045402][ T6289] team0: Port device O3ãc¤± added [ 374.375006][ T6299] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 374.396689][ T6299] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 374.574281][ T6306] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 374.597916][ T6306] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 374.686061][ T6310] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 374.695816][ T6310] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 374.766750][ T6311] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 374.798458][ T6311] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 374.935303][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.943002][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.022069][ T6318] bridge0: entered allmulticast mode [ 375.064258][ T6317] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 375.093239][ T6317] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 375.123473][ T6318] bridge_slave_1: left allmulticast mode [ 375.148726][ T6318] bridge_slave_1: left promiscuous mode [ 375.154654][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.186149][ T6318] bridge_slave_0: left allmulticast mode [ 375.194060][ T6318] bridge_slave_0: left promiscuous mode [ 375.205657][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.285809][ T6331] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.142'. [ 375.316700][ T6326] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 375.330381][ T6326] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 375.341250][ T6328] netlink: 'syz.3.140': attribute type 21 has an invalid length. [ 375.353122][ T6328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.140'. [ 375.365720][ T6331] netlink: 'syz.4.142': attribute type 10 has an invalid length. [ 375.541739][ T51] Bluetooth: hci4: command tx timeout [ 375.602184][ T6331] team0: Port device wlan1 added [ 375.695107][ T6328] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.140'. [ 375.713518][ T6328] netlink: zone id is out of range [ 375.719241][ T6328] netlink: zone id is out of range [ 375.724479][ T6328] netlink: zone id is out of range [ 375.745222][ T6335] netlink: 'syz.0.144': attribute type 10 has an invalid length. [ 375.780637][ T6331] syz.4.142 (6331) used greatest stack depth: 17000 bytes left [ 375.943345][ T6335] netlink: 'syz.0.144': attribute type 3 has an invalid length. [ 375.971902][ T6335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.144'. [ 375.984422][ T6341] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 375.992164][ T6341] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 376.030326][ T6344] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 376.046317][ T6344] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 376.381012][ T6351] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 376.400162][ T6351] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 376.473702][ T6356] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 376.503184][ T6356] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 376.535381][ T6355] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 376.545946][ T6355] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 376.587147][ T6355] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 376.597902][ T6355] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 376.715506][ T6363] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 376.748509][ T6363] netlink: 'syz.2.153': attribute type 2 has an invalid length. [ 376.756264][ T6363] netlink: 'syz.2.153': attribute type 2 has an invalid length. [ 376.804793][ T6363] netlink: 'syz.2.153': attribute type 3 has an invalid length. [ 376.859673][ T6369] netlink: 'syz.0.155': attribute type 21 has an invalid length. [ 376.878529][ T6363] netlink: 'syz.2.153': attribute type 4 has an invalid length. [ 376.886287][ T6363] netlink: 'syz.2.153': attribute type 5 has an invalid length. [ 376.892286][ T6369] netlink: 132 bytes leftover after parsing attributes in process `syz.0.155'. [ 376.959149][ T6363] netlink: 'syz.2.153': attribute type 6 has an invalid length. [ 376.966878][ T6363] netlink: 'syz.2.153': attribute type 7 has an invalid length. [ 377.151762][ T6363] netlink: 'syz.2.153': attribute type 9 has an invalid length. [ 377.192822][ T6363] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.153'. [ 377.266835][ T6369] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.155'. [ 377.284263][ T6369] netlink: zone id is out of range [ 377.290574][ T6369] netlink: zone id is out of range [ 377.295988][ T6369] netlink: zone id is out of range [ 377.635904][ T51] Bluetooth: hci4: command tx timeout [ 377.667501][ T6384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.159'. [ 378.347628][ T6380] team0: Port device netdevsim0 added [ 378.753439][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.762838][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.742244][ T6386] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 379.749236][ T6386] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 379.760631][ T6387] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 379.770135][ T6387] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 379.783313][ T6390] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 379.794348][ T6390] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 379.815001][ T6391] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 379.824054][ T6391] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 379.839578][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.847248][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.864071][ T6393] bridge0: entered allmulticast mode [ 379.909095][ T6395] bridge_slave_1: left allmulticast mode [ 379.914813][ T6395] bridge_slave_1: left promiscuous mode [ 379.925948][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.959615][ T6395] bridge_slave_0: left allmulticast mode [ 379.979641][ T6395] bridge_slave_0: left promiscuous mode [ 379.985500][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.243089][ T6398] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 380.253847][ T6398] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 380.299414][ T6402] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 380.311203][ T6402] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 380.386020][ T6399] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 380.413305][ T6399] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 380.474745][ T6405] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 380.507216][ T6405] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 380.675720][ T6415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.172'. [ 380.915309][ T6419] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 380.926254][ T6419] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 380.978084][ T6425] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 381.002596][ T6425] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 381.423648][ T6438] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.179'. [ 381.555538][ T6439] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 381.572664][ T6439] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 381.633913][ T6444] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 381.641958][ T6444] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 382.324323][ T6450] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 382.332007][ T6450] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 382.352880][ T6453] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 382.366763][ T6453] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 382.411305][ T6456] validate_nla: 18 callbacks suppressed [ 382.411320][ T6456] netlink: 'syz.3.187': attribute type 19 has an invalid length. [ 382.425379][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.187'. [ 382.434675][ T6458] netlink: 'syz.2.185': attribute type 4 has an invalid length. [ 382.770421][ T6464] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 382.783203][ T6464] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 382.831368][ T6470] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 382.838699][ T6470] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 383.403789][ T6486] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 383.412705][ T6486] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 383.514882][ T6489] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 383.522251][ T6489] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 383.562243][ T6484] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 383.596036][ T6484] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 383.671216][ T6488] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 383.689355][ T6488] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 383.752241][ T6490] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 383.777046][ T6490] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 383.786122][ T6493] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 383.801749][ T6493] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 383.837415][ T6497] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 383.846460][ T6497] netlink: 'syz.4.198': attribute type 2 has an invalid length. [ 383.854777][ T6497] netlink: 'syz.4.198': attribute type 2 has an invalid length. [ 383.867844][ T6497] netlink: 'syz.4.198': attribute type 3 has an invalid length. [ 383.886085][ T6497] netlink: 'syz.4.198': attribute type 4 has an invalid length. [ 383.898016][ T6497] netlink: 'syz.4.198': attribute type 5 has an invalid length. [ 383.907157][ T6497] netlink: 'syz.4.198': attribute type 6 has an invalid length. [ 383.915788][ T6497] netlink: 'syz.4.198': attribute type 7 has an invalid length. [ 383.929318][ T6497] netlink: 126304 bytes leftover after parsing attributes in process `syz.4.198'. [ 384.201835][ T6502] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 384.240249][ T6502] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 384.795071][ T6507] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 384.806572][ T6507] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 386.992534][ T6534] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 386.999836][ T6534] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 387.014557][ T6537] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 387.021951][ T6537] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 387.031279][ T6545] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 387.038118][ T6545] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 387.054144][ T6546] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 387.062025][ T6546] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 387.080262][ T6541] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 387.086994][ T6541] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 387.132930][ T6544] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 387.147479][ T6544] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 387.432906][ T6557] validate_nla: 5 callbacks suppressed [ 387.432941][ T6557] netlink: 'syz.3.218': attribute type 4 has an invalid length. [ 388.149939][ T6573] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 388.179330][ T6573] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 388.370069][ T6578] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 388.400076][ T6578] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 388.409855][ T6583] netlink: 144 bytes leftover after parsing attributes in process `syz.0.229'. [ 388.446621][ T6583] IPv6: Can't replace route, no match found [ 389.719875][ T6611] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 389.727032][ T6611] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 389.792873][ T6612] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 389.821352][ T6612] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 390.383547][ T6629] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 390.411124][ T6629] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 390.591681][ T6636] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 390.612095][ T6636] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 390.672659][ T6633] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 390.714906][ T6633] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 390.840424][ T6635] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 390.864675][ T6635] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 391.287297][ T6653] netlink: 144 bytes leftover after parsing attributes in process `syz.2.252'. [ 391.379145][ T6659] IPv6: Can't replace route, no match found [ 391.773848][ T6664] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 391.805976][ T6664] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 392.017096][ T6666] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 392.024567][ T6666] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 392.417064][ T6679] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 392.479950][ T6679] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 392.565633][ T6685] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 392.598603][ T6685] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 393.017876][ T6702] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 393.040433][ T6702] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 393.170426][ T6707] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 393.180744][ T6707] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 393.194307][ T6706] netlink: 144 bytes leftover after parsing attributes in process `syz.4.273'. [ 393.280911][ T6706] IPv6: Can't replace route, no match found [ 394.128944][ T6733] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 394.136424][ T6733] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 394.222921][ T6740] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 394.248879][ T6740] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 394.965942][ T6754] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 394.997830][ T6754] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 395.119412][ T6756] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 395.134238][ T6756] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 395.957599][ T6778] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 395.969605][ T6778] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 396.132571][ T6784] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 396.140364][ T6784] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 396.542962][ T6790] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 396.584762][ T6790] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 396.728747][ T6799] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 396.735978][ T6799] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 397.691799][ T6824] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 397.959424][ T6825] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 398.031256][ T6825] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 398.407343][ T6826] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 398.478848][ T6826] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 398.866747][ T6837] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 398.893953][ T6837] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 399.015161][ T6840] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 399.045387][ T6840] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 399.087325][ T6843] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 399.115055][ T6843] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 399.260433][ T6848] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 399.272520][ T6848] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 399.287763][ T6846] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 399.309674][ T6846] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 399.834995][ T6864] netlink: 'syz.0.334': attribute type 4 has an invalid length. [ 400.026379][ T6868] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 400.073801][ T6868] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 400.206355][ T6875] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 400.238885][ T6875] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 400.807998][ T6886] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 400.836536][ T6886] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 400.896696][ T6892] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 400.914768][ T6892] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 400.950665][ T6887] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 400.965609][ T6887] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 401.060195][ T6893] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 401.077057][ T6893] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 401.504629][ T6897] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 401.564507][ T6897] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 401.656917][ T6898] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 401.683479][ T6898] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 401.697435][ T6905] netlink: 'syz.4.349': attribute type 4 has an invalid length. [ 402.353492][ T6923] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 402.363869][ T6923] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 402.402115][ T6927] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 402.409855][ T6927] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 402.774462][ T6937] netlink: 'syz.4.362': attribute type 4 has an invalid length. [ 402.877355][ T6939] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 402.898886][ T6939] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 402.958529][ T6944] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 402.997750][ T6944] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 403.232087][ T6952] netlink: 'syz.3.368': attribute type 2 has an invalid length. [ 403.359688][ T6948] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 403.367609][ T6948] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 403.570772][ T6953] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 403.583872][ T6953] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 403.815439][ T6955] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 403.982176][ T6955] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 404.054815][ T6958] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 404.070940][ T6958] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 404.227182][ T6968] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 404.669487][ T6987] FAULT_INJECTION: forcing a failure. [ 404.669487][ T6987] name failslab, interval 1, probability 0, space 0, times 1 [ 404.696778][ T6987] CPU: 0 PID: 6987 Comm: syz.0.381 Not tainted syzkaller #0 [ 404.704148][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 404.714251][ T6987] Call Trace: [ 404.717562][ T6987] [ 404.720532][ T6987] dump_stack_lvl+0x16c/0x230 [ 404.725265][ T6987] ? show_regs_print_info+0x20/0x20 [ 404.730504][ T6987] ? load_image+0x3b0/0x3b0 [ 404.735060][ T6987] should_fail_ex+0x39d/0x4d0 [ 404.739776][ T6987] should_failslab+0x9/0x20 [ 404.744335][ T6987] slab_pre_alloc_hook+0x59/0x310 [ 404.749398][ T6987] kmem_cache_alloc+0x5a/0x2e0 [ 404.754204][ T6987] ? __nf_conntrack_alloc+0x99/0x380 [ 404.759544][ T6987] __nf_conntrack_alloc+0x99/0x380 [ 404.764715][ T6987] init_conntrack+0x156/0xee0 [ 404.769435][ T6987] ? early_drop+0x7b0/0x7b0 [ 404.773978][ T6987] ? nf_conntrack_find_get+0x600/0x600 [ 404.779482][ T6987] ? __local_bh_enable_ip+0x12e/0x1c0 [ 404.784986][ T6987] ? __siphash_unaligned+0x232/0x3b0 [ 404.790318][ T6987] nf_conntrack_in+0xbf1/0x15c0 [ 404.795235][ T6987] ? nf_ct_pernet+0x270/0x270 [ 404.800043][ T6987] ? ipt_do_table+0x2b2/0x15f0 [ 404.804913][ T6987] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 404.810417][ T6987] ? ipv4_conntrack_local+0x123/0x200 [ 404.815847][ T6987] ? ipv4_conntrack_in+0x20/0x20 [ 404.820837][ T6987] nf_hook_slow+0xbd/0x200 [ 404.825289][ T6987] nf_hook+0x215/0x370 [ 404.829398][ T6987] ? nf_hook+0x9e/0x370 [ 404.833604][ T6987] ? __ip_local_out+0x5f0/0x5f0 [ 404.838514][ T6987] ? nf_hook+0x370/0x370 [ 404.842803][ T6987] ? lockdep_hardirqs_on+0x98/0x150 [ 404.848035][ T6987] ? ip_fast_csum+0x1ee/0x2b0 [ 404.852763][ T6987] __ip_local_out+0x4db/0x5f0 [ 404.857477][ T6987] ? nf_hook+0x370/0x370 [ 404.861775][ T6987] ip_send_skb+0x4c/0x1d0 [ 404.866153][ T6987] raw_sendmsg+0x1488/0x1950 [ 404.870826][ T6987] ? compat_raw_ioctl+0x70/0x70 [ 404.875740][ T6987] ? aa_sk_perm+0x7fc/0x930 [ 404.880301][ T6987] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 404.886764][ T6987] ? sock_rps_record_flow+0x19/0x400 [ 404.892085][ T6987] ? inet_send_prepare+0x260/0x260 [ 404.897234][ T6987] ? inet_sendmsg+0x7c/0x2f0 [ 404.901856][ T6987] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 404.907174][ T6987] ? security_socket_sendmsg+0x80/0xa0 [ 404.912669][ T6987] ? inet_send_prepare+0x260/0x260 [ 404.917914][ T6987] ____sys_sendmsg+0x5bf/0x950 [ 404.922720][ T6987] ? __asan_memset+0x22/0x40 [ 404.927344][ T6987] ? __sys_sendmsg_sock+0x30/0x30 [ 404.932401][ T6987] ? __import_iovec+0x3fa/0x860 [ 404.937320][ T6987] ? import_iovec+0x73/0xa0 [ 404.941951][ T6987] ___sys_sendmsg+0x220/0x290 [ 404.946667][ T6987] ? __sys_sendmsg+0x270/0x270 [ 404.951498][ T6987] ? __lock_acquire+0x7c80/0x7c80 [ 404.956588][ T6987] __se_sys_sendmsg+0x1a5/0x270 [ 404.961472][ T6987] ? __x64_sys_sendmsg+0x80/0x80 [ 404.966457][ T6987] ? lockdep_hardirqs_on+0x98/0x150 [ 404.971734][ T6987] do_syscall_64+0x55/0xb0 [ 404.976224][ T6987] ? clear_bhb_loop+0x40/0x90 [ 404.980930][ T6987] ? clear_bhb_loop+0x40/0x90 [ 404.985642][ T6987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.991566][ T6987] RIP: 0033:0x7f448778f6c9 [ 404.996045][ T6987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.015682][ T6987] RSP: 002b:00007f44885a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.024147][ T6987] RAX: ffffffffffffffda RBX: 00007f44879e5fa0 RCX: 00007f448778f6c9 [ 405.032145][ T6987] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 405.040144][ T6987] RBP: 00007f44885a9090 R08: 0000000000000000 R09: 0000000000000000 [ 405.048140][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.056136][ T6987] R13: 00007f44879e6038 R14: 00007f44879e5fa0 R15: 00007ffd9bcc83e8 [ 405.064148][ T6987] [ 405.312858][ T6994] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 405.321029][ T6994] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 405.388716][ T6999] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 405.426673][ T6999] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 405.513673][ T7003] netlink: 188 bytes leftover after parsing attributes in process `syz.3.383'. [ 405.677579][ T6997] netlink: 'syz.3.383': attribute type 39 has an invalid length. [ 405.885505][ T7011] netlink: 'syz.0.388': attribute type 4 has an invalid length. [ 407.192995][ T7043] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 407.247668][ T7043] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 407.926241][ T7063] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 408.014099][ T7066] FAULT_INJECTION: forcing a failure. [ 408.014099][ T7066] name failslab, interval 1, probability 0, space 0, times 0 [ 408.038402][ T7066] CPU: 0 PID: 7066 Comm: syz.2.407 Not tainted syzkaller #0 [ 408.045767][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.055857][ T7066] Call Trace: [ 408.059173][ T7066] [ 408.062131][ T7066] dump_stack_lvl+0x16c/0x230 [ 408.066939][ T7066] ? show_regs_print_info+0x20/0x20 [ 408.072180][ T7066] ? load_image+0x3b0/0x3b0 [ 408.076728][ T7066] ? __might_sleep+0xe0/0xe0 [ 408.081362][ T7066] ? __lock_acquire+0x7c80/0x7c80 [ 408.086517][ T7066] should_fail_ex+0x39d/0x4d0 [ 408.091243][ T7066] should_failslab+0x9/0x20 [ 408.095789][ T7066] slab_pre_alloc_hook+0x59/0x310 [ 408.100860][ T7066] kmem_cache_alloc_node+0x60/0x330 [ 408.106095][ T7066] ? lockdep_hardirqs_on+0x98/0x150 [ 408.111330][ T7066] ? __alloc_skb+0x108/0x2c0 [ 408.115971][ T7066] __alloc_skb+0x108/0x2c0 [ 408.120443][ T7066] tcp_stream_alloc_skb+0x3d/0x330 [ 408.125609][ T7066] tcp_sendmsg_locked+0xed2/0x4af0 [ 408.130802][ T7066] ? tcp_set_state+0x650/0x650 [ 408.135614][ T7066] tcp_sendmsg+0x2f/0x50 [ 408.139899][ T7066] ? inet_send_prepare+0x260/0x260 [ 408.145059][ T7066] ____sys_sendmsg+0x5bf/0x950 [ 408.149875][ T7066] ? __sys_sendmsg_sock+0x30/0x30 [ 408.154944][ T7066] ? __import_iovec+0x5f2/0x860 [ 408.159845][ T7066] ? import_iovec+0x73/0xa0 [ 408.164398][ T7066] ___sys_sendmsg+0x220/0x290 [ 408.169125][ T7066] ? __sys_sendmsg+0x270/0x270 [ 408.173953][ T7066] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 408.180348][ T7066] __se_sys_sendmsg+0x1a5/0x270 [ 408.185248][ T7066] ? perf_trace_preemptirq_template+0x281/0x340 [ 408.191554][ T7066] ? __x64_sys_sendmsg+0x80/0x80 [ 408.196582][ T7066] ? lockdep_hardirqs_on+0x98/0x150 [ 408.201820][ T7066] do_syscall_64+0x55/0xb0 [ 408.206277][ T7066] ? clear_bhb_loop+0x40/0x90 [ 408.210993][ T7066] ? clear_bhb_loop+0x40/0x90 [ 408.215719][ T7066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.221648][ T7066] RIP: 0033:0x7f52d4f8f6c9 [ 408.226110][ T7066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.245842][ T7066] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.254296][ T7066] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 408.262304][ T7066] RDX: 0000000004000081 RSI: 00002000000005c0 RDI: 0000000000000003 [ 408.270309][ T7066] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 408.278313][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.286311][ T7066] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 408.294331][ T7066] [ 408.823534][ T7080] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 408.833409][ T7080] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 408.887628][ T7089] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 408.898587][ T7089] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 409.082567][ T7095] netlink: 'syz.4.417': attribute type 4 has an invalid length. [ 409.820647][ T7125] FAULT_INJECTION: forcing a failure. [ 409.820647][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 409.849718][ T7125] CPU: 0 PID: 7125 Comm: syz.4.428 Not tainted syzkaller #0 [ 409.857071][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.867165][ T7125] Call Trace: [ 409.870532][ T7125] [ 409.873491][ T7125] dump_stack_lvl+0x16c/0x230 [ 409.878215][ T7125] ? show_regs_print_info+0x20/0x20 [ 409.883544][ T7125] ? load_image+0x3b0/0x3b0 [ 409.888092][ T7125] ? __might_sleep+0xe0/0xe0 [ 409.892725][ T7125] ? __lock_acquire+0x7c80/0x7c80 [ 409.897793][ T7125] should_fail_ex+0x39d/0x4d0 [ 409.902543][ T7125] should_failslab+0x9/0x20 [ 409.907091][ T7125] slab_pre_alloc_hook+0x59/0x310 [ 409.912180][ T7125] ? __lock_acquire+0x7c80/0x7c80 [ 409.917244][ T7125] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 409.923252][ T7125] ? dev_ethtool+0x11b/0x1720 [ 409.927961][ T7125] __kmem_cache_alloc_node+0x53/0x260 [ 409.933370][ T7125] ? __might_fault+0xaa/0x120 [ 409.938076][ T7125] ? dev_ethtool+0x11b/0x1720 [ 409.942793][ T7125] kmalloc_trace+0x2a/0xe0 [ 409.947254][ T7125] dev_ethtool+0x11b/0x1720 [ 409.951835][ T7125] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 409.958202][ T7125] ? __lock_acquire+0x7c80/0x7c80 [ 409.963277][ T7125] ? __might_fault+0xaa/0x120 [ 409.967982][ T7125] ? full_name_hash+0x92/0xe0 [ 409.973048][ T7125] ? dev_load+0x21/0x1f0 [ 409.977324][ T7125] dev_ioctl+0x4ca/0x1170 [ 409.981693][ T7125] sock_do_ioctl+0x226/0x2f0 [ 409.986315][ T7125] ? sock_show_fdinfo+0xb0/0xb0 [ 409.991219][ T7125] sock_ioctl+0x623/0x7a0 [ 409.995615][ T7125] ? sock_poll+0x3d0/0x3d0 [ 410.000077][ T7125] ? bpf_lsm_file_ioctl+0x9/0x10 [ 410.005043][ T7125] ? security_file_ioctl+0x80/0xa0 [ 410.010201][ T7125] ? sock_poll+0x3d0/0x3d0 [ 410.014748][ T7125] __se_sys_ioctl+0xfd/0x170 [ 410.019386][ T7125] do_syscall_64+0x55/0xb0 [ 410.023842][ T7125] ? clear_bhb_loop+0x40/0x90 [ 410.028555][ T7125] ? clear_bhb_loop+0x40/0x90 [ 410.033267][ T7125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.039193][ T7125] RIP: 0033:0x7f965478f6c9 [ 410.043645][ T7125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.063294][ T7125] RSP: 002b:00007f965571c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.071797][ T7125] RAX: ffffffffffffffda RBX: 00007f96549e5fa0 RCX: 00007f965478f6c9 [ 410.079806][ T7125] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000013 [ 410.087796][ T7125] RBP: 00007f965571c090 R08: 0000000000000000 R09: 0000000000000000 [ 410.095871][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.103958][ T7125] R13: 00007f96549e6038 R14: 00007f96549e5fa0 R15: 00007ffe8907cee8 [ 410.111971][ T7125] [ 410.128518][ T7123] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 410.137478][ T7123] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 410.166657][ T7129] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 410.174315][ T7129] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 410.183326][ T7128] netlink: 'syz.3.429': attribute type 4 has an invalid length. [ 410.880824][ T7159] netlink: 192 bytes leftover after parsing attributes in process `syz.4.440'. [ 411.059868][ T7162] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 411.067391][ T7162] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 411.164232][ T7168] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 411.175262][ T7168] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 411.294014][ T7170] netlink: 'syz.3.444': attribute type 4 has an invalid length. [ 411.553988][ T7182] netlink: 'syz.3.449': attribute type 21 has an invalid length. [ 411.570412][ T7182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.449'. [ 411.593797][ T7182] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 411.616984][ T7182] netlink: 'syz.3.449': attribute type 21 has an invalid length. [ 411.791532][ T7187] FAULT_INJECTION: forcing a failure. [ 411.791532][ T7187] name failslab, interval 1, probability 0, space 0, times 0 [ 411.831345][ T7187] CPU: 0 PID: 7187 Comm: syz.2.450 Not tainted syzkaller #0 [ 411.838710][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.848986][ T7187] Call Trace: [ 411.852307][ T7187] [ 411.855281][ T7187] dump_stack_lvl+0x16c/0x230 [ 411.860034][ T7187] ? show_regs_print_info+0x20/0x20 [ 411.865279][ T7187] ? load_image+0x3b0/0x3b0 [ 411.869829][ T7187] ? __might_sleep+0xe0/0xe0 [ 411.874477][ T7187] ? __lock_acquire+0x7c80/0x7c80 [ 411.879573][ T7187] should_fail_ex+0x39d/0x4d0 [ 411.884305][ T7187] should_failslab+0x9/0x20 [ 411.888852][ T7187] slab_pre_alloc_hook+0x59/0x310 [ 411.893921][ T7187] ? __lock_acquire+0x7c80/0x7c80 [ 411.898992][ T7187] ? dev_ethtool+0x11b/0x1720 [ 411.903710][ T7187] __kmem_cache_alloc_node+0x53/0x260 [ 411.909121][ T7187] ? __might_fault+0xaa/0x120 [ 411.913843][ T7187] ? dev_ethtool+0x11b/0x1720 [ 411.918556][ T7187] kmalloc_trace+0x2a/0xe0 [ 411.923034][ T7187] dev_ethtool+0x11b/0x1720 [ 411.927582][ T7187] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 411.933865][ T7187] ? __lock_acquire+0x7c80/0x7c80 [ 411.938939][ T7187] ? __might_fault+0xaa/0x120 [ 411.943651][ T7187] ? full_name_hash+0x92/0xe0 [ 411.948374][ T7187] ? dev_load+0x21/0x1f0 [ 411.952654][ T7187] dev_ioctl+0x4ca/0x1170 [ 411.957034][ T7187] sock_do_ioctl+0x226/0x2f0 [ 411.961658][ T7187] ? sock_show_fdinfo+0xb0/0xb0 [ 411.966562][ T7187] sock_ioctl+0x623/0x7a0 [ 411.970933][ T7187] ? sock_poll+0x3d0/0x3d0 [ 411.975410][ T7187] ? bpf_lsm_file_ioctl+0x9/0x10 [ 411.980413][ T7187] ? security_file_ioctl+0x80/0xa0 [ 411.985576][ T7187] ? sock_poll+0x3d0/0x3d0 [ 411.990035][ T7187] __se_sys_ioctl+0xfd/0x170 [ 411.994675][ T7187] do_syscall_64+0x55/0xb0 [ 411.999146][ T7187] ? clear_bhb_loop+0x40/0x90 [ 412.003868][ T7187] ? clear_bhb_loop+0x40/0x90 [ 412.008589][ T7187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.014519][ T7187] RIP: 0033:0x7f52d4f8f6c9 [ 412.018977][ T7187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.038626][ T7187] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.047085][ T7187] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 412.055102][ T7187] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000001f [ 412.063127][ T7187] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 412.071146][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.079169][ T7187] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 412.087207][ T7187] [ 412.500238][ T7198] FAULT_INJECTION: forcing a failure. [ 412.500238][ T7198] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 412.560199][ T7198] CPU: 1 PID: 7198 Comm: syz.2.453 Not tainted syzkaller #0 [ 412.567567][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.577653][ T7198] Call Trace: [ 412.580962][ T7198] [ 412.583926][ T7198] dump_stack_lvl+0x16c/0x230 [ 412.588657][ T7198] ? show_regs_print_info+0x20/0x20 [ 412.593913][ T7198] ? load_image+0x3b0/0x3b0 [ 412.598485][ T7198] ? __lock_acquire+0x7c80/0x7c80 [ 412.603569][ T7198] ? snprintf+0xdb/0x120 [ 412.607874][ T7198] should_fail_ex+0x39d/0x4d0 [ 412.612598][ T7198] _copy_to_user+0x2f/0xa0 [ 412.617075][ T7198] simple_read_from_buffer+0xe7/0x150 [ 412.622519][ T7198] proc_fail_nth_read+0x1e3/0x250 [ 412.627589][ T7198] ? proc_fault_inject_write+0x340/0x340 [ 412.633262][ T7198] ? fsnotify_perm+0x1db/0x5e0 [ 412.638071][ T7198] ? fsnotify_perm+0x271/0x5e0 [ 412.642882][ T7198] ? proc_fault_inject_write+0x340/0x340 [ 412.648561][ T7198] vfs_read+0x27e/0x920 [ 412.652781][ T7198] ? kernel_read+0x1e0/0x1e0 [ 412.657408][ T7198] ? __fget_files+0x28/0x4d0 [ 412.662044][ T7198] ? __fget_files+0x44a/0x4d0 [ 412.666768][ T7198] ? __fdget_pos+0x2a3/0x330 [ 412.671486][ T7198] ? ksys_read+0x75/0x250 [ 412.675858][ T7198] ksys_read+0x147/0x250 [ 412.680156][ T7198] ? vfs_write+0x940/0x940 [ 412.684612][ T7198] ? syscall_enter_from_user_mode+0x2e/0x80 [ 412.690561][ T7198] do_syscall_64+0x55/0xb0 [ 412.695010][ T7198] ? clear_bhb_loop+0x40/0x90 [ 412.699743][ T7198] ? clear_bhb_loop+0x40/0x90 [ 412.704467][ T7198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.710396][ T7198] RIP: 0033:0x7f52d4f8e0dc [ 412.714863][ T7198] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 412.734513][ T7198] RSP: 002b:00007f52d5ec9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.742967][ T7198] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8e0dc [ 412.751063][ T7198] RDX: 000000000000000f RSI: 00007f52d5ec90a0 RDI: 0000000000000006 [ 412.759082][ T7198] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 412.767093][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.775100][ T7198] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 412.783126][ T7198] [ 412.996661][ T7202] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 413.027162][ T7202] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 413.139732][ T7206] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 413.148908][ T7206] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 413.169031][ T7212] netlink: 'syz.0.459': attribute type 4 has an invalid length. [ 415.099304][ T7239] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 415.215863][ T7243] netlink: 'syz.4.471': attribute type 4 has an invalid length. [ 415.380715][ T7242] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 415.394068][ T7242] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 415.482544][ T7244] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 415.496636][ T7244] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 416.123269][ T7262] netlink: 44 bytes leftover after parsing attributes in process `syz.0.473'. [ 416.158365][ T7262] netlink: 44 bytes leftover after parsing attributes in process `syz.0.473'. [ 416.189203][ T7252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.473'. [ 416.613050][ T7276] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 416.648536][ T7276] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 416.711977][ T7281] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 416.756505][ T7281] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 416.944699][ T7290] netlink: 'syz.2.487': attribute type 4 has an invalid length. [ 417.452557][ T7304] FAULT_INJECTION: forcing a failure. [ 417.452557][ T7304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.500450][ T7304] CPU: 0 PID: 7304 Comm: syz.2.492 Not tainted syzkaller #0 [ 417.507811][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.517994][ T7304] Call Trace: [ 417.521303][ T7304] [ 417.524266][ T7304] dump_stack_lvl+0x16c/0x230 [ 417.529086][ T7304] ? show_regs_print_info+0x20/0x20 [ 417.534334][ T7304] ? load_image+0x3b0/0x3b0 [ 417.538883][ T7304] ? __lock_acquire+0x7c80/0x7c80 [ 417.543958][ T7304] ? snprintf+0xdb/0x120 [ 417.548245][ T7304] should_fail_ex+0x39d/0x4d0 [ 417.552979][ T7304] _copy_to_user+0x2f/0xa0 [ 417.557521][ T7304] simple_read_from_buffer+0xe7/0x150 [ 417.562945][ T7304] proc_fail_nth_read+0x1e3/0x250 [ 417.568014][ T7304] ? proc_fault_inject_write+0x340/0x340 [ 417.573835][ T7304] ? fsnotify_perm+0x271/0x5e0 [ 417.578649][ T7304] ? proc_fault_inject_write+0x340/0x340 [ 417.584324][ T7304] vfs_read+0x27e/0x920 [ 417.588527][ T7304] ? kernel_read+0x1e0/0x1e0 [ 417.593168][ T7304] ? __fget_files+0x28/0x4d0 [ 417.597801][ T7304] ? __fget_files+0x44a/0x4d0 [ 417.602527][ T7304] ? __fdget_pos+0x2a3/0x330 [ 417.607179][ T7304] ? ksys_read+0x75/0x250 [ 417.611534][ T7304] ksys_read+0x147/0x250 [ 417.615805][ T7304] ? vfs_write+0x940/0x940 [ 417.620418][ T7304] ? lockdep_hardirqs_on+0x98/0x150 [ 417.625718][ T7304] do_syscall_64+0x55/0xb0 [ 417.630146][ T7304] ? clear_bhb_loop+0x40/0x90 [ 417.634831][ T7304] ? clear_bhb_loop+0x40/0x90 [ 417.639529][ T7304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.645447][ T7304] RIP: 0033:0x7f52d4f8e0dc [ 417.649877][ T7304] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 417.669506][ T7304] RSP: 002b:00007f52d5ec9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.677941][ T7304] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8e0dc [ 417.685933][ T7304] RDX: 000000000000000f RSI: 00007f52d5ec90a0 RDI: 0000000000000006 [ 417.693941][ T7304] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 417.701941][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.709927][ T7304] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 417.717930][ T7304] [ 418.114609][ T7321] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 418.138802][ T7321] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 418.264822][ T7324] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 418.272204][ T7324] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 418.282419][ T7327] netlink: 'syz.0.500': attribute type 4 has an invalid length. [ 418.950790][ T7353] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.507'. [ 419.282707][ T7358] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 419.308966][ T7358] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 419.422141][ T7363] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 419.432717][ T7363] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 419.442158][ T7362] netlink: 'syz.3.513': attribute type 4 has an invalid length. [ 420.376001][ T7391] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 420.397592][ T7391] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 420.460203][ T7397] netlink: 'syz.2.525': attribute type 4 has an invalid length. [ 420.484075][ T7398] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 420.508850][ T7398] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 421.070174][ T7417] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.531'. [ 421.340223][ T7425] netlink: 'syz.4.535': attribute type 4 has an invalid length. [ 421.434710][ T7429] FAULT_INJECTION: forcing a failure. [ 421.434710][ T7429] name failslab, interval 1, probability 0, space 0, times 0 [ 421.456654][ T7429] CPU: 1 PID: 7429 Comm: syz.2.538 Not tainted syzkaller #0 [ 421.464016][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.474161][ T7429] Call Trace: [ 421.477479][ T7429] [ 421.480445][ T7429] dump_stack_lvl+0x16c/0x230 [ 421.485183][ T7429] ? show_regs_print_info+0x20/0x20 [ 421.490619][ T7429] ? load_image+0x3b0/0x3b0 [ 421.495173][ T7429] ? __might_sleep+0xe0/0xe0 [ 421.499802][ T7429] ? __lock_acquire+0x7c80/0x7c80 [ 421.504873][ T7429] should_fail_ex+0x39d/0x4d0 [ 421.509606][ T7429] should_failslab+0x9/0x20 [ 421.514159][ T7429] slab_pre_alloc_hook+0x59/0x310 [ 421.519231][ T7429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.525424][ T7429] ? __get_vm_area_node+0x125/0x370 [ 421.530672][ T7429] __kmem_cache_alloc_node+0x53/0x260 [ 421.536096][ T7429] ? __get_vm_area_node+0x125/0x370 [ 421.541352][ T7429] kmalloc_node_trace+0x26/0xe0 [ 421.546249][ T7429] __get_vm_area_node+0x125/0x370 [ 421.551323][ T7429] __vmalloc_node_range+0x36e/0x1320 [ 421.556647][ T7429] ? netlink_sendmsg+0x5f3/0xbe0 [ 421.561623][ T7429] ? netlink_insert+0x106a/0x1370 [ 421.566702][ T7429] ? netlink_insert+0x2b3/0x1370 [ 421.571683][ T7429] ? netlink_data_ready+0x10/0x10 [ 421.576763][ T7429] ? free_vm_area+0x50/0x50 [ 421.581317][ T7429] ? netlink_sendmsg+0x5f3/0xbe0 [ 421.586295][ T7429] vmalloc+0x79/0x90 [ 421.590251][ T7429] ? netlink_sendmsg+0x5f3/0xbe0 [ 421.595249][ T7429] netlink_sendmsg+0x5f3/0xbe0 [ 421.600064][ T7429] ? netlink_getsockopt+0x580/0x580 [ 421.605329][ T7429] ? netlink_getsockopt+0x580/0x580 [ 421.610575][ T7429] ____sys_sendmsg+0x5bf/0x950 [ 421.615393][ T7429] ? __asan_memset+0x22/0x40 [ 421.620025][ T7429] ? __sys_sendmsg_sock+0x30/0x30 [ 421.625090][ T7429] ? __import_iovec+0x5f2/0x860 [ 421.630084][ T7429] ? import_iovec+0x73/0xa0 [ 421.634637][ T7429] ___sys_sendmsg+0x220/0x290 [ 421.639384][ T7429] ? __sys_sendmsg+0x270/0x270 [ 421.644221][ T7429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.650447][ T7429] __se_sys_sendmsg+0x1a5/0x270 [ 421.655357][ T7429] ? perf_trace_preemptirq_template+0x281/0x340 [ 421.661681][ T7429] ? __x64_sys_sendmsg+0x80/0x80 [ 421.666682][ T7429] ? lockdep_hardirqs_on+0x98/0x150 [ 421.672012][ T7429] do_syscall_64+0x55/0xb0 [ 421.676555][ T7429] ? clear_bhb_loop+0x40/0x90 [ 421.681266][ T7429] ? clear_bhb_loop+0x40/0x90 [ 421.685998][ T7429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.691931][ T7429] RIP: 0033:0x7f52d4f8f6c9 [ 421.696404][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.716055][ T7429] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.724616][ T7429] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 421.732633][ T7429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 421.740649][ T7429] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 421.748670][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.756789][ T7429] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 421.764817][ T7429] [ 421.789509][ T7429] syz.2.538: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 421.806496][ T7427] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 421.819268][ T7429] CPU: 1 PID: 7429 Comm: syz.2.538 Not tainted syzkaller #0 [ 421.821079][ T7427] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 421.826579][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.826593][ T7429] Call Trace: [ 421.826600][ T7429] [ 421.826609][ T7429] dump_stack_lvl+0x16c/0x230 [ 421.826642][ T7429] ? show_regs_print_info+0x20/0x20 [ 421.826668][ T7429] ? load_image+0x3b0/0x3b0 [ 421.826693][ T7429] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 421.826718][ T7429] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 421.826743][ T7429] warn_alloc+0x210/0x300 [ 421.881627][ T7429] ? __get_vm_area_node+0x125/0x370 [ 421.886863][ T7429] ? zone_watermark_ok_safe+0x230/0x230 [ 421.892428][ T7429] ? rcu_is_watching+0x15/0xb0 [ 421.897215][ T7429] ? __get_vm_area_node+0x356/0x370 [ 421.902449][ T7429] __vmalloc_node_range+0x393/0x1320 [ 421.907754][ T7429] ? netlink_insert+0x106a/0x1370 [ 421.912802][ T7429] ? netlink_insert+0x2b3/0x1370 [ 421.917754][ T7429] ? netlink_data_ready+0x10/0x10 [ 421.922795][ T7429] ? free_vm_area+0x50/0x50 [ 421.927324][ T7429] ? netlink_sendmsg+0x5f3/0xbe0 [ 421.932281][ T7429] vmalloc+0x79/0x90 [ 421.936196][ T7429] ? netlink_sendmsg+0x5f3/0xbe0 [ 421.941155][ T7429] netlink_sendmsg+0x5f3/0xbe0 [ 421.945947][ T7429] ? netlink_getsockopt+0x580/0x580 [ 421.951196][ T7429] ? netlink_getsockopt+0x580/0x580 [ 421.956502][ T7429] ____sys_sendmsg+0x5bf/0x950 [ 421.961295][ T7429] ? __asan_memset+0x22/0x40 [ 421.965897][ T7429] ? __sys_sendmsg_sock+0x30/0x30 [ 421.970943][ T7429] ? __import_iovec+0x5f2/0x860 [ 421.975820][ T7429] ? import_iovec+0x73/0xa0 [ 421.980358][ T7429] ___sys_sendmsg+0x220/0x290 [ 421.985047][ T7429] ? __sys_sendmsg+0x270/0x270 [ 421.989849][ T7429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.996034][ T7429] __se_sys_sendmsg+0x1a5/0x270 [ 422.000902][ T7429] ? perf_trace_preemptirq_template+0x281/0x340 [ 422.007155][ T7429] ? __x64_sys_sendmsg+0x80/0x80 [ 422.012112][ T7429] ? lockdep_hardirqs_on+0x98/0x150 [ 422.017335][ T7429] do_syscall_64+0x55/0xb0 [ 422.021763][ T7429] ? clear_bhb_loop+0x40/0x90 [ 422.026448][ T7429] ? clear_bhb_loop+0x40/0x90 [ 422.031136][ T7429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.037044][ T7429] RIP: 0033:0x7f52d4f8f6c9 [ 422.041462][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.061156][ T7429] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.069681][ T7429] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 422.077743][ T7429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 422.085720][ T7429] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 422.093703][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.101683][ T7429] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 422.109678][ T7429] [ 422.170513][ T7433] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 422.189349][ T7433] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 422.197756][ T7429] Mem-Info: [ 422.208428][ T7429] active_anon:9549 inactive_anon:0 isolated_anon:0 [ 422.208428][ T7429] active_file:5342 inactive_file:39910 isolated_file:0 [ 422.208428][ T7429] unevictable:768 dirty:297 writeback:0 [ 422.208428][ T7429] slab_reclaimable:10077 slab_unreclaimable:93893 [ 422.208428][ T7429] mapped:33728 shmem:5501 pagetables:577 [ 422.208428][ T7429] sec_pagetables:0 bounce:0 [ 422.208428][ T7429] kernel_misc_reclaimable:0 [ 422.208428][ T7429] free:1338882 free_pcp:11200 free_cma:0 [ 422.254023][ T7429] Node 0 active_anon:38096kB inactive_anon:0kB active_file:21368kB inactive_file:159436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133612kB dirty:1184kB writeback:0kB shmem:20468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11496kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 422.286915][ T7429] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 422.367885][ T7429] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.458975][ T7429] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 422.479103][ T7429] Node 0 DMA32 free:1439904kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:39644kB inactive_anon:0kB active_file:22868kB inactive_file:158124kB unevictable:1536kB writepending:1184kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:27368kB local_pcp:18612kB free_cma:0kB [ 422.549241][ T7429] lowmem_reserve[]: 0 0 1 1 1 [ 422.566758][ T7429] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 422.618597][ T7429] lowmem_reserve[]: 0 0 0 0 0 [ 422.623417][ T7429] Node 1 Normal free:3897232kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:6944kB free_cma:0kB [ 422.669760][ T7429] lowmem_reserve[]: 0 0 0 0 0 [ 422.674565][ T7429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 422.689531][ T7429] Node 0 DMA32: 0*4kB 2*8kB (UE) 1*16kB (M) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 2*1024kB (UM) 3*2048kB (UME) 348*4096kB (M) = 1435872kB [ 422.727379][ T7448] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.542'. [ 422.728672][ T7429] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 422.748406][ T7448] netlink: zone id is out of range [ 422.759826][ T7448] netlink: zone id is out of range [ 422.764661][ T7429] Node 1 Normal: 210*4kB (UME) 51*8kB (UME) 43*16kB (UME) 104*32kB (UME) 32*64kB (UE) 4*128kB (UME) 1*256kB (U) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3897232kB [ 422.768147][ T7448] netlink: zone id is out of range [ 422.784769][ T7429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.799247][ T7429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.808817][ T7448] netlink: zone id is out of range [ 422.814178][ T7448] netlink: zone id is out of range [ 422.830602][ T7448] netlink: zone id is out of range [ 422.835801][ T7448] netlink: zone id is out of range [ 422.848603][ T7429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.859610][ T7448] netlink: zone id is out of range [ 422.864881][ T7448] netlink: zone id is out of range [ 422.870338][ T7429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.898300][ T7429] 53428 total pagecache pages [ 422.903054][ T7429] 0 pages in swap cache [ 422.911290][ T7448] netlink: zone id is out of range [ 422.920332][ T7429] Free swap = 124996kB [ 422.928541][ T7429] Total swap = 124996kB [ 422.938087][ T7429] 2097051 pages RAM [ 422.942603][ T7429] 0 pages HighMem/MovableOnly [ 422.954589][ T7429] 416137 pages reserved [ 422.960479][ T7429] 0 pages cma reserved [ 423.319006][ T7457] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.546'. [ 423.937964][ T7474] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 423.991265][ T7474] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 424.040096][ T7481] netlink: 'syz.4.553': attribute type 4 has an invalid length. [ 424.098569][ T7479] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 424.138440][ T7479] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 424.608952][ T7503] netlink: 188 bytes leftover after parsing attributes in process `syz.2.562'. [ 424.829027][ T7508] FAULT_INJECTION: forcing a failure. [ 424.829027][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 424.878352][ T7508] CPU: 1 PID: 7508 Comm: syz.2.564 Not tainted syzkaller #0 [ 424.885730][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.895828][ T7508] Call Trace: [ 424.899141][ T7508] [ 424.902098][ T7508] dump_stack_lvl+0x16c/0x230 [ 424.906798][ T7508] ? show_regs_print_info+0x20/0x20 [ 424.912025][ T7508] ? load_image+0x3b0/0x3b0 [ 424.916544][ T7508] ? __lock_acquire+0x7c80/0x7c80 [ 424.921586][ T7508] should_fail_ex+0x39d/0x4d0 [ 424.926285][ T7508] should_failslab+0x9/0x20 [ 424.930805][ T7508] slab_pre_alloc_hook+0x59/0x310 [ 424.935845][ T7508] ? sock_write_iter+0x2bb/0x3f0 [ 424.940788][ T7508] ? vfs_write+0x43b/0x940 [ 424.945213][ T7508] ? ksys_write+0x147/0x250 [ 424.949738][ T7508] kmem_cache_alloc_node+0x60/0x330 [ 424.954953][ T7508] ? alloc_vmap_area+0x1c4/0x1c70 [ 424.959992][ T7508] alloc_vmap_area+0x1c4/0x1c70 [ 424.964869][ T7508] ? vm_map_ram+0xcb0/0xcb0 [ 424.969391][ T7508] ? rcu_is_watching+0x15/0xb0 [ 424.974180][ T7508] __get_vm_area_node+0x162/0x370 [ 424.979228][ T7508] __vmalloc_node_range+0x36e/0x1320 [ 424.984636][ T7508] ? netlink_sendmsg+0x5f3/0xbe0 [ 424.989591][ T7508] ? netlink_insert+0x106a/0x1370 [ 424.994642][ T7508] ? netlink_insert+0x2b3/0x1370 [ 424.999592][ T7508] ? netlink_data_ready+0x10/0x10 [ 425.004632][ T7508] ? free_vm_area+0x50/0x50 [ 425.009240][ T7508] ? netlink_sendmsg+0x5f3/0xbe0 [ 425.014198][ T7508] vmalloc+0x79/0x90 [ 425.018108][ T7508] ? netlink_sendmsg+0x5f3/0xbe0 [ 425.023149][ T7508] netlink_sendmsg+0x5f3/0xbe0 [ 425.027966][ T7508] ? netlink_getsockopt+0x580/0x580 [ 425.033178][ T7508] ? aa_sock_msg_perm+0x94/0x150 [ 425.038129][ T7508] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 425.043427][ T7508] ? security_socket_sendmsg+0x80/0xa0 [ 425.049421][ T7508] sock_write_iter+0x2bb/0x3f0 [ 425.054200][ T7508] ? sock_read_iter+0x3b0/0x3b0 [ 425.059073][ T7508] ? common_file_perm+0x198/0x1f0 [ 425.064121][ T7508] vfs_write+0x43b/0x940 [ 425.068413][ T7508] ? file_end_write+0x250/0x250 [ 425.073285][ T7508] ? __fget_files+0x44a/0x4d0 [ 425.077986][ T7508] ? __fdget_pos+0x1d8/0x330 [ 425.082585][ T7508] ? ksys_write+0x75/0x250 [ 425.087027][ T7508] ksys_write+0x147/0x250 [ 425.091390][ T7508] ? __ia32_sys_read+0x90/0x90 [ 425.096174][ T7508] ? lockdep_hardirqs_on+0x98/0x150 [ 425.101387][ T7508] do_syscall_64+0x55/0xb0 [ 425.105818][ T7508] ? clear_bhb_loop+0x40/0x90 [ 425.110510][ T7508] ? clear_bhb_loop+0x40/0x90 [ 425.115199][ T7508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.121095][ T7508] RIP: 0033:0x7f52d4f8f6c9 [ 425.125516][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.145229][ T7508] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.153661][ T7508] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 425.161648][ T7508] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 425.169631][ T7508] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 425.177711][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.185706][ T7508] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 425.193721][ T7508] [ 425.470079][ T7510] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 425.510780][ T7510] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 425.580192][ T7515] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 425.610171][ T7515] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 425.676212][ T7514] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 425.876282][ T7527] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.573'. [ 425.973075][ T7529] FAULT_INJECTION: forcing a failure. [ 425.973075][ T7529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.058436][ T7529] CPU: 0 PID: 7529 Comm: syz.4.572 Not tainted syzkaller #0 [ 426.065802][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.075880][ T7529] Call Trace: [ 426.079178][ T7529] [ 426.082120][ T7529] dump_stack_lvl+0x16c/0x230 [ 426.086817][ T7529] ? show_regs_print_info+0x20/0x20 [ 426.092040][ T7529] ? load_image+0x3b0/0x3b0 [ 426.096567][ T7529] ? __lock_acquire+0x7c80/0x7c80 [ 426.101614][ T7529] ? snprintf+0xdb/0x120 [ 426.105913][ T7529] should_fail_ex+0x39d/0x4d0 [ 426.110711][ T7529] _copy_to_user+0x2f/0xa0 [ 426.115153][ T7529] simple_read_from_buffer+0xe7/0x150 [ 426.120575][ T7529] proc_fail_nth_read+0x1e3/0x250 [ 426.125621][ T7529] ? proc_fault_inject_write+0x340/0x340 [ 426.131276][ T7529] ? fsnotify_perm+0x271/0x5e0 [ 426.136058][ T7529] ? proc_fault_inject_write+0x340/0x340 [ 426.141709][ T7529] vfs_read+0x27e/0x920 [ 426.145879][ T7529] ? kernel_read+0x1e0/0x1e0 [ 426.150590][ T7529] ? __fget_files+0x28/0x4d0 [ 426.155197][ T7529] ? __fget_files+0x44a/0x4d0 [ 426.159893][ T7529] ? __fdget_pos+0x2a3/0x330 [ 426.164496][ T7529] ? ksys_read+0x75/0x250 [ 426.168862][ T7529] ksys_read+0x147/0x250 [ 426.173126][ T7529] ? vfs_write+0x940/0x940 [ 426.177561][ T7529] ? syscall_enter_from_user_mode+0x2e/0x80 [ 426.183465][ T7529] do_syscall_64+0x55/0xb0 [ 426.187894][ T7529] ? clear_bhb_loop+0x40/0x90 [ 426.192584][ T7529] ? clear_bhb_loop+0x40/0x90 [ 426.197276][ T7529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.203178][ T7529] RIP: 0033:0x7f965478e0dc [ 426.207606][ T7529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 426.227225][ T7529] RSP: 002b:00007f965571c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.235649][ T7529] RAX: ffffffffffffffda RBX: 00007f96549e5fa0 RCX: 00007f965478e0dc [ 426.243642][ T7529] RDX: 000000000000000f RSI: 00007f965571c0a0 RDI: 0000000000000009 [ 426.251632][ T7529] RBP: 00007f965571c090 R08: 0000000000000000 R09: 0000000000000000 [ 426.259623][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.267604][ T7529] R13: 00007f96549e6038 R14: 00007f96549e5fa0 R15: 00007ffe8907cee8 [ 426.275622][ T7529] [ 426.662754][ T7546] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.578'. [ 426.923108][ T7550] netlink: 'syz.2.581': attribute type 4 has an invalid length. [ 427.113313][ T7553] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 427.142498][ T7553] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 427.218661][ T7557] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 427.237170][ T7557] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 427.294172][ T7559] FAULT_INJECTION: forcing a failure. [ 427.294172][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 427.333221][ T7559] CPU: 0 PID: 7559 Comm: syz.2.584 Not tainted syzkaller #0 [ 427.340577][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.350648][ T7559] Call Trace: [ 427.353938][ T7559] [ 427.356890][ T7559] dump_stack_lvl+0x16c/0x230 [ 427.361596][ T7559] ? show_regs_print_info+0x20/0x20 [ 427.366825][ T7559] ? load_image+0x3b0/0x3b0 [ 427.371354][ T7559] should_fail_ex+0x39d/0x4d0 [ 427.376064][ T7559] should_failslab+0x9/0x20 [ 427.380585][ T7559] slab_pre_alloc_hook+0x59/0x310 [ 427.385628][ T7559] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 427.391619][ T7559] ? __get_vm_area_node+0x125/0x370 [ 427.396834][ T7559] __kmem_cache_alloc_node+0x53/0x260 [ 427.402225][ T7559] ? __get_vm_area_node+0x125/0x370 [ 427.407441][ T7559] kmalloc_node_trace+0x26/0xe0 [ 427.412320][ T7559] __get_vm_area_node+0x125/0x370 [ 427.417363][ T7559] __vmalloc_node_range+0x36e/0x1320 [ 427.422669][ T7559] ? netlink_sendmsg+0x5f3/0xbe0 [ 427.427623][ T7559] ? netlink_insert+0x1076/0x1370 [ 427.432669][ T7559] ? netlink_insert+0x2b3/0x1370 [ 427.437621][ T7559] ? netlink_data_ready+0x10/0x10 [ 427.442705][ T7559] ? free_vm_area+0x50/0x50 [ 427.447230][ T7559] ? netlink_sendmsg+0x5f3/0xbe0 [ 427.452188][ T7559] vmalloc+0x79/0x90 [ 427.456102][ T7559] ? netlink_sendmsg+0x5f3/0xbe0 [ 427.461071][ T7559] netlink_sendmsg+0x5f3/0xbe0 [ 427.465848][ T7559] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 427.472026][ T7559] ? netlink_getsockopt+0x580/0x580 [ 427.477597][ T7559] ? netlink_sendmsg+0x10/0xbe0 [ 427.482644][ T7559] ? netlink_getsockopt+0x580/0x580 [ 427.488038][ T7559] ____sys_sendmsg+0x5bf/0x950 [ 427.492831][ T7559] ? __asan_memset+0x22/0x40 [ 427.497440][ T7559] ? __sys_sendmsg_sock+0x30/0x30 [ 427.502485][ T7559] ? __import_iovec+0x5f2/0x860 [ 427.507365][ T7559] ? import_iovec+0x73/0xa0 [ 427.511891][ T7559] ___sys_sendmsg+0x220/0x290 [ 427.516589][ T7559] ? __sys_sendmsg+0x270/0x270 [ 427.521415][ T7559] __se_sys_sendmsg+0x1a5/0x270 [ 427.526284][ T7559] ? __x64_sys_sendmsg+0x80/0x80 [ 427.531250][ T7559] ? syscall_enter_from_user_mode+0x2e/0x80 [ 427.537153][ T7559] do_syscall_64+0x55/0xb0 [ 427.541598][ T7559] ? clear_bhb_loop+0x40/0x90 [ 427.546282][ T7559] ? clear_bhb_loop+0x40/0x90 [ 427.550972][ T7559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.556872][ T7559] RIP: 0033:0x7f52d4f8f6c9 [ 427.561289][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.580914][ T7559] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.589358][ T7559] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 427.597354][ T7559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 427.605371][ T7559] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 427.613363][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.621352][ T7559] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 427.629348][ T7559] [ 427.957585][ T7567] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.587'. [ 428.074656][ T7565] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.586'. [ 428.487910][ T7582] netlink: 'syz.4.592': attribute type 4 has an invalid length. [ 428.832869][ T7589] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 428.888884][ T7589] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 428.984200][ T7596] netlink: 188 bytes leftover after parsing attributes in process `syz.0.596'. [ 429.014432][ T7597] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 429.028611][ T7597] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 429.132520][ T7601] FAULT_INJECTION: forcing a failure. [ 429.132520][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 429.150388][ T7601] CPU: 1 PID: 7601 Comm: syz.4.599 Not tainted syzkaller #0 [ 429.157741][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.167833][ T7601] Call Trace: [ 429.171142][ T7601] [ 429.174226][ T7601] dump_stack_lvl+0x16c/0x230 [ 429.178947][ T7601] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.185139][ T7601] ? show_regs_print_info+0x20/0x20 [ 429.190378][ T7601] ? load_image+0x3b0/0x3b0 [ 429.194934][ T7601] should_fail_ex+0x39d/0x4d0 [ 429.199662][ T7601] should_failslab+0x9/0x20 [ 429.204211][ T7601] slab_pre_alloc_hook+0x59/0x310 [ 429.209284][ T7601] ? __get_vm_area_node+0x125/0x370 [ 429.214537][ T7601] __kmem_cache_alloc_node+0x53/0x260 [ 429.219965][ T7601] ? __get_vm_area_node+0x125/0x370 [ 429.225217][ T7601] kmalloc_node_trace+0x26/0xe0 [ 429.230122][ T7601] __get_vm_area_node+0x125/0x370 [ 429.235193][ T7601] __vmalloc_node_range+0x36e/0x1320 [ 429.240523][ T7601] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 429.246115][ T7601] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 429.252142][ T7601] ? lock_chain_count+0x20/0x20 [ 429.257042][ T7601] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.263324][ T7601] ? free_vm_area+0x50/0x50 [ 429.267873][ T7601] ? apparmor_capable+0x71/0x1a0 [ 429.272837][ T7601] ? apparmor_capable+0xe7/0x1a0 [ 429.277799][ T7601] ? kasan_check_range+0x55/0x290 [ 429.282878][ T7601] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 429.288461][ T7601] __vmalloc+0x7a/0x90 [ 429.292560][ T7601] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 429.298131][ T7601] bpf_prog_alloc_no_stats+0x47/0x440 [ 429.303517][ T7601] ? bpf_prog_alloc+0x2b/0x1b0 [ 429.308328][ T7601] bpf_prog_alloc+0x3d/0x1b0 [ 429.312951][ T7601] bpf_prog_load+0x6b8/0x16d0 [ 429.317648][ T7601] ? map_freeze+0x420/0x420 [ 429.322179][ T7601] ? __might_fault+0xaa/0x120 [ 429.326864][ T7601] ? __lock_acquire+0x7c80/0x7c80 [ 429.331994][ T7601] ? __might_fault+0xaa/0x120 [ 429.336700][ T7601] ? __might_fault+0xc6/0x120 [ 429.341385][ T7601] ? __might_fault+0xaa/0x120 [ 429.346071][ T7601] ? bpf_lsm_bpf+0x9/0x10 [ 429.350418][ T7601] ? security_bpf+0x7e/0xa0 [ 429.354942][ T7601] __sys_bpf+0x55a/0x800 [ 429.359198][ T7601] ? bpf_link_show_fdinfo+0x350/0x350 [ 429.364681][ T7601] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.370856][ T7601] __x64_sys_bpf+0x7c/0x90 [ 429.375289][ T7601] do_syscall_64+0x55/0xb0 [ 429.379767][ T7601] ? clear_bhb_loop+0x40/0x90 [ 429.384452][ T7601] ? clear_bhb_loop+0x40/0x90 [ 429.389145][ T7601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.395049][ T7601] RIP: 0033:0x7f965478f6c9 [ 429.399477][ T7601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.419093][ T7601] RSP: 002b:00007f965571c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.427518][ T7601] RAX: ffffffffffffffda RBX: 00007f96549e5fa0 RCX: 00007f965478f6c9 [ 429.435508][ T7601] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 429.443510][ T7601] RBP: 00007f965571c090 R08: 0000000000000000 R09: 0000000000000000 [ 429.451486][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.459467][ T7601] R13: 00007f96549e6038 R14: 00007f96549e5fa0 R15: 00007ffe8907cee8 [ 429.467461][ T7601] [ 429.786216][ T7612] FAULT_INJECTION: forcing a failure. [ 429.786216][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 429.818459][ T7612] CPU: 1 PID: 7612 Comm: syz.4.603 Not tainted syzkaller #0 [ 429.825896][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.835982][ T7612] Call Trace: [ 429.839300][ T7612] [ 429.842263][ T7612] dump_stack_lvl+0x16c/0x230 [ 429.846983][ T7612] ? show_regs_print_info+0x20/0x20 [ 429.852223][ T7612] ? load_image+0x3b0/0x3b0 [ 429.856759][ T7612] ? __might_sleep+0xe0/0xe0 [ 429.861366][ T7612] ? __lock_acquire+0x7c80/0x7c80 [ 429.866407][ T7612] should_fail_ex+0x39d/0x4d0 [ 429.871108][ T7612] should_failslab+0x9/0x20 [ 429.875637][ T7612] slab_pre_alloc_hook+0x59/0x310 [ 429.880683][ T7612] ? __lock_acquire+0x7c80/0x7c80 [ 429.885745][ T7612] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 429.891743][ T7612] ? dev_ethtool+0x11b/0x1720 [ 429.896436][ T7612] __kmem_cache_alloc_node+0x53/0x260 [ 429.901828][ T7612] ? __might_fault+0xaa/0x120 [ 429.906516][ T7612] ? dev_ethtool+0x11b/0x1720 [ 429.911206][ T7612] kmalloc_trace+0x2a/0xe0 [ 429.915637][ T7612] dev_ethtool+0x11b/0x1720 [ 429.920152][ T7612] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 429.926502][ T7612] ? __lock_acquire+0x7c80/0x7c80 [ 429.931545][ T7612] ? full_name_hash+0x92/0xe0 [ 429.936265][ T7612] ? dev_load+0x21/0x1f0 [ 429.940522][ T7612] dev_ioctl+0x4ca/0x1170 [ 429.944872][ T7612] sock_do_ioctl+0x226/0x2f0 [ 429.949488][ T7612] ? sock_show_fdinfo+0xb0/0xb0 [ 429.954363][ T7612] sock_ioctl+0x623/0x7a0 [ 429.958703][ T7612] ? sock_poll+0x3d0/0x3d0 [ 429.963140][ T7612] ? bpf_lsm_file_ioctl+0x9/0x10 [ 429.968190][ T7612] ? security_file_ioctl+0x80/0xa0 [ 429.973327][ T7612] ? sock_poll+0x3d0/0x3d0 [ 429.977750][ T7612] __se_sys_ioctl+0xfd/0x170 [ 429.982453][ T7612] do_syscall_64+0x55/0xb0 [ 429.986887][ T7612] ? clear_bhb_loop+0x40/0x90 [ 429.991587][ T7612] ? clear_bhb_loop+0x40/0x90 [ 429.996274][ T7612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.002173][ T7612] RIP: 0033:0x7f965478f6c9 [ 430.006599][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.026213][ T7612] RSP: 002b:00007f965571c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.034812][ T7612] RAX: ffffffffffffffda RBX: 00007f96549e5fa0 RCX: 00007f965478f6c9 [ 430.042797][ T7612] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000018 [ 430.050776][ T7612] RBP: 00007f965571c090 R08: 0000000000000000 R09: 0000000000000000 [ 430.058760][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.066738][ T7612] R13: 00007f96549e6038 R14: 00007f96549e5fa0 R15: 00007ffe8907cee8 [ 430.074736][ T7612] [ 430.230904][ T7621] netlink: 'syz.2.606': attribute type 4 has an invalid length. [ 430.499601][ T7628] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 430.506908][ T7628] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 430.733448][ T7635] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 430.760689][ T7635] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 430.803147][ T7638] FAULT_INJECTION: forcing a failure. [ 430.803147][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 430.817681][ T7638] CPU: 0 PID: 7638 Comm: syz.2.612 Not tainted syzkaller #0 [ 430.825110][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.835203][ T7638] Call Trace: [ 430.838528][ T7638] [ 430.841494][ T7638] dump_stack_lvl+0x16c/0x230 [ 430.846229][ T7638] ? show_regs_print_info+0x20/0x20 [ 430.851482][ T7638] ? load_image+0x3b0/0x3b0 [ 430.856038][ T7638] ? __might_sleep+0xe0/0xe0 [ 430.860683][ T7638] ? __lock_acquire+0x7c80/0x7c80 [ 430.865768][ T7638] should_fail_ex+0x39d/0x4d0 [ 430.870673][ T7638] should_failslab+0x9/0x20 [ 430.875213][ T7638] slab_pre_alloc_hook+0x59/0x310 [ 430.880284][ T7638] ? up_read+0x20/0x20 [ 430.884375][ T7638] ? ipv6_add_addr+0x538/0x1090 [ 430.889265][ T7638] __kmem_cache_alloc_node+0x53/0x260 [ 430.894682][ T7638] ? ipv6_add_addr+0x538/0x1090 [ 430.899570][ T7638] kmalloc_trace+0x2a/0xe0 [ 430.904034][ T7638] ipv6_add_addr+0x538/0x1090 [ 430.908751][ T7638] ? ipv6_count_addresses+0x190/0x190 [ 430.914157][ T7638] ? addrconf_add_ifaddr+0x139/0x1a0 [ 430.919581][ T7638] inet6_addr_add+0x57e/0xb60 [ 430.924422][ T7638] addrconf_add_ifaddr+0x14c/0x1a0 [ 430.929580][ T7638] ? addrconf_set_dstaddr+0x2d0/0x2d0 [ 430.935002][ T7638] ? __lock_acquire+0x7c80/0x7c80 [ 430.940057][ T7638] ? slab_free_freelist_hook+0x130/0x1b0 [ 430.945754][ T7638] inet6_ioctl+0x13e/0x280 [ 430.950212][ T7638] ? inet6_getname+0x650/0x650 [ 430.955005][ T7638] ? tomoyo_path_number_perm+0x4dc/0x590 [ 430.960683][ T7638] ? tomoyo_path_number_perm+0x1ba/0x590 [ 430.966361][ T7638] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 430.971873][ T7638] sock_do_ioctl+0xd7/0x2f0 [ 430.976408][ T7638] ? sock_show_fdinfo+0xb0/0xb0 [ 430.981323][ T7638] sock_ioctl+0x623/0x7a0 [ 430.985707][ T7638] ? sock_poll+0x3d0/0x3d0 [ 430.990165][ T7638] ? bpf_lsm_file_ioctl+0x9/0x10 [ 430.995132][ T7638] ? security_file_ioctl+0x80/0xa0 [ 431.000283][ T7638] ? sock_poll+0x3d0/0x3d0 [ 431.004732][ T7638] __se_sys_ioctl+0xfd/0x170 [ 431.009378][ T7638] do_syscall_64+0x55/0xb0 [ 431.013841][ T7638] ? clear_bhb_loop+0x40/0x90 [ 431.018572][ T7638] ? clear_bhb_loop+0x40/0x90 [ 431.023289][ T7638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.029213][ T7638] RIP: 0033:0x7f52d4f8f6c9 [ 431.033668][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.053308][ T7638] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.061762][ T7638] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 431.069766][ T7638] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 431.077762][ T7638] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 431.085775][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.093827][ T7638] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 431.101924][ T7638] [ 431.343267][ T7643] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 431.391465][ T7643] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.614'. [ 431.814842][ T7656] netlink: 'syz.2.619': attribute type 4 has an invalid length. [ 434.640905][ T7668] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 434.647719][ T7668] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 434.661749][ T7669] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 434.669321][ T7669] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 434.677488][ T7671] netlink: 'syz.3.624': attribute type 39 has an invalid length. [ 434.700470][ T7686] IPv6: Can't replace route, no match found [ 434.918994][ T7701] batadv0: entered promiscuous mode [ 434.954171][ T7699] can: request_module (can-proto-0) failed. [ 434.955880][ T7698] netlink: 'syz.3.631': attribute type 4 has an invalid length. [ 434.979812][ T7703] FAULT_INJECTION: forcing a failure. [ 434.979812][ T7703] name failslab, interval 1, probability 0, space 0, times 0 [ 434.998744][ T7703] CPU: 0 PID: 7703 Comm: syz.0.633 Not tainted syzkaller #0 [ 435.006092][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.016184][ T7703] Call Trace: [ 435.019498][ T7703] [ 435.022551][ T7703] dump_stack_lvl+0x16c/0x230 [ 435.027278][ T7703] ? show_regs_print_info+0x20/0x20 [ 435.032525][ T7703] ? load_image+0x3b0/0x3b0 [ 435.037083][ T7703] ? verify_lock_unused+0x140/0x140 [ 435.042337][ T7703] ? perf_trace_lock+0xf7/0x380 [ 435.047223][ T7703] ? netlink_lookup+0x30/0x200 [ 435.052022][ T7703] should_fail_ex+0x39d/0x4d0 [ 435.056736][ T7703] should_failslab+0x9/0x20 [ 435.061275][ T7703] slab_pre_alloc_hook+0x59/0x310 [ 435.066336][ T7703] kmem_cache_alloc+0x5a/0x2e0 [ 435.071139][ T7703] ? skb_clone+0x1eb/0x370 [ 435.075602][ T7703] skb_clone+0x1eb/0x370 [ 435.079964][ T7703] __netlink_deliver_tap+0x41c/0x830 [ 435.085292][ T7703] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.090780][ T7703] netlink_deliver_tap+0x19c/0x1b0 [ 435.095919][ T7703] netlink_unicast+0x72c/0x8d0 [ 435.100718][ T7703] netlink_sendmsg+0x8c1/0xbe0 [ 435.105523][ T7703] ? netlink_getsockopt+0x580/0x580 [ 435.110741][ T7703] ? aa_sock_msg_perm+0x94/0x150 [ 435.115693][ T7703] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 435.120996][ T7703] ? security_socket_sendmsg+0x80/0xa0 [ 435.126479][ T7703] ? netlink_getsockopt+0x580/0x580 [ 435.131782][ T7703] ____sys_sendmsg+0x5bf/0x950 [ 435.136576][ T7703] ? __asan_memset+0x22/0x40 [ 435.141187][ T7703] ? __sys_sendmsg_sock+0x30/0x30 [ 435.146347][ T7703] ? __import_iovec+0x5f2/0x860 [ 435.151241][ T7703] ? import_iovec+0x73/0xa0 [ 435.155765][ T7703] ___sys_sendmsg+0x220/0x290 [ 435.160483][ T7703] ? __sys_sendmsg+0x270/0x270 [ 435.165293][ T7703] ? __lock_acquire+0x7c80/0x7c80 [ 435.170368][ T7703] __se_sys_sendmsg+0x1a5/0x270 [ 435.175263][ T7703] ? __x64_sys_sendmsg+0x80/0x80 [ 435.180250][ T7703] ? lockdep_hardirqs_on+0x98/0x150 [ 435.185465][ T7703] do_syscall_64+0x55/0xb0 [ 435.189901][ T7703] ? clear_bhb_loop+0x40/0x90 [ 435.194680][ T7703] ? clear_bhb_loop+0x40/0x90 [ 435.199378][ T7703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.205286][ T7703] RIP: 0033:0x7f448778f6c9 [ 435.209905][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.229616][ T7703] RSP: 002b:00007f44885a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.238072][ T7703] RAX: ffffffffffffffda RBX: 00007f44879e5fa0 RCX: 00007f448778f6c9 [ 435.246060][ T7703] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 435.254046][ T7703] RBP: 00007f44885a9090 R08: 0000000000000000 R09: 0000000000000000 [ 435.262033][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.270109][ T7703] R13: 00007f44879e6038 R14: 00007f44879e5fa0 R15: 00007ffd9bcc83e8 [ 435.278113][ T7703] [ 435.294346][ T7703] batadv0: entered promiscuous mode [ 435.591332][ T7714] FAULT_INJECTION: forcing a failure. [ 435.591332][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 435.636663][ T7714] CPU: 1 PID: 7714 Comm: syz.2.637 Not tainted syzkaller #0 [ 435.644025][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.654118][ T7714] Call Trace: [ 435.657426][ T7714] [ 435.660386][ T7714] dump_stack_lvl+0x16c/0x230 [ 435.665112][ T7714] ? show_regs_print_info+0x20/0x20 [ 435.670350][ T7714] ? load_image+0x3b0/0x3b0 [ 435.674891][ T7714] ? __might_sleep+0xe0/0xe0 [ 435.679526][ T7714] ? __lock_acquire+0x7c80/0x7c80 [ 435.684590][ T7714] ? mark_lock+0x94/0x320 [ 435.688996][ T7714] should_fail_ex+0x39d/0x4d0 [ 435.693725][ T7714] should_failslab+0x9/0x20 [ 435.698277][ T7714] slab_pre_alloc_hook+0x59/0x310 [ 435.703340][ T7714] ? __get_vm_area_node+0x125/0x370 [ 435.708593][ T7714] __kmem_cache_alloc_node+0x53/0x260 [ 435.713991][ T7714] ? __get_vm_area_node+0x125/0x370 [ 435.719216][ T7714] kmalloc_node_trace+0x26/0xe0 [ 435.724096][ T7714] __get_vm_area_node+0x125/0x370 [ 435.729235][ T7714] __vmalloc_node_range+0x36e/0x1320 [ 435.735942][ T7714] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 435.741509][ T7714] ? mark_lock+0x94/0x320 [ 435.745863][ T7714] ? __lock_acquire+0x1334/0x7c80 [ 435.750901][ T7714] ? verify_lock_unused+0x140/0x140 [ 435.756124][ T7714] ? free_vm_area+0x50/0x50 [ 435.760645][ T7714] ? end_current_label_crit_section+0x170/0x170 [ 435.766908][ T7714] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 435.772574][ T7714] __vmalloc+0x7a/0x90 [ 435.776677][ T7714] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 435.782241][ T7714] bpf_prog_alloc_no_stats+0x47/0x440 [ 435.787645][ T7714] ? bpf_prog_alloc+0x2b/0x1b0 [ 435.792432][ T7714] bpf_prog_alloc+0x3d/0x1b0 [ 435.797067][ T7714] bpf_prog_load+0x6b8/0x16d0 [ 435.801780][ T7714] ? map_freeze+0x420/0x420 [ 435.806319][ T7714] ? __might_fault+0xaa/0x120 [ 435.811021][ T7714] ? __lock_acquire+0x7c80/0x7c80 [ 435.816066][ T7714] ? file_end_write+0x159/0x250 [ 435.820943][ T7714] ? __might_fault+0xaa/0x120 [ 435.825646][ T7714] ? __might_fault+0xc6/0x120 [ 435.830337][ T7714] ? __might_fault+0xaa/0x120 [ 435.835024][ T7714] ? bpf_lsm_bpf+0x9/0x10 [ 435.839369][ T7714] ? security_bpf+0x7e/0xa0 [ 435.843890][ T7714] __sys_bpf+0x55a/0x800 [ 435.848152][ T7714] ? bpf_link_show_fdinfo+0x350/0x350 [ 435.853552][ T7714] ? lock_chain_count+0x20/0x20 [ 435.858423][ T7714] __x64_sys_bpf+0x7c/0x90 [ 435.862870][ T7714] do_syscall_64+0x55/0xb0 [ 435.867307][ T7714] ? clear_bhb_loop+0x40/0x90 [ 435.871998][ T7714] ? clear_bhb_loop+0x40/0x90 [ 435.876685][ T7714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.882603][ T7714] RIP: 0033:0x7f52d4f8f6c9 [ 435.887031][ T7714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.906650][ T7714] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.915120][ T7714] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 435.923102][ T7714] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 435.931087][ T7714] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 435.939069][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.947048][ T7714] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 435.955067][ T7714] [ 435.977706][ T7714] warn_alloc: 3 callbacks suppressed [ 435.977720][ T7714] syz.2.637: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 436.022440][ T7714] CPU: 1 PID: 7714 Comm: syz.2.637 Not tainted syzkaller #0 [ 436.029780][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.039865][ T7714] Call Trace: [ 436.043172][ T7714] [ 436.046130][ T7714] dump_stack_lvl+0x16c/0x230 [ 436.050863][ T7714] ? show_regs_print_info+0x20/0x20 [ 436.056101][ T7714] ? load_image+0x3b0/0x3b0 [ 436.060639][ T7714] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 436.067099][ T7714] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 436.073635][ T7714] warn_alloc+0x210/0x300 [ 436.078005][ T7714] ? __get_vm_area_node+0x125/0x370 [ 436.083250][ T7714] ? zone_watermark_ok_safe+0x230/0x230 [ 436.088840][ T7714] ? rcu_is_watching+0x15/0xb0 [ 436.093667][ T7714] ? __get_vm_area_node+0x356/0x370 [ 436.098918][ T7714] __vmalloc_node_range+0x393/0x1320 [ 436.104247][ T7714] ? mark_lock+0x94/0x320 [ 436.108614][ T7714] ? __lock_acquire+0x1334/0x7c80 [ 436.113669][ T7714] ? verify_lock_unused+0x140/0x140 [ 436.118915][ T7714] ? free_vm_area+0x50/0x50 [ 436.123468][ T7714] ? end_current_label_crit_section+0x170/0x170 [ 436.129752][ T7714] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 436.135332][ T7714] __vmalloc+0x7a/0x90 [ 436.139440][ T7714] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 436.145022][ T7714] bpf_prog_alloc_no_stats+0x47/0x440 [ 436.150422][ T7714] ? bpf_prog_alloc+0x2b/0x1b0 [ 436.155220][ T7714] bpf_prog_alloc+0x3d/0x1b0 [ 436.159856][ T7714] bpf_prog_load+0x6b8/0x16d0 [ 436.164756][ T7714] ? map_freeze+0x420/0x420 [ 436.169301][ T7714] ? __might_fault+0xaa/0x120 [ 436.174017][ T7714] ? __lock_acquire+0x7c80/0x7c80 [ 436.179070][ T7714] ? file_end_write+0x159/0x250 [ 436.183968][ T7714] ? __might_fault+0xaa/0x120 [ 436.188692][ T7714] ? __might_fault+0xc6/0x120 [ 436.193396][ T7714] ? __might_fault+0xaa/0x120 [ 436.198104][ T7714] ? bpf_lsm_bpf+0x9/0x10 [ 436.202471][ T7714] ? security_bpf+0x7e/0xa0 [ 436.207010][ T7714] __sys_bpf+0x55a/0x800 [ 436.211286][ T7714] ? bpf_link_show_fdinfo+0x350/0x350 [ 436.216704][ T7714] ? lock_chain_count+0x20/0x20 [ 436.221631][ T7714] __x64_sys_bpf+0x7c/0x90 [ 436.226093][ T7714] do_syscall_64+0x55/0xb0 [ 436.230545][ T7714] ? clear_bhb_loop+0x40/0x90 [ 436.235260][ T7714] ? clear_bhb_loop+0x40/0x90 [ 436.239971][ T7714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.245903][ T7714] RIP: 0033:0x7f52d4f8f6c9 [ 436.250350][ T7714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.269995][ T7714] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.278450][ T7714] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 436.286473][ T7714] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 436.294512][ T7714] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 436.302513][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.310537][ T7714] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 436.318552][ T7714] [ 436.344402][ T7714] Mem-Info: [ 436.347574][ T7714] active_anon:5310 inactive_anon:0 isolated_anon:0 [ 436.347574][ T7714] active_file:11339 inactive_file:39917 isolated_file:0 [ 436.347574][ T7714] unevictable:768 dirty:64 writeback:0 [ 436.347574][ T7714] slab_reclaimable:10148 slab_unreclaimable:93906 [ 436.347574][ T7714] mapped:29591 shmem:1361 pagetables:535 [ 436.347574][ T7714] sec_pagetables:0 bounce:0 [ 436.347574][ T7714] kernel_misc_reclaimable:0 [ 436.347574][ T7714] free:1341840 free_pcp:7727 free_cma:0 [ 436.471381][ T7714] Node 0 active_anon:21340kB inactive_anon:0kB active_file:45356kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118364kB dirty:252kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11420kB pagetables:2240kB sec_pagetables:0kB all_unreclaimable? no [ 436.512615][ T7721] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 436.533144][ T7721] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 436.563185][ T7714] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 436.658339][ T7714] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.658489][ T7722] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 436.737195][ T7714] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 436.762280][ T7722] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 436.778387][ T7714] Node 0 DMA32 free:1453504kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21388kB inactive_anon:0kB active_file:45356kB inactive_file:158152kB unevictable:1536kB writepending:552kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:14116kB local_pcp:5416kB free_cma:0kB [ 436.858740][ T7714] lowmem_reserve[]: 0 0 1 1 1 [ 436.863591][ T7714] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 436.914730][ T7714] lowmem_reserve[]: 0 0 0 0 0 [ 436.946048][ T7714] Node 1 Normal free:3897744kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16864kB local_pcp:6688kB free_cma:0kB [ 437.020633][ T7714] lowmem_reserve[]: 0 0 0 0 0 [ 437.026353][ T7714] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.040330][ T7714] Node 0 DMA32: 1697*4kB (UME) 974*8kB (UME) 453*16kB (UME) 546*32kB (UME) 329*64kB (UME) 40*128kB (UME) 15*256kB (UM) 7*512kB (UME) 10*1024kB (UM) 5*2048kB (UME) 332*4096kB (M) = 1453252kB [ 437.084769][ T7714] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 437.103060][ T7714] Node 1 Normal: 210*4kB (UME) 51*8kB (UME) 43*16kB (UME) 116*32kB (UME) 34*64kB (UE) 4*128kB (UME) 1*256kB (U) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3897744kB [ 437.121755][ T7714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.132480][ T7714] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.142486][ T7714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.166126][ T7714] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.185548][ T7714] 52617 total pagecache pages [ 437.190376][ T7714] 0 pages in swap cache [ 437.192577][ T7732] netlink: 14 bytes leftover after parsing attributes in process `syz.3.643'. [ 437.194534][ T7714] Free swap = 124996kB [ 437.213481][ T7714] Total swap = 124996kB [ 437.217803][ T7714] 2097051 pages RAM [ 437.223884][ T7714] 0 pages HighMem/MovableOnly [ 437.235252][ T7714] 416137 pages reserved [ 437.241774][ T7714] 0 pages cma reserved [ 437.404088][ T7734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.644'. [ 437.552892][ T7738] netlink: 'syz.2.646': attribute type 4 has an invalid length. [ 437.975731][ T7749] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.650'. [ 438.170106][ T7753] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.651'. [ 438.852716][ T7766] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 438.868911][ T7766] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 438.938600][ T7768] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 438.945653][ T7768] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 439.169377][ T7772] netlink: 'syz.3.658': attribute type 4 has an invalid length. [ 439.537379][ T7785] netlink: 'syz.2.663': attribute type 4 has an invalid length. [ 439.581604][ T7786] netlink: 'syz.3.664': attribute type 4 has an invalid length. [ 439.794977][ T7790] netlink: 'syz.0.666': attribute type 21 has an invalid length. [ 439.836226][ T7790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.666'. [ 439.854520][ T7790] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 439.918691][ T7790] netlink: 'syz.0.666': attribute type 21 has an invalid length. [ 440.040799][ T7795] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 440.049727][ T7795] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 440.349320][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.355994][ T7798] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 440.363097][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.382194][ T7798] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 440.463488][ T7796] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 440.472733][ T7796] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 440.530965][ T7797] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 440.539158][ T7797] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 440.635752][ T7804] netlink: 192 bytes leftover after parsing attributes in process `syz.3.669'. [ 440.719446][ T7806] netlink: 'syz.0.670': attribute type 4 has an invalid length. [ 440.800427][ T7803] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 440.807971][ T7803] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 440.838536][ T7808] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 440.845654][ T7808] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 441.021222][ T7813] netlink: 'syz.2.672': attribute type 4 has an invalid length. [ 441.300847][ T7822] netlink: 'syz.4.675': attribute type 2 has an invalid length. [ 441.711116][ T7831] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 441.729152][ T7831] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 441.802160][ T7834] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 441.821871][ T7834] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 442.828923][ T7853] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 442.846959][ T7853] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 442.916783][ T7859] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 443.004101][ T7859] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 443.171344][ T7860] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 443.188671][ T7860] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 443.249723][ T7862] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 443.257452][ T7862] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 443.313208][ T7865] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 443.322993][ T7865] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 443.340944][ T7866] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 443.358508][ T7866] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 443.980978][ T7886] validate_nla: 2 callbacks suppressed [ 443.981025][ T7886] netlink: 'syz.2.701': attribute type 4 has an invalid length. [ 444.517129][ T7899] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 444.537677][ T7899] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 444.578835][ T7902] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 444.586740][ T7902] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 444.879867][ T7907] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 444.886977][ T7907] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 444.941800][ T7912] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 444.955277][ T7912] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 445.243779][ T7919] netlink: 'syz.4.712': attribute type 4 has an invalid length. [ 445.518013][ T7914] netlink: 188 bytes leftover after parsing attributes in process `syz.2.710'. [ 445.556351][ T7914] netlink: 'syz.2.710': attribute type 39 has an invalid length. [ 445.711367][ T7936] netlink: 'syz.3.716': attribute type 4 has an invalid length. [ 446.016696][ T7944] netlink: 'syz.2.719': attribute type 4 has an invalid length. [ 446.311992][ T7953] netlink: 'syz.2.721': attribute type 4 has an invalid length. [ 446.566797][ T7962] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 446.604628][ T7962] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 446.655711][ T7963] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 446.696831][ T7963] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 446.727979][ T7969] netlink: 'syz.0.725': attribute type 4 has an invalid length. [ 446.974410][ T7973] netlink: 'syz.3.728': attribute type 4 has an invalid length. [ 447.215946][ T7979] netlink: 'syz.2.730': attribute type 4 has an invalid length. [ 447.395152][ T7976] netlink: 188 bytes leftover after parsing attributes in process `syz.0.729'. [ 447.515905][ T7978] netlink: 'syz.0.729': attribute type 39 has an invalid length. [ 447.973773][ T8001] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.735'. [ 448.023462][ T7996] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.737'. [ 448.489383][ T8000] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 448.499076][ T8000] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 448.573038][ T8006] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 448.589400][ T8006] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 449.660303][ T8034] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.749'. [ 449.939656][ T8042] validate_nla: 3 callbacks suppressed [ 449.939744][ T8042] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 449.982405][ T8040] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.750'. [ 450.197621][ T8051] netlink: 'syz.2.752': attribute type 4 has an invalid length. [ 450.235297][ T8031] netlink: 188 bytes leftover after parsing attributes in process `syz.4.747'. [ 450.249168][ T8031] netlink: 'syz.4.747': attribute type 39 has an invalid length. [ 450.336775][ T8053] netlink: 'syz.0.753': attribute type 4 has an invalid length. [ 450.518839][ T8060] FAULT_INJECTION: forcing a failure. [ 450.518839][ T8060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.539913][ T8060] CPU: 0 PID: 8060 Comm: syz.3.756 Not tainted syzkaller #0 [ 450.547252][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.558381][ T8060] Call Trace: [ 450.561701][ T8060] [ 450.564666][ T8060] dump_stack_lvl+0x16c/0x230 [ 450.569410][ T8060] ? show_regs_print_info+0x20/0x20 [ 450.574659][ T8060] ? load_image+0x3b0/0x3b0 [ 450.579208][ T8060] ? __lock_acquire+0x7c80/0x7c80 [ 450.584279][ T8060] ? snprintf+0xdb/0x120 [ 450.588661][ T8060] should_fail_ex+0x39d/0x4d0 [ 450.593391][ T8060] _copy_to_user+0x2f/0xa0 [ 450.597853][ T8060] simple_read_from_buffer+0xe7/0x150 [ 450.603288][ T8060] proc_fail_nth_read+0x1e3/0x250 [ 450.608366][ T8060] ? proc_fault_inject_write+0x340/0x340 [ 450.614066][ T8060] ? fsnotify_perm+0x271/0x5e0 [ 450.618888][ T8060] ? proc_fault_inject_write+0x340/0x340 [ 450.624579][ T8060] vfs_read+0x27e/0x920 [ 450.628796][ T8060] ? kernel_read+0x1e0/0x1e0 [ 450.633444][ T8060] ? __fget_files+0x28/0x4d0 [ 450.638085][ T8060] ? __fget_files+0x44a/0x4d0 [ 450.642802][ T8060] ? __fdget_pos+0x2a3/0x330 [ 450.647414][ T8060] ? ksys_read+0x75/0x250 [ 450.651770][ T8060] ksys_read+0x147/0x250 [ 450.656041][ T8060] ? vfs_write+0x940/0x940 [ 450.660482][ T8060] ? lockdep_hardirqs_on+0x98/0x150 [ 450.665709][ T8060] do_syscall_64+0x55/0xb0 [ 450.670162][ T8060] ? clear_bhb_loop+0x40/0x90 [ 450.674856][ T8060] ? clear_bhb_loop+0x40/0x90 [ 450.679552][ T8060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.685481][ T8060] RIP: 0033:0x7fdc4f38e0dc [ 450.689908][ T8060] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.709540][ T8060] RSP: 002b:00007fdc50286030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.717978][ T8060] RAX: ffffffffffffffda RBX: 00007fdc4f5e5fa0 RCX: 00007fdc4f38e0dc [ 450.725964][ T8060] RDX: 000000000000000f RSI: 00007fdc502860a0 RDI: 0000000000000006 [ 450.733953][ T8060] RBP: 00007fdc50286090 R08: 0000000000000000 R09: 0000000000000000 [ 450.741950][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.749948][ T8060] R13: 00007fdc4f5e6038 R14: 00007fdc4f5e5fa0 R15: 00007ffe513523f8 [ 450.757956][ T8060] [ 451.383445][ T8076] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.764'. [ 451.677036][ T8083] netlink: 'syz.4.766': attribute type 4 has an invalid length. [ 451.715138][ T8086] netlink: 'syz.2.767': attribute type 4 has an invalid length. [ 452.003642][ T8090] netlink: 'syz.0.776': attribute type 4 has an invalid length. [ 452.219551][ T8099] FAULT_INJECTION: forcing a failure. [ 452.219551][ T8099] name failslab, interval 1, probability 0, space 0, times 0 [ 452.248085][ T8099] CPU: 1 PID: 8099 Comm: syz.2.771 Not tainted syzkaller #0 [ 452.255452][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.265628][ T8099] Call Trace: [ 452.269025][ T8099] [ 452.271997][ T8099] dump_stack_lvl+0x16c/0x230 [ 452.276720][ T8099] ? show_regs_print_info+0x20/0x20 [ 452.281933][ T8099] ? load_image+0x3b0/0x3b0 [ 452.286458][ T8099] ? verify_lock_unused+0x140/0x140 [ 452.291675][ T8099] should_fail_ex+0x39d/0x4d0 [ 452.296379][ T8099] should_failslab+0x9/0x20 [ 452.300900][ T8099] slab_pre_alloc_hook+0x59/0x310 [ 452.305968][ T8099] kmem_cache_alloc+0x5a/0x2e0 [ 452.310767][ T8099] ? skb_clone+0x1eb/0x370 [ 452.315208][ T8099] skb_clone+0x1eb/0x370 [ 452.319474][ T8099] __netlink_deliver_tap+0x41c/0x830 [ 452.324798][ T8099] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.330018][ T8099] netlink_deliver_tap+0x19c/0x1b0 [ 452.335149][ T8099] netlink_unicast+0x72c/0x8d0 [ 452.339941][ T8099] netlink_sendmsg+0x8c1/0xbe0 [ 452.344731][ T8099] ? netlink_getsockopt+0x580/0x580 [ 452.349971][ T8099] ? aa_sock_msg_perm+0x94/0x150 [ 452.354925][ T8099] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 452.360219][ T8099] ? security_socket_sendmsg+0x80/0xa0 [ 452.365703][ T8099] ? netlink_getsockopt+0x580/0x580 [ 452.370921][ T8099] ____sys_sendmsg+0x5bf/0x950 [ 452.375716][ T8099] ? __asan_memset+0x22/0x40 [ 452.380321][ T8099] ? __sys_sendmsg_sock+0x30/0x30 [ 452.385364][ T8099] ? __import_iovec+0x5f2/0x860 [ 452.390232][ T8099] ? import_iovec+0x73/0xa0 [ 452.394747][ T8099] ___sys_sendmsg+0x220/0x290 [ 452.399532][ T8099] ? __sys_sendmsg+0x270/0x270 [ 452.404427][ T8099] ? __lock_acquire+0x7c80/0x7c80 [ 452.409491][ T8099] __se_sys_sendmsg+0x1a5/0x270 [ 452.414386][ T8099] ? __x64_sys_sendmsg+0x80/0x80 [ 452.419357][ T8099] ? lockdep_hardirqs_on+0x98/0x150 [ 452.424566][ T8099] do_syscall_64+0x55/0xb0 [ 452.428995][ T8099] ? clear_bhb_loop+0x40/0x90 [ 452.433688][ T8099] ? clear_bhb_loop+0x40/0x90 [ 452.438379][ T8099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.444296][ T8099] RIP: 0033:0x7f52d4f8f6c9 [ 452.448726][ T8099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.468360][ T8099] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.476895][ T8099] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 452.484899][ T8099] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 452.492895][ T8099] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 452.500874][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.508854][ T8099] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 452.516857][ T8099] [ 452.555453][ T8099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.771'. [ 452.603449][ T8104] netlink: 'syz.0.773': attribute type 4 has an invalid length. [ 453.126839][ T8116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.778'. [ 453.841445][ T8131] netlink: 'syz.0.780': attribute type 4 has an invalid length. [ 453.902211][ T8129] netlink: 'syz.2.782': attribute type 4 has an invalid length. [ 454.564343][ T8146] FAULT_INJECTION: forcing a failure. [ 454.564343][ T8146] name failslab, interval 1, probability 0, space 0, times 0 [ 454.604726][ T8146] CPU: 0 PID: 8146 Comm: syz.0.788 Not tainted syzkaller #0 [ 454.612077][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 454.622178][ T8146] Call Trace: [ 454.625499][ T8146] [ 454.628540][ T8146] dump_stack_lvl+0x16c/0x230 [ 454.633245][ T8146] ? show_regs_print_info+0x20/0x20 [ 454.638460][ T8146] ? load_image+0x3b0/0x3b0 [ 454.642987][ T8146] ? __might_sleep+0xe0/0xe0 [ 454.647592][ T8146] ? __lock_acquire+0x7c80/0x7c80 [ 454.652644][ T8146] should_fail_ex+0x39d/0x4d0 [ 454.657950][ T8146] should_failslab+0x9/0x20 [ 454.662472][ T8146] slab_pre_alloc_hook+0x59/0x310 [ 454.667513][ T8146] ? percpu_ref_put+0x12/0x100 [ 454.672342][ T8146] ? apparmor_sk_alloc_security+0x77/0x100 [ 454.678187][ T8146] __kmem_cache_alloc_node+0x53/0x260 [ 454.683603][ T8146] ? apparmor_sk_alloc_security+0x77/0x100 [ 454.689431][ T8146] kmalloc_trace+0x2a/0xe0 [ 454.693885][ T8146] apparmor_sk_alloc_security+0x77/0x100 [ 454.699545][ T8146] security_sk_alloc+0x6e/0xa0 [ 454.704334][ T8146] sk_prot_alloc+0x101/0x210 [ 454.708949][ T8146] sk_alloc+0x3a/0x360 [ 454.713063][ T8146] inet_create+0x7a0/0xfe0 [ 454.717515][ T8146] ? inet_create+0x9c/0xfe0 [ 454.722044][ T8146] __sock_create+0x4a6/0x940 [ 454.726677][ T8146] mptcp_subflow_create_socket+0xf7/0xa60 [ 454.732522][ T8146] ? __mptcp_subflow_connect+0x1370/0x1370 [ 454.738884][ T8146] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.745068][ T8146] __mptcp_nmpc_sk+0x151/0x730 [ 454.749853][ T8146] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.756029][ T8146] ? __bpf_trace_subflow_check_data_avail+0x150/0x150 [ 454.762823][ T8146] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 454.768135][ T8146] mptcp_sendmsg+0x14a3/0x16b0 [ 454.772928][ T8146] ? verify_lock_unused+0x140/0x140 [ 454.778154][ T8146] ? aa_sk_perm+0x7fc/0x930 [ 454.782685][ T8146] ? perf_trace_preemptirq_template+0x281/0x340 [ 454.788949][ T8146] ? aa_af_perm+0x2b0/0x2b0 [ 454.793468][ T8146] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 454.799908][ T8146] ? mptcp_shutdown+0x80/0x80 [ 454.804615][ T8146] ? sock_rps_record_flow+0x19/0x400 [ 454.809912][ T8146] ? inet_send_prepare+0x260/0x260 [ 454.815117][ T8146] ? inet_sendmsg+0xe9/0x2f0 [ 454.819732][ T8146] ? inet_send_prepare+0x260/0x260 [ 454.824852][ T8146] ____sys_sendmsg+0x5bf/0x950 [ 454.829635][ T8146] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.835832][ T8146] ? __asan_memset+0x22/0x40 [ 454.840442][ T8146] ? __sys_sendmsg_sock+0x30/0x30 [ 454.845485][ T8146] ? __import_iovec+0x3fa/0x860 [ 454.850374][ T8146] ? import_iovec+0x73/0xa0 [ 454.854891][ T8146] ___sys_sendmsg+0x220/0x290 [ 454.859593][ T8146] ? __sys_sendmsg+0x270/0x270 [ 454.864427][ T8146] __se_sys_sendmsg+0x1a5/0x270 [ 454.869391][ T8146] ? __x64_sys_sendmsg+0x80/0x80 [ 454.874374][ T8146] ? syscall_enter_from_user_mode+0x2e/0x80 [ 454.880276][ T8146] do_syscall_64+0x55/0xb0 [ 454.884704][ T8146] ? clear_bhb_loop+0x40/0x90 [ 454.889397][ T8146] ? clear_bhb_loop+0x40/0x90 [ 454.894117][ T8146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.900021][ T8146] RIP: 0033:0x7f448778f6c9 [ 454.904442][ T8146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.924149][ T8146] RSP: 002b:00007f44885a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.932575][ T8146] RAX: ffffffffffffffda RBX: 00007f44879e5fa0 RCX: 00007f448778f6c9 [ 454.940556][ T8146] RDX: 000000003000c041 RSI: 00002000000000c0 RDI: 0000000000000005 [ 454.948539][ T8146] RBP: 00007f44885a9090 R08: 0000000000000000 R09: 0000000000000000 [ 454.956521][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.964504][ T8146] R13: 00007f44879e6038 R14: 00007f44879e5fa0 R15: 00007ffd9bcc83e8 [ 454.972508][ T8146] [ 455.337412][ T8158] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.792'. [ 455.490859][ T8162] validate_nla: 1 callbacks suppressed [ 455.490914][ T8162] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 455.952769][ T8168] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 455.969411][ T8168] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 456.006878][ T8174] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 456.027113][ T8174] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 456.040913][ T8171] netlink: 'syz.0.798': attribute type 4 has an invalid length. [ 456.063972][ T8173] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 456.263585][ T8176] netlink: 'syz.4.800': attribute type 21 has an invalid length. [ 456.271854][ T8176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.800'. [ 456.281779][ T8176] netlink: 'syz.4.800': attribute type 1 has an invalid length. [ 456.295555][ T8176] netlink: 'syz.4.800': attribute type 21 has an invalid length. [ 456.316154][ T8179] FAULT_INJECTION: forcing a failure. [ 456.316154][ T8179] name failslab, interval 1, probability 0, space 0, times 0 [ 456.331030][ T8183] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.803'. [ 456.331139][ T8179] CPU: 0 PID: 8179 Comm: syz.2.801 Not tainted syzkaller #0 [ 456.347480][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.357660][ T8179] Call Trace: [ 456.360973][ T8179] [ 456.363933][ T8179] dump_stack_lvl+0x16c/0x230 [ 456.368660][ T8179] ? show_regs_print_info+0x20/0x20 [ 456.373908][ T8179] ? load_image+0x3b0/0x3b0 [ 456.378455][ T8179] ? __might_sleep+0xe0/0xe0 [ 456.383106][ T8179] ? __lock_acquire+0x7c80/0x7c80 [ 456.388185][ T8179] should_fail_ex+0x39d/0x4d0 [ 456.392928][ T8179] should_failslab+0x9/0x20 [ 456.397483][ T8179] slab_pre_alloc_hook+0x59/0x310 [ 456.402577][ T8179] ? kvmalloc_node+0x70/0x180 [ 456.407306][ T8179] ? kvmalloc_node+0x70/0x180 [ 456.412025][ T8179] __kmem_cache_alloc_node+0x53/0x260 [ 456.417462][ T8179] ? kvmalloc_node+0x70/0x180 [ 456.422186][ T8179] __kmalloc_node+0xa4/0x230 [ 456.426829][ T8179] kvmalloc_node+0x70/0x180 [ 456.431478][ T8179] alloc_netdev_mqs+0x87/0x1040 [ 456.436478][ T8179] ? IP6_ECN_decapsulate+0x1790/0x1790 [ 456.442017][ T8179] ip6_tnl_locate+0x656/0x800 [ 456.446758][ T8179] ? ip6_tnl_parm_from_user+0x340/0x340 [ 456.452351][ T8179] ? __might_fault+0xaa/0x120 [ 456.457141][ T8179] ? __might_fault+0xc6/0x120 [ 456.461854][ T8179] ? __might_fault+0xaa/0x120 [ 456.466574][ T8179] ? ip6_tnl_siocdevprivate+0x605/0xac0 [ 456.472170][ T8179] ip6_tnl_siocdevprivate+0x629/0xac0 [ 456.477596][ T8179] ? __mutex_lock+0x953/0xcc0 [ 456.482306][ T8179] ? ip6_tnl_start_xmit+0x1140/0x1140 [ 456.487709][ T8179] ? do_raw_spin_unlock+0x121/0x230 [ 456.493027][ T8179] ? __mutex_lock+0x4e8/0xcc0 [ 456.497731][ T8179] ? full_name_hash+0x92/0xe0 [ 456.502432][ T8179] dev_ifsioc+0xae6/0xe20 [ 456.506780][ T8179] ? dev_ioctl+0x1170/0x1170 [ 456.511387][ T8179] ? dev_load+0x21/0x1f0 [ 456.515636][ T8179] ? dev_load+0x21/0x1f0 [ 456.519979][ T8179] dev_ioctl+0x87a/0x1170 [ 456.524333][ T8179] sock_ioctl+0x726/0x7a0 [ 456.528684][ T8179] ? sock_poll+0x3d0/0x3d0 [ 456.533144][ T8179] ? bpf_lsm_file_ioctl+0x9/0x10 [ 456.538092][ T8179] ? security_file_ioctl+0x80/0xa0 [ 456.543239][ T8179] ? sock_poll+0x3d0/0x3d0 [ 456.547670][ T8179] __se_sys_ioctl+0xfd/0x170 [ 456.552281][ T8179] do_syscall_64+0x55/0xb0 [ 456.556721][ T8179] ? clear_bhb_loop+0x40/0x90 [ 456.561429][ T8179] ? clear_bhb_loop+0x40/0x90 [ 456.566115][ T8179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.572023][ T8179] RIP: 0033:0x7f52d4f8f6c9 [ 456.576466][ T8179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.596101][ T8179] RSP: 002b:00007f52d5ec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.604536][ T8179] RAX: ffffffffffffffda RBX: 00007f52d51e5fa0 RCX: 00007f52d4f8f6c9 [ 456.612531][ T8179] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 456.620513][ T8179] RBP: 00007f52d5ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 456.628516][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.636513][ T8179] R13: 00007f52d51e6038 R14: 00007f52d51e5fa0 R15: 00007fffb28b4518 [ 456.644525][ T8179] [ 456.919594][ T8192] netlink: 'syz.2.805': attribute type 4 has an invalid length. [ 457.351859][ T8204] netlink: 'syz.3.809': attribute type 4 has an invalid length. [ 457.805218][ T8203] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 457.824675][ T8203] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 457.888338][ T8205] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 457.939657][ T8205] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 458.005505][ T8208] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.812'. [ 458.460146][ T8210] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 458.467876][ T8210] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 458.562887][ T8214] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 458.575091][ T8214] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 458.637962][ T8220] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 458.879234][ T8226] netlink: 'syz.4.820': attribute type 4 has an invalid length. [ 459.155830][ T8233] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 459.172444][ T8233] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 459.208468][ T8234] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 459.215589][ T8234] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 460.243035][ T8267] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 460.262989][ T8267] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 460.328542][ T8272] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 460.338046][ T8272] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 460.576244][ T8282] FAULT_INJECTION: forcing a failure. [ 460.576244][ T8282] name failslab, interval 1, probability 0, space 0, times 0 [ 460.614323][ T8282] CPU: 1 PID: 8282 Comm: syz.4.838 Not tainted syzkaller #0 [ 460.621758][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.628455][ T8284] validate_nla: 4 callbacks suppressed [ 460.628528][ T8284] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 460.631830][ T8282] Call Trace: [ 460.631860][ T8282] [ 460.631870][ T8282] dump_stack_lvl+0x16c/0x230 [ 460.631905][ T8282] ? show_regs_print_info+0x20/0x20 [ 460.661431][ T8282] ? load_image+0x3b0/0x3b0 [ 460.666074][ T8282] ? __might_sleep+0xe0/0xe0 [ 460.670695][ T8282] ? __lock_acquire+0x7c80/0x7c80 [ 460.675762][ T8282] should_fail_ex+0x39d/0x4d0 [ 460.680487][ T8282] should_failslab+0x9/0x20 [ 460.685032][ T8282] slab_pre_alloc_hook+0x59/0x310 [ 460.690106][ T8282] ? tomoyo_encode+0x28b/0x540 [ 460.694927][ T8282] ? tomoyo_encode+0x28b/0x540 [ 460.700002][ T8282] __kmem_cache_alloc_node+0x53/0x260 [ 460.705442][ T8282] ? tomoyo_encode+0x28b/0x540 [ 460.710262][ T8282] __kmalloc+0xa4/0x240 [ 460.714467][ T8282] tomoyo_encode+0x28b/0x540 [ 460.719118][ T8282] tomoyo_realpath_from_path+0x592/0x5d0 [ 460.724838][ T8282] tomoyo_path_number_perm+0x1ea/0x590 [ 460.730347][ T8282] ? tomoyo_path_number_perm+0x1ba/0x590 [ 460.736029][ T8282] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 460.741631][ T8282] ? ksys_write+0x1c1/0x250 [ 460.746220][ T8282] ? __fget_files+0x28/0x4d0 [ 460.750871][ T8282] security_file_ioctl+0x70/0xa0 [ 460.755894][ T8282] __se_sys_ioctl+0x48/0x170 [ 460.760539][ T8282] do_syscall_64+0x55/0xb0 [ 460.764991][ T8282] ? clear_bhb_loop+0x40/0x90 [ 460.769707][ T8282] ? clear_bhb_loop+0x40/0x90 [ 460.774439][ T8282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.780383][ T8282] RIP: 0033:0x7f965478f6c9 [ 460.784831][ T8282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.804463][ T8282] RSP: 002b:00007f965571c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.812893][ T8282] RAX: ffffffffffffffda RBX: 00007f96549e5fa0 RCX: 00007f965478f6c9 [ 460.820888][ T8282] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 460.828886][ T8282] RBP: 00007f965571c090 R08: 0000000000000000 R09: 0000000000000000 [ 460.836877][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.844859][ T8282] R13: 00007f96549e6038 R14: 00007f96549e5fa0 R15: 00007ffe8907cee8 [ 460.852872][ T8282] [ 460.864556][ T8282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.000898][ T8288] netlink: 'syz.2.843': attribute type 4 has an invalid length. [ 461.424943][ T8302] netlink: 'syz.3.850': attribute type 4 has an invalid length. [ 461.522733][ T8304] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 461.530821][ T8304] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 461.593687][ T8304] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 461.606266][ T8304] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 461.895284][ T8307] netlink: 'syz.0.852': attribute type 4 has an invalid length. [ 461.909795][ T8309] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.854'. [ 462.116675][ T8312] netlink: 'syz.2.860': attribute type 3 has an invalid length. [ 462.138487][ T8312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.860'. [ 462.167748][ T8317] netlink: 'syz.0.856': attribute type 4 has an invalid length. [ 462.226849][ T8319] netlink: 'syz.3.855': attribute type 4 has an invalid length. [ 462.334469][ T8321] netlink: 'syz.0.866': attribute type 4 has an invalid length. [ 462.613934][ T8330] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.861'. [ 462.738722][ T8332] netlink: 'syz.0.862': attribute type 4 has an invalid length. [ 462.979286][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 462.985410][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 462.991600][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 462.991725][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 463.190518][ T8340] netlink: 'syz.3.867': attribute type 3 has an invalid length. [ 463.199534][ T8340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.867'. [ 463.216561][ T8343] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.865'.