last executing test programs: 3.161837774s ago: executing program 3 (id=2124): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx={0x18, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x1a, &(0x7f0000000380)=""/26, 0x41000, 0x2, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x1, 0xe61c, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x5, 0x4, 0xb, 0xa}, {0x3, 0x1, 0xc, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.125357105s ago: executing program 0 (id=2125): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000007c0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000e0000769b0c0000000000007900"/31], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c0000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040914001f0003000e0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c4c53acd5076b876c1d0000007ea60864160af36514000cc008002c00e7ff0200060019c00364bc24", 0x96}, {&(0x7f0000000080)="565077dba869c345854bd354694fae736f8692ee8e892845ad6dfa5bac688eb5797116d23bf6f6d0", 0x28}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40800) close(r0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB=','], 0x9a) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000be4a3a0004000000000000000000000000f00a000000000000a6e5b71298c5057473", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3", 0x38}], 0x1}, 0x48000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.00536307s ago: executing program 1 (id=2126): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891c, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) socket$kcm(0x10, 0x3, 0x10) 2.814796188s ago: executing program 2 (id=2128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x200000000000000) 2.744178241s ago: executing program 0 (id=2129): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x20040040) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x10002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r5, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000300)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000580)="a021e81c6af642d3d061d763557ecec20c0c4e8a91a43cbc4ed89f01366dc19364f3c3115065068a81d88756c9dc0061fef42549e7163ff5412fbf3f53862e9e0193e8bf54458f84a9a610a316b5c99dfd72681a6a0e720620b40de03a75e385a0953bbbbc7dac3d384be212faa0257ea3c40ca4e43d9921d80db7230dbf6a6216a93bff2a76f6ccbb7705c8a745f939ff25d2167c2b1fb42ba8a3d565a2577430714db805e83ec767e9bb57cc8125c1cd42", 0xb2}, {&(0x7f0000000440)="56fd492dd86b96f44ada93b60dc37c6f9534cf0123659d0b97f2e68c51f754220d6f60386d06a73d9b5425547b1efb35f24f14d47331e05b9d14a9e8b0", 0x3d}, {&(0x7f0000000640)="36f1db2c8349472f74fe", 0xa}, {&(0x7f0000000680)="7c9079b4f8eb9dda593a4204839439071d4326e23a20dbc5cb8a2566bfb8c51bbbd9ea3190211a592f3b6d604458d8d67cfcfa8b5353c6bc286a2c7cb336ea4515fa6a355f36d584a25f7f2386fa3aee2a4d9713a62d", 0x56}, {&(0x7f0000000700)="dd19281495e97c4413898f", 0xb}], 0x5, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x50}, 0x50) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRES64=r9, @ANYRES16=r5, @ANYRESOCT=r2, @ANYRESDEC=r3], 0xa) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2.682282624s ago: executing program 3 (id=2130): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x100000, 0x8, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x104042, 0xc8, 0x0, 0x5, 0xff, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x2000000004, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000006c0), 0x0, 0xf4, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x7400}, 0x4804) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000001010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 2.669642435s ago: executing program 1 (id=2131): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = syz_clone(0x40000, &(0x7f0000001880)="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", 0x1000, &(0x7f0000000140), 0x0, &(0x7f0000000200)="70baf9e7c957c3c7f1b89d38d3c2822e72ac1489e9295337abad162d66ffb2efbe7286d271040af66fb4e4244185d834a3ef5fcce621f327cc005aefb242bc1268a03f7ca5e332c8e75a6bc16158130779b6ff5e3794623617ce28be56a6e478a64d37ea3b13cad1348b3119a27ecebea79cc5b05f150072b08b00a4") r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x95, 0x54, 0x4, 0x0, 0x9219, 0x4000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x9, 0x8000000000000000}, 0x3281, 0x7, 0x9, 0x5, 0x5, 0x4, 0x1, 0x0, 0x3, 0x0, 0x89b8}, r0, 0xa, r1, 0x2) r4 = perf_event_open(&(0x7f00000002c0)={0xb62e657e8b34f33b, 0x80, 0x2, 0x4, 0x5, 0xfa, 0x0, 0x8, 0x80, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf8ba, 0x4, @perf_config_ext={0x800, 0x10000}, 0x0, 0x7, 0xffffffff, 0x0, 0xdcb, 0x2401e5ba, 0x9, 0x0, 0x7, 0x0, 0x8001}, r0, 0x5, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x24, 0x0, 0x53) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff176, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x1800000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 2.642117916s ago: executing program 2 (id=2132): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0xfffffffd, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8b}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000bdc8c000000", 0xc}, {&(0x7f0000000180)}], 0x2}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.463496974s ago: executing program 0 (id=2133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="2200000019"], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x0, 0x8a, 0xa3, &(0x7f0000000c40)="eaa45e8f86c798716ef1adaaf890bf5a42020c2f62f8a6b29251bbfcdde3c9316b4daacdc847ad48f7e2ba3846728c590d35e598ad65ad66ac5ca11131cda3e61e798dffa6e12bcbd0f4977a2a56ed828682917bf98f777c63b77bb8da33e87d20ed2fad8bec11e4196b1f84d4da38b8af1d6a23a43e7f5ab26b0412fc0d72bcdca2bb12a453f86c1e63", &(0x7f0000000600)=""/163, 0x5, 0x0, 0x0, 0xad, &(0x7f00000006c0), &(0x7f0000000940)="5738b289b297537dcd086650849828ab39943d5a9cbddc2d083ac85b881751dc98329adae74413a6e4de248a9ad46333ca70b1b1a4de64e41d68c7ab468a65f178f93d15e0463a546ffdc310940d632d3f83ac83788636f21f3675ebdbb42e84ada7373956547d574ef53096759c30a0e4c37fe28380671eac26112821da7d27d07acaf04df52322f63c33736a86e2af7626ece89fd73e0600000000000000a01287a0833f1ea47b088230cea3", 0x3, 0x0, 0x7f}, 0x50) recvmsg(r2, 0x0, 0x40002002) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x182) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x7, 0x0, 0x0, 0x5d35, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7f}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x25, 0x2b, &(0x7f0000000d00)=ANY=[@ANYBLOB="18460000f8ffffff0000000000000000183900000500000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008520000005000000ba2d04000300000018320000030000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRES8=r4, @ANYRES8=r5, @ANYBLOB="0000000000000000b7020800000000008500000086000000183800000200000000000000000000001801000020756c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x9a, &(0x7f00000002c0)=""/154, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x12, 0x6, 0x4}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000840)=[r3, r3, r3, r3, r3, r3], &(0x7f0000000880)=[{0x2, 0x4, 0xa, 0x8}, {0x2, 0x5, 0xc, 0xa}, {0x3, 0xffffffff, 0x4, 0xc}, {0x0, 0x2, 0x5, 0x8}], 0x10, 0xfffffff8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffff71, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000, 0x1}, 0x0, 0x1000000000000000, 0x0, 0x0, 0x8000000000f60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x11, 0x3, 0x0) 1.84465887s ago: executing program 1 (id=2134): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0xfc, 0x3, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10412, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x6, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="380000000d00000000000000f7ffffff18110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$TUNGETVNETLE(r3, 0x40047451, 0x0) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000002c0)) 1.820820071s ago: executing program 3 (id=2135): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x28, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='{[\\]+\x00') socketpair(0x3f, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x8018, 0x0, 0x3, 0x2, 0x4, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) 1.706351666s ago: executing program 2 (id=2136): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x2d, 0x0, &(0x7f0000000040)="25715afa3a7216594f1b12ada77d", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.675668067s ago: executing program 3 (id=2137): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000007c0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000e0000769b0c0000000000007900"/31], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c0000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040914001f0003000e0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c4c53acd5076b876c1d0000007ea60864160af36514000cc008002c00e7ff0200060019c00364bc24", 0x96}, {&(0x7f0000000080)="565077dba869c345854bd354694fae736f8692ee8e892845ad6dfa5bac688eb5797116d23bf6f6d0", 0x28}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40800) close(r0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB=','], 0x9a) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000be4a3a0004000000000000000000000000f00a000000000000a6e5b71298c5057473", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3", 0x38}], 0x1}, 0x48000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.574262612s ago: executing program 2 (id=2138): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx={0x18, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x1a, &(0x7f0000000380)=""/26, 0x41000, 0x2, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x1, 0xe61c, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x5, 0x4, 0xb, 0xa}, {0x3, 0x1, 0xc, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.571633142s ago: executing program 1 (id=2139): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891c, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) socket$kcm(0x10, 0x3, 0x10) 1.447630957s ago: executing program 0 (id=2140): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc3de33c1f796811, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) (fail_nth: 22) 1.407567079s ago: executing program 3 (id=2141): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000018000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000800)={&(0x7f0000000340), 0x6e, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/56, 0x38}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/73, 0x49}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x2) 1.048401645s ago: executing program 1 (id=2142): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = syz_clone(0x40000, &(0x7f0000001880)="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", 0x1000, &(0x7f0000000140), 0x0, &(0x7f0000000200)="70baf9e7c957c3c7f1b89d38d3c2822e72ac1489e9295337abad162d66ffb2efbe7286d271040af66fb4e4244185d834a3ef5fcce621f327cc005aefb242bc1268a03f7ca5e332c8e75a6bc16158130779b6ff5e3794623617ce28be56a6e478a64d37ea3b13cad1348b3119a27ecebea79cc5b05f150072b08b00a4") r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x95, 0x54, 0x4, 0x0, 0x9219, 0x4000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x9, 0x8000000000000000}, 0x3281, 0x7, 0x9, 0x5, 0x5, 0x4, 0x1, 0x0, 0x3, 0x0, 0x89b8}, r0, 0xa, r1, 0x2) r4 = perf_event_open(&(0x7f00000002c0)={0xb62e657e8b34f33b, 0x80, 0x2, 0x4, 0x5, 0xfa, 0x0, 0x8, 0x80, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf8ba, 0x4, @perf_config_ext={0x800, 0x10000}, 0x0, 0x7, 0xffffffff, 0x0, 0xdcb, 0x2401e5ba, 0x9, 0x0, 0x7, 0x0, 0x8001}, r0, 0x5, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x24, 0x0, 0x53) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff176, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x1800000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 994.327947ms ago: executing program 0 (id=2143): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000000c0)="f5077c0f07914ed10ab01ca0e14f017006b6117804140e2a016ce7490e0f0ee3d942bd427b6b1a2462a0fad9ba86586b91d0051995c457e00f3e88dcff70f3c86191f51b3e5384acf6500349e2f48600efd98435f6ffc80f22ba0dcfc2aeb0da32828c881b2a6761c82747ec3a2ed300ae83ad43b9e7ab39a16dc26a96b92349e2151706061a723f36b5ab7052408824db3c898b37415fa619926fb2c4573a231f7a86f18f3db494867a0feadc204acb246d0db69f020d4421672d2d5add830958356a6cce35a340427feb86b45c5954", &(0x7f00000001c0)=""/176}, 0x20) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x32, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000002000000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400009d32c8655200b7030000000000008500000083000000bf090024cf6c5a00550901000000000095000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ba0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000788a0001fcffffffb7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183700000400000000000000000000004582fcff0000000005e401000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x8ce, 0xf6, &(0x7f0000000380)=""/246, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0xd694cb74, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, r0, r0, r0, r0], &(0x7f0000000880), 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x25, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000feffffff00000000ffffffff852000000100000018110000", @ANYRES32=r0, @ANYBLOB="00232feb8043881ea0cda371f0230000040000000000000000f7ffff", @ANYRES32=r0, @ANYBLOB="000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008510000008000000b7080000000000007b8af8ff00000000b7080000f11900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001833000002000000000000000000000018450000fdffffff00000000000000009500000000000000"], &(0x7f0000000ac0)='syzkaller\x00', 0x800, 0xaf, &(0x7f0000000b00)=""/175, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x5, 0x9, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@map=r0, 0x13, 0x0, 0x9, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000002000103c3ab0791f54438c84e21754c6e1e3b093d5306a1a1cca259710dd75c87aff3315752d2a1fc2b342cc82b7d5aa87043ccd1e666187db0571d08a8becba447703a334f79eab7fd52ffc621a1e90f447a267c9c6a862a302dfb5e999b8518982438b0f0e9222378c6e17fe4482200b82d0f2644d1b950b2addfa941187d48cf43e10f059808e3b4d99c7e53bb7ef757f9aad27214715562875eddacbe1f86f3b8da4d65d53d7606a37ca60b1ea7bc4ab7224278ef8c0778df127fce0c2dc303e85fa07c568f7549c7a67cb415e55c5da1c1ac5e9f9d191cad1ebe48d7c", @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES64=r3], 0x20) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000e40)={r4, r2}) sendmsg$inet(r1, &(0x7f0000001100)={&(0x7f0000000e80)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000ec0)="5c55f24f12d0bda26908e3d6761acccd2709063fbaecc463c56c7b35a4952c31b12e165df5ddd74c81a2f0b82038d8271ca79e851708d005aecb6771531bf54056b550d75ccaf608fa0e622d3c97c1da64cf8f48c089677b2fb2e4bf", 0x5c}, {&(0x7f0000000f40)="b51c2e0f959282cd6594b0d63c6c36e4634e1fd5a80517376a286047b735c43099d027ac1ae1877be8b9063a2c64e8dd7a7b9355ec74447a50ed83577e405aa53fddf53d1bea50f372fd", 0x4a}, {&(0x7f0000000fc0)="dad731cdf6134e183f00b600cdcd648e47145c3ecad8f1c467717d88a2426e8e0faa5bbfda42eafd5ef9086ac8b7ef24d823595ba32ca754934fef3eeb074b4c44291331723ff4c12414d44e92bb95ff7e609d574788dec3426945f052646802bc8270a2bbdcb141042f1d9dcbc336169c4faaf24eea8984dfb2500404d92c10b286d56d662833a6009f9b5cd61f65cf07636fcbff0e98d6d6f653499da51f1041aba4290a30b8196afaca15a207a006824243314efdad88209132f93eeac079f3e4ff1b2bab6afdc0b44228aa5a99228170e59e", 0xd4}], 0x3}, 0x40408d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd8cbfb69ac27c28e}, 0x94) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x1c21, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001140)=ANY=[@ANYRES32, @ANYRES32=r11, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="4ff1dccb33386fd86fc2cfbe36b9f7ce503852ad91a2f7e017e7efb7d74b29c1a48be014c2cd2b075e38e25c0e0bdb31c3c69a6eb87b79698f020fc01bcb6bb96ac259a3f2e5e730bbe29da65b0e8b34a48c3d07007efd80cae9289c331e86de17204f106a3b553c6775e5f4f865ba1f640f2016b049420860db9801c4ca9b13b95b599701458839f288569f7e158cabbe12", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r9) r12 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r12, &(0x7f0000000280), 0x9) r13 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 979.316208ms ago: executing program 2 (id=2144): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x100000, 0x8, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x104042, 0xc8, 0x0, 0x5, 0xff, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x2000000004, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000006c0), 0x0, 0xf4, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x7400}, 0x4804) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000001010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 381.750584ms ago: executing program 3 (id=2145): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0xfffffffd, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000bdc8c000000", 0xc}, {&(0x7f0000000180)}], 0x2}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 310.104647ms ago: executing program 0 (id=2146): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x28, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='{[\\]+\x00') socketpair(0x3f, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x8018, 0x0, 0x3, 0x2, 0x4, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) 309.297897ms ago: executing program 1 (id=2147): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0xfc, 0x3, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10412, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x6, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="380000000d00000000000000f7ffffff18110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$TUNGETVNETLE(r3, 0x40047451, 0x0) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000002c0)) 0s ago: executing program 2 (id=2148): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="2200000019"], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x0, 0x8a, 0xa3, &(0x7f0000000c40)="eaa45e8f86c798716ef1adaaf890bf5a42020c2f62f8a6b29251bbfcdde3c9316b4daacdc847ad48f7e2ba3846728c590d35e598ad65ad66ac5ca11131cda3e61e798dffa6e12bcbd0f4977a2a56ed828682917bf98f777c63b77bb8da33e87d20ed2fad8bec11e4196b1f84d4da38b8af1d6a23a43e7f5ab26b0412fc0d72bcdca2bb12a453f86c1e63", &(0x7f0000000600)=""/163, 0x5, 0x0, 0x0, 0xad, &(0x7f00000006c0), &(0x7f0000000940)="5738b289b297537dcd086650849828ab39943d5a9cbddc2d083ac85b881751dc98329adae74413a6e4de248a9ad46333ca70b1b1a4de64e41d68c7ab468a65f178f93d15e0463a546ffdc310940d632d3f83ac83788636f21f3675ebdbb42e84ada7373956547d574ef53096759c30a0e4c37fe28380671eac26112821da7d27d07acaf04df52322f63c33736a86e2af7626ece89fd73e0600000000000000a01287a0833f1ea47b088230cea3", 0x3, 0x0, 0x7f}, 0x50) recvmsg(r2, 0x0, 0x40002002) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x182) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x7, 0x0, 0x0, 0x5d35, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7f}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x25, 0x2b, &(0x7f0000000d00)=ANY=[@ANYBLOB="18460000f8ffffff0000000000000000183900000500000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008520000005000000ba2d04000300000018320000030000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRES8=r4, @ANYRES8=r5, @ANYBLOB="0000000000000000b7020800000000008500000086000000183800000200000000000000000000001801000020756c2500000000002020207b1af8"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x9a, &(0x7f00000002c0)=""/154, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x12, 0x6, 0x4}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000840)=[r3, r3, r3, r3, r3, r3], &(0x7f0000000880)=[{0x2, 0x4, 0xa, 0x8}, {0x2, 0x5, 0xc, 0xa}, {0x3, 0xffffffff, 0x4, 0xc}, {0x0, 0x2, 0x5, 0x8}], 0x10, 0xfffffff8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffff71, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000, 0x1}, 0x0, 0x1000000000000000, 0x0, 0x0, 0x8000000000f60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x11, 0x3, 0x0) kernel console output (not intermixed with test programs): a8 ff ff ff f7 d8 64 89 01 48 [ 192.112482][ T8401] RSP: 002b:00007fc0de17d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.120993][ T8401] RAX: ffffffffffffffda RBX: 00007fc0dd5e5fa0 RCX: 00007fc0dd38f749 [ 192.130366][ T8401] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000022 [ 192.138347][ T8401] RBP: 00007fc0de17d090 R08: 0000000000000000 R09: 0000000000000000 [ 192.146313][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.154282][ T8401] R13: 00007fc0dd5e6038 R14: 00007fc0dd5e5fa0 R15: 00007ffebf3886e8 [ 192.162379][ T8401] [ 192.167101][ T8401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.029162][ T8432] __nla_validate_parse: 7 callbacks suppressed [ 193.029204][ T8432] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.901'. [ 193.343924][ T8444] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.905'. [ 193.982058][ T8450] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.906'. [ 194.377051][ T8453] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.908'. [ 194.524327][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537556][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.096337][ T8479] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.917'. [ 195.591479][ T8496] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.923'. [ 195.915739][ T8498] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.922'. [ 196.145237][ T8493] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.920'. [ 196.454691][ T8505] FAULT_INJECTION: forcing a failure. [ 196.454691][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 196.489023][ T8505] CPU: 0 PID: 8505 Comm: syz.2.926 Not tainted syzkaller #0 [ 196.496401][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.506930][ T8505] Call Trace: [ 196.510237][ T8505] [ 196.513176][ T8505] dump_stack_lvl+0x16c/0x230 [ 196.517888][ T8505] ? show_regs_print_info+0x20/0x20 [ 196.523197][ T8505] ? load_image+0x3b0/0x3b0 [ 196.528077][ T8505] ? __might_sleep+0xe0/0xe0 [ 196.532781][ T8505] ? __lock_acquire+0x7c80/0x7c80 [ 196.538063][ T8505] should_fail_ex+0x39d/0x4d0 [ 196.543337][ T8505] should_failslab+0x9/0x20 [ 196.549208][ T8505] slab_pre_alloc_hook+0x59/0x310 [ 196.554841][ T8505] ? kvmalloc_node+0x70/0x180 [ 196.560786][ T8505] ? kvmalloc_node+0x70/0x180 [ 196.566831][ T8505] __kmem_cache_alloc_node+0x53/0x260 [ 196.573233][ T8505] ? kvmalloc_node+0x70/0x180 [ 196.579572][ T8505] __kmalloc_node+0xa4/0x230 [ 196.584911][ T8505] kvmalloc_node+0x70/0x180 [ 196.589544][ T8505] bpf_test_run_xdp_live+0x180/0x1a20 [ 196.595245][ T8505] ? 0xffffffffa00044c0 [ 196.599539][ T8505] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 196.606002][ T8505] ? __sys_bpf+0x440/0x800 [ 196.610891][ T8505] ? __x64_sys_bpf+0x7c/0x90 [ 196.615507][ T8505] ? do_syscall_64+0x55/0xb0 [ 196.620141][ T8505] ? xdp_convert_md_to_buff+0x330/0x330 [ 196.625724][ T8505] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 196.631986][ T8505] ? _copy_from_user+0xa5/0xe0 [ 196.637211][ T8505] ? bpf_test_init+0x134/0x150 [ 196.642010][ T8505] ? xdp_convert_md_to_buff+0x5b/0x330 [ 196.647497][ T8505] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 196.652809][ T8505] ? dev_put+0x80/0x80 [ 196.656920][ T8505] ? dev_put+0x80/0x80 [ 196.661035][ T8505] bpf_prog_test_run+0x321/0x390 [ 196.666004][ T8505] __sys_bpf+0x440/0x800 [ 196.670284][ T8505] ? bpf_link_show_fdinfo+0x350/0x350 [ 196.675702][ T8505] ? lock_chain_count+0x20/0x20 [ 196.680601][ T8505] __x64_sys_bpf+0x7c/0x90 [ 196.685064][ T8505] do_syscall_64+0x55/0xb0 [ 196.689514][ T8505] ? clear_bhb_loop+0x40/0x90 [ 196.694211][ T8505] ? clear_bhb_loop+0x40/0x90 [ 196.698909][ T8505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.704836][ T8505] RIP: 0033:0x7fc0dd38f749 [ 196.709281][ T8505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.729258][ T8505] RSP: 002b:00007fc0de17d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.737688][ T8505] RAX: ffffffffffffffda RBX: 00007fc0dd5e5fa0 RCX: 00007fc0dd38f749 [ 196.745672][ T8505] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 196.756180][ T8505] RBP: 00007fc0de17d090 R08: 0000000000000000 R09: 0000000000000000 [ 196.764831][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.773099][ T8505] R13: 00007fc0dd5e6038 R14: 00007fc0dd5e5fa0 R15: 00007ffebf3886e8 [ 196.782068][ T8505] [ 196.805287][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 196.811603][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 197.165456][ T8523] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.933'. [ 198.447218][ T8544] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.940'. [ 199.055105][ T8563] sctp: [Deprecated]: syz.0.945 (pid 8563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.055105][ T8563] Use struct sctp_sack_info instead [ 199.236001][ T8569] netlink: 196 bytes leftover after parsing attributes in process `syz.1.947'. [ 199.265904][ T8571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.948'. [ 199.334152][ T8571] netlink: 'syz.0.948': attribute type 39 has an invalid length. [ 200.005421][ T8580] C: renamed from team_slave_0 (while UP) [ 200.025219][ T8580] netlink: 'syz.3.951': attribute type 3 has an invalid length. [ 200.038634][ T8580] netlink: 152 bytes leftover after parsing attributes in process `syz.3.951'. [ 200.047916][ T8580] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.101413][ T8586] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.952'. [ 200.311723][ T8588] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 200.319802][ T8588] netlink: 55 bytes leftover after parsing attributes in process `syz.1.954'. [ 201.889158][ T8616] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.963'. [ 202.953371][ T8628] FAULT_INJECTION: forcing a failure. [ 202.953371][ T8628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.966666][ T8628] CPU: 1 PID: 8628 Comm: syz.2.968 Not tainted syzkaller #0 [ 202.973979][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.984063][ T8628] Call Trace: [ 202.987776][ T8628] [ 202.990877][ T8628] dump_stack_lvl+0x16c/0x230 [ 202.995559][ T8628] ? show_regs_print_info+0x20/0x20 [ 203.000756][ T8628] ? load_image+0x3b0/0x3b0 [ 203.005256][ T8628] ? __might_fault+0xaa/0x120 [ 203.009922][ T8628] ? __lock_acquire+0x7c80/0x7c80 [ 203.014940][ T8628] should_fail_ex+0x39d/0x4d0 [ 203.019703][ T8628] _copy_from_user+0x2f/0xe0 [ 203.024347][ T8628] mptcp_setsockopt+0x1f5f/0x3250 [ 203.029398][ T8628] ? aa_sk_perm+0x7fc/0x930 [ 203.033912][ T8628] ? pm_nl_exit_net+0x230/0x230 [ 203.038756][ T8628] ? aa_af_perm+0x2b0/0x2b0 [ 203.043269][ T8628] ? __fget_files+0x28/0x4d0 [ 203.047863][ T8628] ? aa_sock_opt_perm+0x74/0x100 [ 203.052793][ T8628] ? sock_common_setsockopt+0x36/0xc0 [ 203.058338][ T8628] ? sock_common_recvmsg+0x1b0/0x1b0 [ 203.063641][ T8628] do_sock_setsockopt+0x175/0x1a0 [ 203.068677][ T8628] __x64_sys_setsockopt+0x184/0x200 [ 203.073888][ T8628] do_syscall_64+0x55/0xb0 [ 203.078300][ T8628] ? clear_bhb_loop+0x40/0x90 [ 203.082967][ T8628] ? clear_bhb_loop+0x40/0x90 [ 203.087634][ T8628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.093528][ T8628] RIP: 0033:0x7fc0dd38f749 [ 203.097936][ T8628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.117534][ T8628] RSP: 002b:00007fc0de17d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.125937][ T8628] RAX: ffffffffffffffda RBX: 00007fc0dd5e5fa0 RCX: 00007fc0dd38f749 [ 203.133899][ T8628] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000004 [ 203.142031][ T8628] RBP: 00007fc0de17d090 R08: 0000000000000008 R09: 0000000000000000 [ 203.149996][ T8628] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 203.157955][ T8628] R13: 00007fc0dd5e6038 R14: 00007fc0dd5e5fa0 R15: 00007ffebf3886e8 [ 203.165938][ T8628] [ 203.461687][ T8643] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.975'. [ 203.542210][ T8648] netlink: 45563 bytes leftover after parsing attributes in process `syz.1.973'. [ 204.284585][ T8658] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.979'. [ 204.539747][ T8675] IPv6: Can't replace route, no match found [ 204.633428][ T8671] netlink: 'syz.3.983': attribute type 25 has an invalid length. [ 204.642340][ T8671] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 204.652852][ T8678] netlink: 'syz.2.987': attribute type 39 has an invalid length. [ 205.449242][ T8686] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 205.567190][ T8686] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 205.575957][ T8682] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 205.588688][ T8687] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 205.599104][ T8689] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 205.607809][ T8686] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 205.850625][ T8695] tap0: tun_chr_ioctl cmd 2147767507 [ 205.907574][ T8696] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.993'. [ 205.923514][ T8699] netlink: 45563 bytes leftover after parsing attributes in process `syz.2.991'. [ 206.185116][ T8706] netlink: 'syz.0.997': attribute type 2 has an invalid length. [ 206.215288][ T8706] netlink: 'syz.0.997': attribute type 8 has an invalid length. [ 206.252644][ T8708] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.998'. [ 206.264038][ T8706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.997'. [ 206.507343][ T8716] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1001'. [ 206.588142][ T8718] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1003'. [ 206.904984][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1005'. [ 206.927854][ T8724] FAULT_INJECTION: forcing a failure. [ 206.927854][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 206.946095][ T8724] CPU: 0 PID: 8724 Comm: syz.0.1005 Not tainted syzkaller #0 [ 206.953547][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.963634][ T8724] Call Trace: [ 206.966937][ T8724] [ 206.969887][ T8724] dump_stack_lvl+0x16c/0x230 [ 206.974596][ T8724] ? trace_event_raw_event_lock+0x230/0x230 [ 206.980516][ T8724] ? show_regs_print_info+0x20/0x20 [ 206.985744][ T8724] ? load_image+0x3b0/0x3b0 [ 206.990303][ T8724] should_fail_ex+0x39d/0x4d0 [ 206.995021][ T8724] should_failslab+0x9/0x20 [ 206.999553][ T8724] slab_pre_alloc_hook+0x59/0x310 [ 207.004625][ T8724] kmem_cache_alloc_node+0x60/0x330 [ 207.009854][ T8724] ? __alloc_skb+0x108/0x2c0 [ 207.014483][ T8724] __alloc_skb+0x108/0x2c0 [ 207.018931][ T8724] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 207.024256][ T8724] rtmsg_ifinfo+0x8c/0x1a0 [ 207.028713][ T8724] __dev_notify_flags+0xf5/0x2e0 [ 207.033682][ T8724] ? __dev_change_flags+0x6a0/0x6a0 [ 207.038901][ T8724] ? __dev_change_flags+0x4bf/0x6a0 [ 207.044156][ T8724] ? dev_get_flags+0x1c0/0x1c0 [ 207.048989][ T8724] ? printk_sprint+0x460/0x460 [ 207.053784][ T8724] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 207.059696][ T8724] ? _raw_spin_unlock+0x40/0x40 [ 207.064573][ T8724] dev_change_flags+0xe8/0x1a0 [ 207.069372][ T8724] do_setlink+0xc74/0x3fb0 [ 207.073830][ T8724] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 207.080098][ T8724] ? rcu_is_watching+0x15/0xb0 [ 207.084893][ T8724] ? do_trace_netlink_extack+0x7e/0x1a0 [ 207.090466][ T8724] ? __nla_validate_parse+0x26e9/0x2fa0 [ 207.096066][ T8724] ? mark_lock+0x94/0x320 [ 207.100431][ T8724] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 207.106440][ T8724] ? lock_chain_count+0x20/0x20 [ 207.111321][ T8724] ? asm_sysvec_call_function_single+0x1a/0x20 [ 207.117495][ T8724] ? lockdep_hardirqs_on+0x98/0x150 [ 207.122721][ T8724] ? asm_sysvec_call_function_single+0x1a/0x20 [ 207.128911][ T8724] ? validate_linkmsg+0x719/0x910 [ 207.133969][ T8724] rtnl_setlink+0x399/0x4b0 [ 207.138514][ T8724] ? rtnl_dump_ifinfo+0x1290/0x1290 [ 207.143747][ T8724] ? kernel_text_address+0xa0/0xd0 [ 207.148893][ T8724] ? perf_tp_event+0x13a0/0x13a0 [ 207.153953][ T8724] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 207.159100][ T8724] ? mutex_lock_nested+0x20/0x20 [ 207.164099][ T8724] ? rtnl_dump_ifinfo+0x1290/0x1290 [ 207.169324][ T8724] rtnetlink_rcv_msg+0x7c7/0xf10 [ 207.174288][ T8724] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 207.179511][ T8724] ? rtnetlink_bind+0x80/0x80 [ 207.184242][ T8724] ? perf_tp_event+0x12d7/0x13a0 [ 207.189210][ T8724] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 207.195032][ T8724] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 207.201593][ T8724] ? __dev_queue_xmit+0x245/0x35a0 [ 207.206798][ T8724] ? __dev_queue_xmit+0x245/0x35a0 [ 207.211932][ T8724] ? __dev_queue_xmit+0x1449/0x35a0 [ 207.217154][ T8724] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 207.223181][ T8724] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 207.228930][ T8724] ? perf_trace_lock+0x2ed/0x380 [ 207.233915][ T8724] netlink_rcv_skb+0x216/0x480 [ 207.238711][ T8724] ? rtnetlink_bind+0x80/0x80 [ 207.243420][ T8724] ? netlink_ack+0x1110/0x1110 [ 207.248237][ T8724] ? __lock_acquire+0x7c80/0x7c80 [ 207.253295][ T8724] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.258872][ T8724] netlink_unicast+0x751/0x8d0 [ 207.263681][ T8724] netlink_sendmsg+0x8c1/0xbe0 [ 207.268488][ T8724] ? netlink_getsockopt+0x580/0x580 [ 207.273801][ T8724] ? aa_sock_msg_perm+0x94/0x150 [ 207.278767][ T8724] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.284067][ T8724] ? security_socket_sendmsg+0x80/0xa0 [ 207.289551][ T8724] ? netlink_getsockopt+0x580/0x580 [ 207.294769][ T8724] ____sys_sendmsg+0x5bf/0x950 [ 207.299570][ T8724] ? __asan_memset+0x22/0x40 [ 207.304182][ T8724] ? __sys_sendmsg_sock+0x30/0x30 [ 207.309229][ T8724] ? __import_iovec+0x5f2/0x860 [ 207.314121][ T8724] ? import_iovec+0x73/0xa0 [ 207.318650][ T8724] ___sys_sendmsg+0x220/0x290 [ 207.323358][ T8724] ? __sys_sendmsg+0x270/0x270 [ 207.328198][ T8724] ? __lock_acquire+0x7c80/0x7c80 [ 207.333294][ T8724] __se_sys_sendmsg+0x1a5/0x270 [ 207.338173][ T8724] ? __x64_sys_sendmsg+0x80/0x80 [ 207.343162][ T8724] ? lockdep_hardirqs_on+0x98/0x150 [ 207.348394][ T8724] do_syscall_64+0x55/0xb0 [ 207.352932][ T8724] ? clear_bhb_loop+0x40/0x90 [ 207.357624][ T8724] ? clear_bhb_loop+0x40/0x90 [ 207.362320][ T8724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.368234][ T8724] RIP: 0033:0x7f760d18f749 [ 207.372671][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.392293][ T8724] RSP: 002b:00007f760e026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.400735][ T8724] RAX: ffffffffffffffda RBX: 00007f760d3e5fa0 RCX: 00007f760d18f749 [ 207.408729][ T8724] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 207.416715][ T8724] RBP: 00007f760e026090 R08: 0000000000000000 R09: 0000000000000000 [ 207.424699][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.432682][ T8724] R13: 00007f760d3e6038 R14: 00007f760d3e5fa0 R15: 00007fffe8c004e8 [ 207.440707][ T8724] [ 207.514162][ T8724] dummy0: left allmulticast mode [ 207.642069][ T8724] team0: Port device dummy0 removed [ 207.663921][ T8724] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 208.520876][ T8753] FAULT_INJECTION: forcing a failure. [ 208.520876][ T8753] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 208.563896][ T8753] CPU: 1 PID: 8753 Comm: syz.1.1014 Not tainted syzkaller #0 [ 208.571351][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.581453][ T8753] Call Trace: [ 208.584763][ T8753] [ 208.587731][ T8753] dump_stack_lvl+0x16c/0x230 [ 208.592477][ T8753] ? show_regs_print_info+0x20/0x20 [ 208.597731][ T8753] ? load_image+0x3b0/0x3b0 [ 208.602288][ T8753] ? __lock_acquire+0x7c80/0x7c80 [ 208.607331][ T8753] ? rcu_preempt_deferred_qs_irqrestore+0x86a/0xcc0 [ 208.613950][ T8753] should_fail_ex+0x39d/0x4d0 [ 208.618651][ T8753] prepare_alloc_pages+0x1e2/0x5f0 [ 208.623802][ T8753] __alloc_pages+0x127/0x460 [ 208.628411][ T8753] ? zone_statistics+0x170/0x170 [ 208.633380][ T8753] ? do_wp_page+0x1024/0x3630 [ 208.638083][ T8753] __folio_alloc+0x10/0x20 [ 208.642510][ T8753] vma_alloc_folio+0x47a/0x8f0 [ 208.647306][ T8753] do_wp_page+0x128e/0x3630 [ 208.651882][ T8753] ? folio_put+0xd0/0xd0 [ 208.656151][ T8753] ? do_raw_spin_lock+0x121/0x2c0 [ 208.661217][ T8753] ? __rwlock_init+0x150/0x150 [ 208.666024][ T8753] ? handle_mm_fault+0xd1/0x4920 [ 208.670990][ T8753] handle_mm_fault+0x12d4/0x4920 [ 208.676045][ T8753] ? handle_mm_fault+0xd1/0x4920 [ 208.681039][ T8753] ? numa_migrate_prep+0x350/0x350 [ 208.686195][ T8753] ? generic_get_unmapped_area_topdown+0x660/0x660 [ 208.692720][ T8753] ? lock_mm_and_find_vma+0x9c/0x300 [ 208.698030][ T8753] do_user_addr_fault+0x738/0x12e0 [ 208.703188][ T8753] exc_page_fault+0x67/0x110 [ 208.707816][ T8753] asm_exc_page_fault+0x26/0x30 [ 208.712707][ T8753] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 208.718526][ T8753] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 208.738144][ T8753] RSP: 0018:ffffc9000454f718 EFLAGS: 00050206 [ 208.744231][ T8753] RAX: ffffffff841ce901 RBX: 1ffff920008a9fc7 RCX: 00000000000095d0 [ 208.752210][ T8753] RDX: 0000000000000000 RSI: ffff888052d86ce8 RDI: 0000200000007000 [ 208.760192][ T8753] RBP: ffffc9000454f878 R08: ffff888052d902b7 R09: 1ffff1100a5b2056 [ 208.768174][ T8753] R10: dffffc0000000000 R11: ffffed100a5b2057 R12: ffff888052d800e8 [ 208.776164][ T8753] R13: 00000000000101d0 R14: 00000000000101d0 R15: ffffc9000454fe48 [ 208.784164][ T8753] ? _copy_to_iter+0x161/0x10d0 [ 208.789055][ T8753] _copy_to_iter+0x249/0x10d0 [ 208.793755][ T8753] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 208.799672][ T8753] ? iov_iter_init+0x1e0/0x1e0 [ 208.804449][ T8753] ? __virt_addr_valid+0x18c/0x540 [ 208.810092][ T8753] ? __virt_addr_valid+0x469/0x540 [ 208.815218][ T8753] ? __phys_addr_symbol+0x2f/0x70 [ 208.820252][ T8753] ? __check_object_size+0x506/0xa30 [ 208.825566][ T8753] __skb_datagram_iter+0xdb/0x780 [ 208.830602][ T8753] ? tsk_importance+0x150/0x150 [ 208.835477][ T8753] ? skb_copy_datagram_iter+0x200/0x200 [ 208.841049][ T8753] skb_copy_datagram_iter+0xb1/0x200 [ 208.846354][ T8753] tipc_recvstream+0x72b/0xe70 [ 208.851161][ T8753] ? tipc_sendstream+0x70/0x70 [ 208.855941][ T8753] ____sys_recvmsg+0x29e/0x5b0 [ 208.860749][ T8753] ? __sys_recvmsg_sock+0x50/0x50 [ 208.865866][ T8753] ? import_iovec+0x73/0xa0 [ 208.870402][ T8753] ___sys_recvmsg+0x1b6/0x510 [ 208.875112][ T8753] ? __sys_recvmsg+0x270/0x270 [ 208.879926][ T8753] ? ksys_write+0x1c1/0x250 [ 208.884491][ T8753] ? __fget_files+0x44a/0x4d0 [ 208.889218][ T8753] __x64_sys_recvmsg+0x1f2/0x2c0 [ 208.894192][ T8753] ? ___sys_recvmsg+0x510/0x510 [ 208.899105][ T8753] ? lockdep_hardirqs_on+0x98/0x150 [ 208.904334][ T8753] do_syscall_64+0x55/0xb0 [ 208.908793][ T8753] ? clear_bhb_loop+0x40/0x90 [ 208.913521][ T8753] ? clear_bhb_loop+0x40/0x90 [ 208.919010][ T8753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.924922][ T8753] RIP: 0033:0x7f5c0bd8f749 [ 208.929356][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.949079][ T8753] RSP: 002b:00007f5c0cbda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 208.957508][ T8753] RAX: ffffffffffffffda RBX: 00007f5c0bfe6090 RCX: 00007f5c0bd8f749 [ 208.965491][ T8753] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 208.973473][ T8753] RBP: 00007f5c0cbda090 R08: 0000000000000000 R09: 0000000000000000 [ 208.981454][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.989436][ T8753] R13: 00007f5c0bfe6128 R14: 00007f5c0bfe6090 R15: 00007ffde2913028 [ 208.997454][ T8753] [ 209.011649][ T7408] O3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 210.854643][ T8764] __nla_validate_parse: 1 callbacks suppressed [ 210.854663][ T8764] netlink: 45563 bytes leftover after parsing attributes in process `syz.0.1015'. [ 211.865776][ T8788] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1027'. [ 211.877552][ T8789] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.117427][ T8813] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1034'. [ 213.490443][ T8823] netlink: 45563 bytes leftover after parsing attributes in process `syz.0.1035'. [ 213.576008][ T8825] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1039'. [ 213.589800][ T8825] netlink: zone id is out of range [ 213.597781][ T8825] netlink: zone id is out of range [ 213.605658][ T8825] netlink: zone id is out of range [ 213.611499][ T8825] netlink: zone id is out of range [ 213.617052][ T8825] netlink: zone id is out of range [ 213.623278][ T8825] netlink: zone id is out of range [ 213.628580][ T8825] netlink: zone id is out of range [ 213.644463][ T8825] netlink: zone id is out of range [ 213.655394][ T8825] netlink: zone id is out of range [ 213.661384][ T8825] netlink: zone id is out of range [ 213.918198][ T8834] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1042'. [ 214.390896][ T8846] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1046'. [ 215.454250][ T8877] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1055'. [ 215.571365][ T8872] cgroup: fork rejected by pids controller in /syz2 [ 215.859880][ T8988] netlink: 45563 bytes leftover after parsing attributes in process `syz.1.1057'. [ 217.152020][ T9005] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1066'. [ 217.196718][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.206386][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.220644][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.230632][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.240713][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.248325][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.298038][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1067'. [ 217.423344][ T9008] validate_nla: 5 callbacks suppressed [ 217.423362][ T9008] netlink: 'syz.0.1067': attribute type 39 has an invalid length. [ 217.842823][ T9029] netlink: 45563 bytes leftover after parsing attributes in process `syz.3.1072'. [ 217.858021][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 218.083394][ T9034] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1074'. [ 218.568710][ T9042] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1077'. [ 218.584055][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.592780][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.623427][ T9007] bridge_slave_0: entered allmulticast mode [ 218.664930][ T9007] bridge_slave_0: entered promiscuous mode [ 218.685908][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.694144][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.705336][ T9007] bridge_slave_1: entered allmulticast mode [ 218.715513][ T9007] bridge_slave_1: entered promiscuous mode [ 218.762306][ T9045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1078'. [ 218.781183][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.814053][ T9045] netlink: 'syz.1.1078': attribute type 25 has an invalid length. [ 218.846048][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.877088][ T9045] netlink: 'syz.1.1078': attribute type 25 has an invalid length. [ 218.885753][ T9045] netlink: 'syz.1.1078': attribute type 28 has an invalid length. [ 218.926063][ T9007] team0: Port device team_slave_0 added [ 218.939767][ T9045] netlink: 'syz.1.1078': attribute type 39 has an invalid length. [ 219.309161][ T5787] Bluetooth: hci3: command tx timeout [ 219.456682][ T9007] team0: Port device team_slave_1 added [ 219.470127][ T9050] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1078'. [ 219.579497][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.586706][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.616828][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.633158][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.648539][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.681187][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.865241][ T9007] hsr_slave_0: entered promiscuous mode [ 219.897291][ T9007] hsr_slave_1: entered promiscuous mode [ 219.912182][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.926976][ T9007] Cannot create hsr debugfs directory [ 219.939714][ T9066] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1085'. [ 220.087233][ T9070] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1086'. [ 220.336823][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.702260][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.882808][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.983260][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.286113][ T9097] __nla_validate_parse: 3 callbacks suppressed [ 221.286154][ T9097] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1095'. [ 221.392381][ T5787] Bluetooth: hci3: command tx timeout [ 222.006791][ T9119] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1100'. [ 223.055949][ T9151] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1105'. [ 223.325956][ T9007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.472174][ T9007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.479187][ T5787] Bluetooth: hci3: command tx timeout [ 223.560089][ T9007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.726138][ T9007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.984820][ T9175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1110'. [ 224.068650][ T9183] netlink: 'syz.3.1110': attribute type 25 has an invalid length. [ 224.112557][ T9175] netlink: 'syz.3.1110': attribute type 39 has an invalid length. [ 224.236578][ T9185] netlink: 'syz.3.1110': attribute type 25 has an invalid length. [ 224.258671][ T9185] netlink: 'syz.3.1110': attribute type 28 has an invalid length. [ 224.303301][ T9175] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1110'. [ 224.615711][ T12] vlan0: left allmulticast mode [ 224.626990][ T12] veth0_vlan: left allmulticast mode [ 224.649089][ T12] vlan0: left promiscuous mode [ 224.656270][ T12] À: port 1(vlan0) entered disabled state [ 224.692554][ T12] hsr_slave_0: left promiscuous mode [ 224.717105][ T12] hsr_slave_1: left promiscuous mode [ 224.725491][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.740917][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.754725][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.771143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.849681][ T12] veth1_macvtap: left promiscuous mode [ 224.857070][ T12] veth0_macvtap: left promiscuous mode [ 224.879154][ T12] veth1_vlan: left promiscuous mode [ 224.890028][ T12] veth0_vlan: left promiscuous mode [ 225.548934][ T5787] Bluetooth: hci3: command tx timeout [ 226.085587][ T12] team0 (unregistering): Port device team_slave_1 removed [ 226.126422][ T12] team0 (unregistering): Port device team_slave_0 removed [ 226.171867][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.214514][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.487166][ T12] team0 (unregistering): Port device bond0 removed [ 226.599771][ T12] bond0 (unregistering): Released all slaves [ 226.631856][ T9200] netlink: 'syz.3.1115': attribute type 41 has an invalid length. [ 226.743775][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.816531][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.861258][ T7409] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.868455][ T7409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.927909][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.935225][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.257657][ T9216] netlink: 45563 bytes leftover after parsing attributes in process `syz.1.1120'. [ 227.581256][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.713211][ T9007] veth0_vlan: entered promiscuous mode [ 227.738051][ T9007] veth1_vlan: entered promiscuous mode [ 227.825105][ T9007] veth0_macvtap: entered promiscuous mode [ 227.856799][ T9231] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1124'. [ 227.873911][ T9007] veth1_macvtap: entered promiscuous mode [ 227.878740][ T9231] net_ratelimit: 216 callbacks suppressed [ 227.878758][ T9231] netlink: zone id is out of range [ 227.897330][ T9231] netlink: zone id is out of range [ 227.906956][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.918328][ T9231] netlink: zone id is out of range [ 227.928243][ T9231] netlink: zone id is out of range [ 227.934983][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.953188][ T9231] netlink: zone id is out of range [ 227.966429][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.975000][ T9231] netlink: zone id is out of range [ 227.993104][ T9233] netlink: 'syz.0.1124': attribute type 49 has an invalid length. [ 228.010035][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.030334][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.035760][ T9231] netlink: zone id is out of range [ 228.051729][ T9231] netlink: zone id is out of range [ 228.064057][ T9231] netlink: zone id is out of range [ 228.070295][ T9231] netlink: zone id is out of range [ 228.081576][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.121542][ T9233] netlink: 'syz.0.1124': attribute type 49 has an invalid length. [ 228.157174][ T9007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.166537][ T9007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.187073][ T9007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.218917][ T9007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.456154][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.479437][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.524135][ T9241] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1127'. [ 228.547457][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.563303][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.123722][ T9263] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1133'. [ 229.405822][ T9275] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1134'. [ 229.473715][ T9275] netlink: 'syz.2.1134': attribute type 49 has an invalid length. [ 229.499961][ T9275] netlink: 'syz.2.1134': attribute type 49 has an invalid length. [ 229.643220][ T9279] GPL: port 1(erspan0) entered blocking state [ 229.663060][ T9279] GPL: port 1(erspan0) entered disabled state [ 229.681646][ T9279] erspan0: entered allmulticast mode [ 229.707954][ T9279] erspan0: entered promiscuous mode [ 229.728364][ T9283] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1138'. [ 229.757983][ T9284] GPL: port 1(erspan0) entered blocking state [ 229.764406][ T9284] GPL: port 1(erspan0) entered forwarding state [ 230.317424][ T9302] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1143'. [ 230.759806][ T9309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1145'. [ 230.821249][ T9309] netlink: 'syz.2.1145': attribute type 25 has an invalid length. [ 230.858555][ T9309] netlink: 'syz.2.1145': attribute type 25 has an invalid length. [ 230.873068][ T9309] netlink: 'syz.2.1145': attribute type 28 has an invalid length. [ 230.887290][ T9309] netlink: 'syz.2.1145': attribute type 39 has an invalid length. [ 231.064477][ T9310] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1145'. [ 231.263207][ T9316] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1147'. [ 233.716687][ T9378] __nla_validate_parse: 3 callbacks suppressed [ 233.716723][ T9378] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1162'. [ 234.020355][ T9392] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1170'. [ 234.080495][ T9396] netlink: 45563 bytes leftover after parsing attributes in process `syz.3.1166'. [ 234.127083][ T9397] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1171'. [ 235.109465][ T9419] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1176'. [ 235.354250][ T9424] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1179'. [ 236.034574][ T9442] netlink: 45563 bytes leftover after parsing attributes in process `syz.3.1183'. [ 237.437624][ T9466] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1192'. [ 237.797465][ T9468] netlink: 'syz.2.1191': attribute type 29 has an invalid length. [ 237.887211][ T9468] netlink: 'syz.2.1191': attribute type 29 has an invalid length. [ 238.496617][ T9477] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1194'. [ 238.614592][ T9482] bridge0: port 4(hsr_slave_1) entered blocking state [ 238.624259][ T9482] bridge0: port 4(hsr_slave_1) entered disabled state [ 238.632169][ T9482] hsr_slave_1: entered allmulticast mode [ 238.695317][ T9482] hsr_slave_1: left allmulticast mode [ 239.021469][ T9504] netlink: 45563 bytes leftover after parsing attributes in process `syz.0.1196'. [ 239.209267][ T9512] netlink: 'syz.2.1199': attribute type 21 has an invalid length. [ 240.025135][ T9523] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1205'. [ 240.368502][ T9538] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1210'. [ 240.809770][ T7402] O3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.140613][ T7402] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.216694][ T9553] netlink: 45563 bytes leftover after parsing attributes in process `syz.1.1213'. [ 241.703841][ T9559] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1217'. [ 241.895210][ T9563] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1218'. [ 242.461664][ T9572] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1221'. [ 243.065228][ T9598] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1228'. [ 243.086356][ T9595] netlink: 'syz.3.1227': attribute type 21 has an invalid length. [ 243.645499][ T9606] netlink: 45563 bytes leftover after parsing attributes in process `syz.3.1231'. [ 243.873650][ T9613] bridge0: port 3(hsr_slave_1) entered blocking state [ 243.886872][ T9613] bridge0: port 3(hsr_slave_1) entered disabled state [ 243.894960][ T9613] hsr_slave_1: entered allmulticast mode [ 243.909297][ T9613] hsr_slave_1: left allmulticast mode [ 244.139979][ T9617] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1233'. [ 244.600017][ T9621] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1234'. [ 244.625142][ T9630] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1238'. [ 245.407313][ T9651] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1244'. [ 245.470148][ T9654] netlink: 45563 bytes leftover after parsing attributes in process `syz.0.1243'. [ 245.551007][ T9656] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1246'. [ 245.566723][ T9656] netlink: 'syz.2.1246': attribute type 25 has an invalid length. [ 245.590717][ T9656] netlink: 'syz.2.1246': attribute type 25 has an invalid length. [ 245.602729][ T9656] netlink: 'syz.2.1246': attribute type 28 has an invalid length. [ 245.615657][ T9656] netlink: 'syz.2.1246': attribute type 39 has an invalid length. [ 245.940166][ T9659] netlink: 'syz.1.1247': attribute type 29 has an invalid length. [ 245.954083][ T9659] netlink: 'syz.1.1247': attribute type 29 has an invalid length. [ 245.965446][ T9659] netlink: 'syz.1.1247': attribute type 29 has an invalid length. [ 246.340504][ T9668] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1252'. [ 246.543373][ T9674] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1255'. [ 246.735161][ T9683] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1257'. [ 246.794126][ T9683] netlink: 'syz.0.1257': attribute type 39 has an invalid length. [ 246.853202][ T9682] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1258'. [ 248.265731][ T9719] netlink: 'syz.3.1268': attribute type 25 has an invalid length. [ 248.306865][ T9719] netlink: 'syz.3.1268': attribute type 39 has an invalid length. [ 249.311609][ T9738] : renamed from bond_slave_0 (while UP) [ 250.036656][ T9762] __nla_validate_parse: 5 callbacks suppressed [ 250.036675][ T9762] netlink: 45563 bytes leftover after parsing attributes in process `syz.1.1276'. [ 250.094836][ T9764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1280'. [ 250.122955][ T9764] netlink: 'syz.2.1280': attribute type 25 has an invalid length. [ 250.159363][ T9764] netlink: 'syz.2.1280': attribute type 39 has an invalid length. [ 250.179925][ T9764] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1280'. [ 250.623381][ T9776] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1283'. [ 251.396273][ T9802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1291'. [ 251.408512][ T9802] netlink: 'syz.2.1291': attribute type 25 has an invalid length. [ 251.449715][ T9802] netlink: 'syz.2.1291': attribute type 39 has an invalid length. [ 251.460089][ T9802] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1291'. [ 251.701868][ T9804] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1292'. [ 251.873792][ T9811] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1295'. [ 251.987094][ T9812] netlink: 45563 bytes leftover after parsing attributes in process `syz.3.1294'. [ 252.130465][ T9816] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1297'. [ 252.142520][ T9816] net_ratelimit: 443 callbacks suppressed [ 252.142537][ T9816] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.207440][ T9820] FAULT_INJECTION: forcing a failure. [ 252.207440][ T9820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.263700][ T9820] CPU: 0 PID: 9820 Comm: syz.1.1296 Not tainted syzkaller #0 [ 252.271230][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.281313][ T9820] Call Trace: [ 252.284603][ T9820] [ 252.287550][ T9820] dump_stack_lvl+0x16c/0x230 [ 252.292263][ T9820] ? show_regs_print_info+0x20/0x20 [ 252.297652][ T9820] ? load_image+0x3b0/0x3b0 [ 252.302171][ T9820] ? __might_fault+0xaa/0x120 [ 252.307227][ T9820] ? __lock_acquire+0x7c80/0x7c80 [ 252.312279][ T9820] ? __virt_addr_valid+0x18c/0x540 [ 252.317409][ T9820] should_fail_ex+0x39d/0x4d0 [ 252.322096][ T9820] _copy_from_user+0x2f/0xe0 [ 252.326692][ T9820] ___bpf_copy_key+0xb0/0x100 [ 252.331377][ T9820] map_update_elem+0x260/0x700 [ 252.336582][ T9820] __sys_bpf+0x652/0x800 [ 252.340830][ T9820] ? bpf_link_show_fdinfo+0x350/0x350 [ 252.346225][ T9820] ? lock_chain_count+0x20/0x20 [ 252.351086][ T9820] __x64_sys_bpf+0x7c/0x90 [ 252.355501][ T9820] do_syscall_64+0x55/0xb0 [ 252.359924][ T9820] ? clear_bhb_loop+0x40/0x90 [ 252.364606][ T9820] ? clear_bhb_loop+0x40/0x90 [ 252.369383][ T9820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.375374][ T9820] RIP: 0033:0x7f5c0bd8f749 [ 252.379798][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.399435][ T9820] RSP: 002b:00007f5c0cbfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.407915][ T9820] RAX: ffffffffffffffda RBX: 00007f5c0bfe5fa0 RCX: 00007f5c0bd8f749 [ 252.417226][ T9820] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000002 [ 252.425223][ T9820] RBP: 00007f5c0cbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 252.433209][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.441179][ T9820] R13: 00007f5c0bfe6038 R14: 00007f5c0bfe5fa0 R15: 00007ffde2913028 [ 252.449262][ T9820] [ 252.986662][ T9833] netlink: 'syz.2.1302': attribute type 25 has an invalid length. [ 253.148033][ T9835] netlink: 'syz.2.1302': attribute type 25 has an invalid length. [ 253.408312][ T9835] netlink: 'syz.2.1302': attribute type 28 has an invalid length. [ 253.538478][ T9833] netlink: 'syz.2.1302': attribute type 39 has an invalid length. [ 253.940339][ T9850] netlink: 'syz.3.1307': attribute type 39 has an invalid length. [ 254.092176][ T9855] netlink: zone id is out of range [ 254.097651][ T9855] netlink: zone id is out of range [ 254.103019][ T9855] netlink: zone id is out of range [ 254.113877][ T9855] netlink: zone id is out of range [ 254.119273][ T9855] netlink: zone id is out of range [ 254.124843][ T9855] netlink: zone id is out of range [ 254.131480][ T9855] netlink: zone id is out of range [ 254.140146][ T9855] netlink: zone id is out of range [ 254.157453][ T9855] netlink: zone id is out of range [ 254.375640][ T9862] FAULT_INJECTION: forcing a failure. [ 254.375640][ T9862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.410554][ T9862] CPU: 1 PID: 9862 Comm: syz.2.1310 Not tainted syzkaller #0 [ 254.418003][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.428079][ T9862] Call Trace: [ 254.431374][ T9862] [ 254.434332][ T9862] dump_stack_lvl+0x16c/0x230 [ 254.439041][ T9862] ? show_regs_print_info+0x20/0x20 [ 254.444271][ T9862] ? load_image+0x3b0/0x3b0 [ 254.448804][ T9862] ? __lock_acquire+0x7c80/0x7c80 [ 254.453848][ T9862] ? __virt_addr_valid+0x18c/0x540 [ 254.458975][ T9862] should_fail_ex+0x39d/0x4d0 [ 254.463666][ T9862] _copy_from_user+0x2f/0xe0 [ 254.468261][ T9862] bpf_test_init+0xf9/0x150 [ 254.472936][ T9862] bpf_prog_test_run_xdp+0x382/0xfa0 [ 254.478396][ T9862] ? dev_put+0x80/0x80 [ 254.482459][ T9862] ? dev_put+0x80/0x80 [ 254.486517][ T9862] bpf_prog_test_run+0x321/0x390 [ 254.491445][ T9862] __sys_bpf+0x440/0x800 [ 254.495680][ T9862] ? bpf_link_show_fdinfo+0x350/0x350 [ 254.501060][ T9862] ? lock_chain_count+0x20/0x20 [ 254.505907][ T9862] __x64_sys_bpf+0x7c/0x90 [ 254.510323][ T9862] do_syscall_64+0x55/0xb0 [ 254.514734][ T9862] ? clear_bhb_loop+0x40/0x90 [ 254.519509][ T9862] ? clear_bhb_loop+0x40/0x90 [ 254.524178][ T9862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.530060][ T9862] RIP: 0033:0x7f1d7258f749 [ 254.534467][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.554523][ T9862] RSP: 002b:00007f1d73352038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.562932][ T9862] RAX: ffffffffffffffda RBX: 00007f1d727e5fa0 RCX: 00007f1d7258f749 [ 254.570918][ T9862] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 254.578980][ T9862] RBP: 00007f1d73352090 R08: 0000000000000000 R09: 0000000000000000 [ 254.587025][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.595002][ T9862] R13: 00007f1d727e6038 R14: 00007f1d727e5fa0 R15: 00007ffde1b24e08 [ 254.602976][ T9862] [ 254.632104][ T9866] netlink: 'syz.3.1312': attribute type 25 has an invalid length. [ 254.655918][ T9866] netlink: 'syz.3.1312': attribute type 25 has an invalid length. [ 254.664393][ T9866] netlink: 'syz.3.1312': attribute type 28 has an invalid length. [ 254.723904][ T9869] netlink: 'syz.3.1312': attribute type 39 has an invalid length. [ 255.335616][ T9883] __nla_validate_parse: 7 callbacks suppressed [ 255.335651][ T9883] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1317'. [ 255.384109][ T9888] FAULT_INJECTION: forcing a failure. [ 255.384109][ T9888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.479165][ T9888] CPU: 1 PID: 9888 Comm: syz.0.1318 Not tainted syzkaller #0 [ 255.486634][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.496730][ T9888] Call Trace: [ 255.500042][ T9888] [ 255.503022][ T9888] dump_stack_lvl+0x16c/0x230 [ 255.507755][ T9888] ? show_regs_print_info+0x20/0x20 [ 255.513006][ T9888] ? load_image+0x3b0/0x3b0 [ 255.517560][ T9888] ? __might_fault+0xaa/0x120 [ 255.522286][ T9888] ? __lock_acquire+0x7c80/0x7c80 [ 255.527809][ T9888] should_fail_ex+0x39d/0x4d0 [ 255.532550][ T9888] _copy_from_user+0x2f/0xe0 [ 255.537189][ T9888] do_vfs_ioctl+0x1045/0x1bb0 [ 255.542023][ T9888] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 255.547722][ T9888] ? tomoyo_path_number_perm+0x1ba/0x590 [ 255.553492][ T9888] ? tomoyo_path_number_perm+0x477/0x590 [ 255.559176][ T9888] ? __kmem_cache_free+0xba/0x1f0 [ 255.564272][ T9888] ? tomoyo_path_number_perm+0x4dc/0x590 [ 255.569946][ T9888] ? tomoyo_path_number_perm+0x1ba/0x590 [ 255.575628][ T9888] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 255.581258][ T9888] ? __fget_files+0x28/0x4d0 [ 255.585928][ T9888] ? bpf_lsm_file_ioctl+0x9/0x10 [ 255.590904][ T9888] ? security_file_ioctl+0x80/0xa0 [ 255.596066][ T9888] __se_sys_ioctl+0x83/0x170 [ 255.600714][ T9888] do_syscall_64+0x55/0xb0 [ 255.605171][ T9888] ? clear_bhb_loop+0x40/0x90 [ 255.609897][ T9888] ? clear_bhb_loop+0x40/0x90 [ 255.614621][ T9888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.620546][ T9888] RIP: 0033:0x7f760d18f749 [ 255.625001][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.644747][ T9888] RSP: 002b:00007f760e026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.653205][ T9888] RAX: ffffffffffffffda RBX: 00007f760d3e5fa0 RCX: 00007f760d18f749 [ 255.661196][ T9888] RDX: 0000200000000040 RSI: 0000000040305829 RDI: 0000000000000005 [ 255.669177][ T9888] RBP: 00007f760e026090 R08: 0000000000000000 R09: 0000000000000000 [ 255.677266][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.685249][ T9888] R13: 00007f760d3e6038 R14: 00007f760d3e5fa0 R15: 00007fffe8c004e8 [ 255.693283][ T9888] [ 255.964733][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974852][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.254288][ T9897] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1321'. [ 256.521183][ T9909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1323'. [ 256.532925][ T9909] netlink: 'syz.1.1323': attribute type 25 has an invalid length. [ 256.573811][ T9909] netlink: 'syz.1.1323': attribute type 25 has an invalid length. [ 256.600061][ T9909] netlink: 'syz.1.1323': attribute type 28 has an invalid length. [ 256.665343][ T9909] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1323'. [ 256.770597][ T9913] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.1325'. [ 257.000768][ T9911] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1324'. [ 257.462573][ T9927] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1330'. [ 257.529631][ T9931] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1332'. [ 258.024944][ T9948] FAULT_INJECTION: forcing a failure. [ 258.024944][ T9948] name failslab, interval 1, probability 0, space 0, times 0 [ 258.058519][ T9948] CPU: 0 PID: 9948 Comm: syz.0.1337 Not tainted syzkaller #0 [ 258.065974][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.076041][ T9948] Call Trace: [ 258.079348][ T9948] [ 258.082288][ T9948] dump_stack_lvl+0x16c/0x230 [ 258.086964][ T9948] ? show_regs_print_info+0x20/0x20 [ 258.092345][ T9948] ? load_image+0x3b0/0x3b0 [ 258.096873][ T9948] ? __lock_acquire+0x7c80/0x7c80 [ 258.101915][ T9948] should_fail_ex+0x39d/0x4d0 [ 258.106608][ T9948] should_failslab+0x9/0x20 [ 258.111161][ T9948] slab_pre_alloc_hook+0x59/0x310 [ 258.116189][ T9948] ? ____sys_sendmsg+0x5bf/0x950 [ 258.121123][ T9948] ? ___sys_sendmsg+0x220/0x290 [ 258.125966][ T9948] ? __se_sys_sendmsg+0x1a5/0x270 [ 258.130989][ T9948] kmem_cache_alloc_node+0x60/0x330 [ 258.136791][ T9948] ? vivid_try_fmt_vid_out+0xf90/0x26f0 [ 258.142329][ T9948] ? alloc_vmap_area+0x1c4/0x1c70 [ 258.147352][ T9948] alloc_vmap_area+0x1c4/0x1c70 [ 258.152208][ T9948] ? vm_map_ram+0xcb0/0xcb0 [ 258.156705][ T9948] ? rcu_is_watching+0x15/0xb0 [ 258.161490][ T9948] __get_vm_area_node+0x162/0x370 [ 258.166599][ T9948] __vmalloc_node_range+0x36e/0x1320 [ 258.171885][ T9948] ? netlink_sendmsg+0x5f3/0xbe0 [ 258.176989][ T9948] ? netlink_insert+0x106a/0x1370 [ 258.182283][ T9948] ? netlink_insert+0x2b3/0x1370 [ 258.187459][ T9948] ? netlink_data_ready+0x10/0x10 [ 258.192485][ T9948] ? free_vm_area+0x50/0x50 [ 258.196985][ T9948] ? netlink_sendmsg+0x5f3/0xbe0 [ 258.201913][ T9948] vmalloc+0x79/0x90 [ 258.205813][ T9948] ? netlink_sendmsg+0x5f3/0xbe0 [ 258.210756][ T9948] netlink_sendmsg+0x5f3/0xbe0 [ 258.215519][ T9948] ? netlink_getsockopt+0x580/0x580 [ 258.220726][ T9948] ? aa_sock_msg_perm+0x94/0x150 [ 258.225688][ T9948] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 258.231068][ T9948] ? security_socket_sendmsg+0x80/0xa0 [ 258.236613][ T9948] ? netlink_getsockopt+0x580/0x580 [ 258.241819][ T9948] ____sys_sendmsg+0x5bf/0x950 [ 258.246606][ T9948] ? __asan_memset+0x22/0x40 [ 258.251280][ T9948] ? __sys_sendmsg_sock+0x30/0x30 [ 258.256298][ T9948] ? __import_iovec+0x5f2/0x860 [ 258.261148][ T9948] ? import_iovec+0x73/0xa0 [ 258.265645][ T9948] ___sys_sendmsg+0x220/0x290 [ 258.270437][ T9948] ? __sys_sendmsg+0x270/0x270 [ 258.275210][ T9948] ? __lock_acquire+0x7c80/0x7c80 [ 258.280240][ T9948] __se_sys_sendmsg+0x1a5/0x270 [ 258.285084][ T9948] ? perf_trace_preemptirq_template+0x281/0x340 [ 258.291316][ T9948] ? __x64_sys_sendmsg+0x80/0x80 [ 258.296255][ T9948] ? lockdep_hardirqs_on+0x98/0x150 [ 258.301450][ T9948] do_syscall_64+0x55/0xb0 [ 258.305884][ T9948] ? clear_bhb_loop+0x40/0x90 [ 258.310553][ T9948] ? clear_bhb_loop+0x40/0x90 [ 258.315224][ T9948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.321108][ T9948] RIP: 0033:0x7f760d18f749 [ 258.325605][ T9948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.345911][ T9948] RSP: 002b:00007f760e026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.354324][ T9948] RAX: ffffffffffffffda RBX: 00007f760d3e5fa0 RCX: 00007f760d18f749 [ 258.362299][ T9948] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 258.370260][ T9948] RBP: 00007f760e026090 R08: 0000000000000000 R09: 0000000000000000 [ 258.378221][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.386182][ T9948] R13: 00007f760d3e6038 R14: 00007f760d3e5fa0 R15: 00007fffe8c004e8 [ 258.394154][ T9948] [ 258.410588][ T9948] syz.0.1337: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 258.430249][ T9948] CPU: 1 PID: 9948 Comm: syz.0.1337 Not tainted syzkaller #0 [ 258.437695][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.447784][ T9948] Call Trace: [ 258.451092][ T9948] [ 258.454029][ T9948] dump_stack_lvl+0x16c/0x230 [ 258.458713][ T9948] ? show_regs_print_info+0x20/0x20 [ 258.463907][ T9948] ? load_image+0x3b0/0x3b0 [ 258.468404][ T9948] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 258.474807][ T9948] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 258.481315][ T9948] warn_alloc+0x210/0x300 [ 258.485679][ T9948] ? slab_free_freelist_hook+0x130/0x1b0 [ 258.491342][ T9948] ? zone_watermark_ok_safe+0x230/0x230 [ 258.496911][ T9948] ? __get_vm_area_node+0x17b/0x370 [ 258.502133][ T9948] ? __get_vm_area_node+0x17b/0x370 [ 258.507551][ T9948] __vmalloc_node_range+0x393/0x1320 [ 258.512865][ T9948] ? netlink_insert+0x106a/0x1370 [ 258.517927][ T9948] ? netlink_insert+0x2b3/0x1370 [ 258.522889][ T9948] ? netlink_data_ready+0x10/0x10 [ 258.527937][ T9948] ? free_vm_area+0x50/0x50 [ 258.532465][ T9948] ? netlink_sendmsg+0x5f3/0xbe0 [ 258.537400][ T9948] vmalloc+0x79/0x90 [ 258.541294][ T9948] ? netlink_sendmsg+0x5f3/0xbe0 [ 258.546228][ T9948] netlink_sendmsg+0x5f3/0xbe0 [ 258.551003][ T9948] ? netlink_getsockopt+0x580/0x580 [ 258.556202][ T9948] ? aa_sock_msg_perm+0x94/0x150 [ 258.561235][ T9948] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 258.566599][ T9948] ? security_socket_sendmsg+0x80/0xa0 [ 258.572083][ T9948] ? netlink_getsockopt+0x580/0x580 [ 258.577281][ T9948] ____sys_sendmsg+0x5bf/0x950 [ 258.582043][ T9948] ? __asan_memset+0x22/0x40 [ 258.586623][ T9948] ? __sys_sendmsg_sock+0x30/0x30 [ 258.591640][ T9948] ? __import_iovec+0x5f2/0x860 [ 258.596493][ T9948] ? import_iovec+0x73/0xa0 [ 258.600993][ T9948] ___sys_sendmsg+0x220/0x290 [ 258.605679][ T9948] ? __sys_sendmsg+0x270/0x270 [ 258.610452][ T9948] ? __lock_acquire+0x7c80/0x7c80 [ 258.615483][ T9948] __se_sys_sendmsg+0x1a5/0x270 [ 258.620328][ T9948] ? perf_trace_preemptirq_template+0x281/0x340 [ 258.626561][ T9948] ? __x64_sys_sendmsg+0x80/0x80 [ 258.631505][ T9948] ? lockdep_hardirqs_on+0x98/0x150 [ 258.636745][ T9948] do_syscall_64+0x55/0xb0 [ 258.641152][ T9948] ? clear_bhb_loop+0x40/0x90 [ 258.645825][ T9948] ? clear_bhb_loop+0x40/0x90 [ 258.650496][ T9948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.656384][ T9948] RIP: 0033:0x7f760d18f749 [ 258.660794][ T9948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.680399][ T9948] RSP: 002b:00007f760e026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.688820][ T9948] RAX: ffffffffffffffda RBX: 00007f760d3e5fa0 RCX: 00007f760d18f749 [ 258.696813][ T9948] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 258.704796][ T9948] RBP: 00007f760e026090 R08: 0000000000000000 R09: 0000000000000000 [ 258.712771][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.720738][ T9948] R13: 00007f760d3e6038 R14: 00007f760d3e5fa0 R15: 00007fffe8c004e8 [ 258.728713][ T9948] [ 258.767316][ T9948] Mem-Info: [ 258.771041][ T9948] active_anon:5532 inactive_anon:0 isolated_anon:0 [ 258.771041][ T9948] active_file:15477 inactive_file:39955 isolated_file:0 [ 258.771041][ T9948] unevictable:768 dirty:535 writeback:0 [ 258.771041][ T9948] slab_reclaimable:10174 slab_unreclaimable:90527 [ 258.771041][ T9948] mapped:24663 shmem:1361 pagetables:555 [ 258.771041][ T9948] sec_pagetables:0 bounce:0 [ 258.771041][ T9948] kernel_misc_reclaimable:0 [ 258.771041][ T9948] free:1358920 free_pcp:7602 free_cma:0 [ 258.873838][ T9954] validate_nla: 2 callbacks suppressed [ 258.873858][ T9954] netlink: 'syz.3.1339': attribute type 33 has an invalid length. [ 258.875791][ T9948] Node 0 active_anon:21928kB inactive_anon:0kB active_file:61908kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98652kB dirty:2440kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11188kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 258.965018][ T9948] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 259.030355][ T9948] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.078991][ T9960] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1341'. [ 259.087471][ T9948] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 259.094312][ T9948] Node 0 DMA32 free:1522888kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21884kB inactive_anon:0kB active_file:61908kB inactive_file:158300kB unevictable:1536kB writepending:2440kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:11340kB local_pcp:8340kB free_cma:0kB [ 259.153296][ T9948] lowmem_reserve[]: 0 0 1 1 1 [ 259.158111][ T9948] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.198868][ T9948] lowmem_reserve[]: 0 0 0 0 0 [ 259.203729][ T9948] Node 1 Normal free:3896144kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19584kB local_pcp:8224kB free_cma:0kB [ 259.238530][ T9948] lowmem_reserve[]: 0 0 0 0 0 [ 259.243725][ T9948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 259.257775][ T9948] Node 0 DMA32: 1147*4kB (UM) 965*8kB (UM) 622*16kB (UME) 835*32kB (UME) 462*64kB (UME) 224*128kB (UME) 71*256kB (UME) 34*512kB (UM) 3*1024kB (UM) 4*2048kB (UME) 334*4096kB (UM) = 1522132kB [ 259.278887][ T9948] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 259.292450][ T9948] Node 1 Normal: 250*4kB (UME) 59*8kB (UME) 49*16kB (UME) 46*32kB (UME) 15*64kB (UME) 6*128kB (UE) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (UM) = 3896144kB [ 259.317536][ T9948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.327825][ T9948] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.338984][ T9948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.348590][ T9948] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.358110][ T9948] 56793 total pagecache pages [ 259.362961][ T9948] 0 pages in swap cache [ 259.367873][ T9948] Free swap = 124996kB [ 259.374983][ T9948] Total swap = 124996kB [ 259.379303][ T9948] 2097051 pages RAM [ 259.383130][ T9948] 0 pages HighMem/MovableOnly [ 259.387912][ T9948] 416138 pages reserved [ 259.396106][ T9948] 0 pages cma reserved [ 259.542549][ T9962] FAULT_INJECTION: forcing a failure. [ 259.542549][ T9962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.562415][ T9962] CPU: 0 PID: 9962 Comm: syz.1.1342 Not tainted syzkaller #0 [ 259.569877][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.580133][ T9962] Call Trace: [ 259.583445][ T9962] [ 259.586408][ T9962] dump_stack_lvl+0x16c/0x230 [ 259.591178][ T9962] ? show_regs_print_info+0x20/0x20 [ 259.596410][ T9962] ? load_image+0x3b0/0x3b0 [ 259.600944][ T9962] ? __might_fault+0xaa/0x120 [ 259.605643][ T9962] ? __lock_acquire+0x7c80/0x7c80 [ 259.610716][ T9962] should_fail_ex+0x39d/0x4d0 [ 259.615427][ T9962] _copy_from_iter+0x1d3/0x1290 [ 259.620355][ T9962] ? __virt_addr_valid+0x18c/0x540 [ 259.625500][ T9962] ? __lock_acquire+0x7c80/0x7c80 [ 259.630552][ T9962] ? sock_alloc_send_pskb+0x875/0x990 [ 259.636319][ T9962] ? copyout_mc+0x70/0x70 [ 259.640674][ T9962] ? __virt_addr_valid+0x18c/0x540 [ 259.645803][ T9962] ? __virt_addr_valid+0x18c/0x540 [ 259.650950][ T9962] ? __virt_addr_valid+0x469/0x540 [ 259.656094][ T9962] ? __check_object_size+0x506/0xa30 [ 259.661432][ T9962] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 259.667189][ T9962] ? skb_put+0x11b/0x210 [ 259.671469][ T9962] tun_get_user+0x1583/0x3bf0 [ 259.676184][ T9962] ? aa_file_perm+0x120/0xec0 [ 259.680891][ T9962] ? aa_file_perm+0x3e8/0xec0 [ 259.685595][ T9962] ? rcu_read_unlock+0xa0/0xa0 [ 259.690392][ T9962] ? tun_get+0x1c/0x2e0 [ 259.694574][ T9962] ? __lock_acquire+0x7c80/0x7c80 [ 259.699623][ T9962] ? tun_get+0x1c/0x2e0 [ 259.703804][ T9962] tun_chr_write_iter+0x119/0x200 [ 259.708850][ T9962] vfs_write+0x43b/0x940 [ 259.713121][ T9962] ? file_end_write+0x250/0x250 [ 259.717970][ T9962] ? __fget_files+0x44a/0x4d0 [ 259.722658][ T9962] ? __fdget_pos+0x1d8/0x330 [ 259.727243][ T9962] ? ksys_write+0x75/0x250 [ 259.731671][ T9962] ksys_write+0x147/0x250 [ 259.736091][ T9962] ? __ia32_sys_read+0x90/0x90 [ 259.740853][ T9962] ? lockdep_hardirqs_on+0x98/0x150 [ 259.746058][ T9962] do_syscall_64+0x55/0xb0 [ 259.750474][ T9962] ? clear_bhb_loop+0x40/0x90 [ 259.755142][ T9962] ? clear_bhb_loop+0x40/0x90 [ 259.759812][ T9962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.765714][ T9962] RIP: 0033:0x7f5c0bd8f749 [ 259.770134][ T9962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.790091][ T9962] RSP: 002b:00007f5c0cbfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.798503][ T9962] RAX: ffffffffffffffda RBX: 00007f5c0bfe5fa0 RCX: 00007f5c0bd8f749 [ 259.806472][ T9962] RDX: 000000000000ffdd RSI: 0000200000000840 RDI: 0000000000000003 [ 259.814437][ T9962] RBP: 00007f5c0cbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 259.822404][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.830388][ T9962] R13: 00007f5c0bfe6038 R14: 00007f5c0bfe5fa0 R15: 00007ffde2913028 [ 259.838363][ T9962] [ 259.943917][ T9971] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1346'. [ 259.953903][ T9971] net_ratelimit: 95 callbacks suppressed [ 259.953919][ T9971] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 261.800473][ T9986] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1350'. [ 262.140875][ T9996] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1353'. [ 262.161223][ T9996] netlink: 'syz.2.1353': attribute type 25 has an invalid length. [ 262.185505][ T9996] netlink: 'syz.2.1353': attribute type 25 has an invalid length. [ 262.197632][ T9996] netlink: 'syz.2.1353': attribute type 28 has an invalid length. [ 262.210198][ T9996] netlink: 'syz.2.1353': attribute type 39 has an invalid length. [ 262.219700][ T9996] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1353'. [ 262.262825][ T9998] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1352'. [ 262.514439][T10006] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 263.253790][T10015] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1360'. [ 263.274735][T10015] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 263.386167][T10021] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1362'. [ 263.511524][T10027] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1364'. [ 263.931925][T10040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1369'. [ 264.247004][T10054] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.752597][T10060] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1374'. [ 264.857124][T10062] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1375'. [ 264.905800][T10064] netlink: 'syz.0.1376': attribute type 21 has an invalid length. [ 264.915798][T10064] ªªªªªª: renamed from vlan0 (while UP) [ 265.387948][T10079] ip6_vti0: mtu greater than device maximum [ 265.400173][T10079] pim6reg1: entered promiscuous mode [ 265.430367][T10079] pim6reg1: entered allmulticast mode [ 267.266278][T10110] __nla_validate_parse: 5 callbacks suppressed [ 267.266296][T10110] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1389'. [ 267.305736][T10110] netlink: 'syz.3.1389': attribute type 25 has an invalid length. [ 267.371079][T10110] netlink: 'syz.3.1389': attribute type 25 has an invalid length. [ 267.381001][T10110] netlink: 'syz.3.1389': attribute type 28 has an invalid length. [ 267.392228][T10110] netlink: 'syz.3.1389': attribute type 39 has an invalid length. [ 267.411220][T10110] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1389'. [ 267.476851][T10106] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1387'. [ 267.497316][T10106] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 267.833217][T10125] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1395'. [ 268.143370][ T3510] wlan1: Trigger new scan to find an IBSS to join [ 268.304169][T10130] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1397'. [ 268.403451][T10146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1401'. [ 268.429851][T10146] netlink: 'syz.3.1401': attribute type 25 has an invalid length. [ 268.508290][T10149] netlink: 'syz.3.1401': attribute type 25 has an invalid length. [ 268.531056][T10149] netlink: 'syz.3.1401': attribute type 28 has an invalid length. [ 268.597260][T10146] netlink: 'syz.3.1401': attribute type 39 has an invalid length. [ 268.617371][T10146] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1401'. [ 268.788654][T10158] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1406'. [ 269.122156][T10173] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1409'. [ 269.624196][T10192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1415'. [ 269.647771][T10192] netlink: 'syz.0.1415': attribute type 39 has an invalid length. [ 269.868398][T10196] Ÿë: port 1(veth0_to_team) entered blocking state [ 269.891430][T10196] Ÿë: port 1(veth0_to_team) entered disabled state [ 269.905572][T10196] veth0_to_team: entered allmulticast mode [ 269.917131][T10196] veth0_to_team: entered promiscuous mode [ 270.723698][T10216] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.654524][T10246] Ÿë: port 1(veth0_to_team) entered blocking state [ 271.661790][T10246] Ÿë: port 1(veth0_to_team) entered disabled state [ 271.679556][T10246] veth0_to_team: entered allmulticast mode [ 271.700054][T10246] veth0_to_team: entered promiscuous mode [ 272.573325][ T7402] O3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.149065][ T7402] wlan1: Trigger new scan to find an IBSS to join [ 273.155635][ T7402] wlan1: Trigger new scan to find an IBSS to join [ 274.183695][ T1111] wlan1: Creating new IBSS network, BSSID 86:6c:34:2e:50:77 [ 274.485579][T10269] __nla_validate_parse: 4 callbacks suppressed [ 274.485618][T10269] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1443'. [ 274.585927][T10277] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1445'. [ 274.841005][T10283] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1456'. [ 274.989572][T10287] Ÿë: port 1(veth0_to_team) entered blocking state [ 274.996356][T10287] Ÿë: port 1(veth0_to_team) entered disabled state [ 275.021540][T10287] veth0_to_team: entered allmulticast mode [ 275.037430][T10287] veth0_to_team: entered promiscuous mode [ 276.170563][T10318] FAULT_INJECTION: forcing a failure. [ 276.170563][T10318] name failslab, interval 1, probability 0, space 0, times 0 [ 276.199089][T10318] CPU: 0 PID: 10318 Comm: syz.2.1460 Not tainted syzkaller #0 [ 276.207491][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.217602][T10318] Call Trace: [ 276.220942][T10318] [ 276.223905][T10318] dump_stack_lvl+0x16c/0x230 [ 276.228631][T10318] ? show_regs_print_info+0x20/0x20 [ 276.234049][T10318] ? load_image+0x3b0/0x3b0 [ 276.238611][T10318] ? __might_sleep+0xe0/0xe0 [ 276.243246][T10318] ? __lock_acquire+0x7c80/0x7c80 [ 276.248313][T10318] should_fail_ex+0x39d/0x4d0 [ 276.253156][T10318] should_failslab+0x9/0x20 [ 276.257775][T10318] slab_pre_alloc_hook+0x59/0x310 [ 276.262847][T10318] ? kvmalloc_node+0x70/0x180 [ 276.267566][T10318] ? kvmalloc_node+0x70/0x180 [ 276.272276][T10318] __kmem_cache_alloc_node+0x53/0x260 [ 276.277708][T10318] ? kvmalloc_node+0x70/0x180 [ 276.282425][T10318] __kmalloc_node+0xa4/0x230 [ 276.287063][T10318] kvmalloc_node+0x70/0x180 [ 276.291612][T10318] alloc_netdev_mqs+0xa76/0x1040 [ 276.296609][T10318] ip6_tnl_locate+0x656/0x800 [ 276.301359][T10318] ? ip6_tnl_parm_from_user+0x340/0x340 [ 276.307212][T10318] ? __might_fault+0xaa/0x120 [ 276.311948][T10318] ? __might_fault+0xc6/0x120 [ 276.316652][T10318] ? __might_fault+0xaa/0x120 [ 276.321337][T10318] ? ip6_tnl_siocdevprivate+0x605/0xac0 [ 276.326921][T10318] ip6_tnl_siocdevprivate+0x629/0xac0 [ 276.332320][T10318] ? ip6_tnl_start_xmit+0x1140/0x1140 [ 276.337722][T10318] ? rcu_is_watching+0x15/0xb0 [ 276.342506][T10318] ? full_name_hash+0x92/0xe0 [ 276.347197][T10318] dev_ifsioc+0xae6/0xe20 [ 276.351536][T10318] ? dev_ioctl+0x1170/0x1170 [ 276.356553][T10318] ? dev_load+0x21/0x1f0 [ 276.360933][T10318] ? dev_load+0x21/0x1f0 [ 276.365201][T10318] dev_ioctl+0x87a/0x1170 [ 276.369545][T10318] sock_ioctl+0x726/0x7a0 [ 276.373970][T10318] ? sock_poll+0x3d0/0x3d0 [ 276.378404][T10318] ? bpf_lsm_file_ioctl+0x9/0x10 [ 276.383383][T10318] ? security_file_ioctl+0x80/0xa0 [ 276.388696][T10318] ? sock_poll+0x3d0/0x3d0 [ 276.393207][T10318] __se_sys_ioctl+0xfd/0x170 [ 276.397980][T10318] do_syscall_64+0x55/0xb0 [ 276.402398][T10318] ? clear_bhb_loop+0x40/0x90 [ 276.407164][T10318] ? clear_bhb_loop+0x40/0x90 [ 276.411849][T10318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.417740][T10318] RIP: 0033:0x7f1d7258f749 [ 276.422199][T10318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.441977][T10318] RSP: 002b:00007f1d73352038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.450479][T10318] RAX: ffffffffffffffda RBX: 00007f1d727e5fa0 RCX: 00007f1d7258f749 [ 276.458476][T10318] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 276.466467][T10318] RBP: 00007f1d73352090 R08: 0000000000000000 R09: 0000000000000000 [ 276.474456][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.482540][T10318] R13: 00007f1d727e6038 R14: 00007f1d727e5fa0 R15: 00007ffde1b24e08 [ 276.490636][T10318] [ 276.499126][T10322] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1461'. [ 276.535937][T10315] netlink: 'syz.0.1459': attribute type 17 has an invalid length. [ 276.544312][T10315] netlink: 'syz.0.1459': attribute type 16 has an invalid length. [ 276.559086][T10315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1459'. [ 278.109536][ T7408] wlan1: Trigger new scan to find an IBSS to join [ 278.249277][T10352] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1471'. [ 278.347641][T10357] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1472'. [ 279.707717][ T7408] wlan1: Creating new IBSS network, BSSID 66:34:a0:b9:22:f8 [ 279.907643][T10395] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1484'. [ 279.969249][T10397] netlink: set zone limit has 8 unknown bytes [ 281.425958][T10433] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1496'. [ 282.566873][T10453] sit0: left promiscuous mode [ 282.916457][T10472] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1508'. [ 283.116590][T10474] netlink: 'syz.3.1509': attribute type 10 has an invalid length. [ 283.139057][T10474] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1509'. [ 284.527488][T10507] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1519'. [ 284.959234][T10521] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1524'. [ 285.323463][T10521] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1524'. [ 285.341065][T10522] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1524'. [ 285.545005][T10529] FAULT_INJECTION: forcing a failure. [ 285.545005][T10529] name failslab, interval 1, probability 0, space 0, times 0 [ 285.568111][T10529] CPU: 1 PID: 10529 Comm: syz.3.1526 Not tainted syzkaller #0 [ 285.575814][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.585899][T10529] Call Trace: [ 285.589210][T10529] [ 285.592248][T10529] dump_stack_lvl+0x16c/0x230 [ 285.596946][T10529] ? show_regs_print_info+0x20/0x20 [ 285.602154][T10529] ? load_image+0x3b0/0x3b0 [ 285.606666][T10529] ? __might_sleep+0xe0/0xe0 [ 285.611346][T10529] ? __lock_acquire+0x7c80/0x7c80 [ 285.616407][T10529] should_fail_ex+0x39d/0x4d0 [ 285.621132][T10529] should_failslab+0x9/0x20 [ 285.625656][T10529] slab_pre_alloc_hook+0x59/0x310 [ 285.630693][T10529] ? rebuild_sched_domains_locked+0x608/0x2100 [ 285.636848][T10529] __kmem_cache_alloc_node+0x53/0x260 [ 285.642315][T10529] ? rebuild_sched_domains_locked+0x608/0x2100 [ 285.648472][T10529] kmalloc_trace+0x2a/0xe0 [ 285.652905][T10529] rebuild_sched_domains_locked+0x608/0x2100 [ 285.658888][T10529] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 285.665046][T10529] ? lock_chain_count+0x20/0x20 [ 285.669910][T10529] ? rebuild_sched_domains+0x40/0x40 [ 285.675199][T10529] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.681359][T10529] ? lockdep_hardirqs_on+0x98/0x150 [ 285.686560][T10529] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.692746][T10529] update_flag+0x44f/0x530 [ 285.697174][T10529] ? update_prstate+0x790/0x790 [ 285.702072][T10529] ? cpuset_write_u64+0x56/0x250 [ 285.707021][T10529] ? mutex_lock_nested+0x20/0x20 [ 285.711983][T10529] ? rcu_read_lock_any_held+0xb4/0x120 [ 285.717457][T10529] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 285.722934][T10529] ? _parse_integer_limit+0x19c/0x1e0 [ 285.728419][T10529] cpuset_write_u64+0x1fd/0x250 [ 285.733282][T10529] cgroup_file_write+0x575/0x660 [ 285.738456][T10529] ? read_lock_is_recursive+0x20/0x20 [ 285.743853][T10529] ? cgroup_seqfile_stop+0xd0/0xd0 [ 285.749073][T10529] ? __check_object_size+0x21c/0xa30 [ 285.754378][T10529] ? cgroup_seqfile_stop+0xd0/0xd0 [ 285.759516][T10529] kernfs_fop_write_iter+0x3b6/0x520 [ 285.764818][T10529] vfs_write+0x43b/0x940 [ 285.769076][T10529] ? file_end_write+0x250/0x250 [ 285.774107][T10529] ? __fget_files+0x44a/0x4d0 [ 285.778803][T10529] ? __fdget_pos+0x2a3/0x330 [ 285.783399][T10529] ? ksys_write+0x75/0x250 [ 285.787906][T10529] ksys_write+0x147/0x250 [ 285.792243][T10529] ? __ia32_sys_read+0x90/0x90 [ 285.797029][T10529] ? lockdep_hardirqs_on+0x98/0x150 [ 285.802327][T10529] do_syscall_64+0x55/0xb0 [ 285.806746][T10529] ? clear_bhb_loop+0x40/0x90 [ 285.811444][T10529] ? clear_bhb_loop+0x40/0x90 [ 285.816157][T10529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.822074][T10529] RIP: 0033:0x7fb4adb8f749 [ 285.826501][T10529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.846220][T10529] RSP: 002b:00007fb4ae9a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.854647][T10529] RAX: ffffffffffffffda RBX: 00007fb4adde5fa0 RCX: 00007fb4adb8f749 [ 285.862621][T10529] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 000000000000000d [ 285.870592][T10529] RBP: 00007fb4ae9a8090 R08: 0000000000000000 R09: 0000000000000000 [ 285.878562][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.886544][T10529] R13: 00007fb4adde6038 R14: 00007fb4adde5fa0 R15: 00007ffd38cfbe78 [ 285.894555][T10529] [ 286.152348][T10543] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1531'. [ 286.190947][T10546] netlink: 'syz.2.1532': attribute type 5 has an invalid length. [ 286.770593][T10568] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1538'. [ 287.438707][T10582] sit0: entered allmulticast mode [ 287.880162][T10587] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1543'. [ 288.204661][T10603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1548'. [ 288.309094][T10608] netlink: 'syz.0.1550': attribute type 29 has an invalid length. [ 288.333676][T10608] netlink: 'syz.0.1550': attribute type 29 has an invalid length. [ 288.367919][T10610] netlink: 'syz.0.1550': attribute type 29 has an invalid length. [ 288.445988][T10611] netlink: 'syz.2.1549': attribute type 1 has an invalid length. [ 288.503973][T10611] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1549'. [ 289.858448][T10642] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1556'. [ 290.575342][T10648] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 290.708974][T10657] netlink: 'syz.0.1560': attribute type 2 has an invalid length. [ 290.727942][T10657] netlink: 'syz.0.1560': attribute type 2 has an invalid length. [ 290.924140][T10659] netlink: 'syz.1.1561': attribute type 39 has an invalid length. [ 291.881562][T10685] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1567'. [ 292.422464][T10699] FAULT_INJECTION: forcing a failure. [ 292.422464][T10699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.465322][T10699] CPU: 0 PID: 10699 Comm: syz.1.1573 Not tainted syzkaller #0 [ 292.472840][T10699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.482909][T10699] Call Trace: [ 292.486203][T10699] [ 292.489148][T10699] dump_stack_lvl+0x16c/0x230 [ 292.493849][T10699] ? show_regs_print_info+0x20/0x20 [ 292.499327][T10699] ? load_image+0x3b0/0x3b0 [ 292.503849][T10699] ? __might_fault+0xaa/0x120 [ 292.508544][T10699] ? __lock_acquire+0x7c80/0x7c80 [ 292.513597][T10699] should_fail_ex+0x39d/0x4d0 [ 292.518294][T10699] _copy_from_iter+0x1d3/0x1290 [ 292.523176][T10699] ? copyout_mc+0x70/0x70 [ 292.527531][T10699] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 292.533531][T10699] ? lock_chain_count+0x20/0x20 [ 292.538406][T10699] ? _raw_spin_lock_irq+0xaf/0xe0 [ 292.543448][T10699] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 292.549006][T10699] ? page_copy_sane+0x4e/0x270 [ 292.553789][T10699] copy_page_from_iter+0x7b/0x100 [ 292.558832][T10699] pipe_write+0x878/0x1af0 [ 292.563287][T10699] ? pipe_read+0x12a0/0x12a0 [ 292.567889][T10699] ? end_current_label_crit_section+0x149/0x170 [ 292.574146][T10699] ? common_file_perm+0x198/0x1f0 [ 292.579191][T10699] vfs_write+0x43b/0x940 [ 292.583454][T10699] ? file_end_write+0x250/0x250 [ 292.588318][T10699] ? __fget_files+0x44a/0x4d0 [ 292.593013][T10699] ? __fdget_pos+0x1d8/0x330 [ 292.597881][T10699] ? ksys_write+0x75/0x250 [ 292.602310][T10699] ksys_write+0x147/0x250 [ 292.606655][T10699] ? __ia32_sys_read+0x90/0x90 [ 292.611438][T10699] ? lockdep_hardirqs_on+0x98/0x150 [ 292.616654][T10699] do_syscall_64+0x55/0xb0 [ 292.621084][T10699] ? clear_bhb_loop+0x40/0x90 [ 292.625844][T10699] ? clear_bhb_loop+0x40/0x90 [ 292.630511][T10699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.636571][T10699] RIP: 0033:0x7f5c0bd8f749 [ 292.640980][T10699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.660934][T10699] RSP: 002b:00007f5c0cbfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.669344][T10699] RAX: ffffffffffffffda RBX: 00007f5c0bfe5fa0 RCX: 00007f5c0bd8f749 [ 292.677307][T10699] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 0000000000000000 [ 292.685289][T10699] RBP: 00007f5c0cbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 292.693343][T10699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.701301][T10699] R13: 00007f5c0bfe6038 R14: 00007f5c0bfe5fa0 R15: 00007ffde2913028 [ 292.709273][T10699] [ 292.890070][T10707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1576'. [ 293.795083][T10722] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1580'. [ 294.041850][T10729] netlink: 'syz.1.1582': attribute type 39 has an invalid length. [ 294.805425][T10746] netlink: 'syz.1.1586': attribute type 10 has an invalid length. [ 294.837350][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.853816][T10746] bridge_slave_1: left allmulticast mode [ 294.860200][T10746] bridge_slave_1: left promiscuous mode [ 294.866115][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.894377][T10746] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 295.021805][T10752] FAULT_INJECTION: forcing a failure. [ 295.021805][T10752] name failslab, interval 1, probability 0, space 0, times 0 [ 295.069518][T10752] CPU: 0 PID: 10752 Comm: syz.0.1588 Not tainted syzkaller #0 [ 295.077033][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.087085][T10752] Call Trace: [ 295.090360][T10752] [ 295.093349][T10752] dump_stack_lvl+0x16c/0x230 [ 295.098024][T10752] ? show_regs_print_info+0x20/0x20 [ 295.103216][T10752] ? load_image+0x3b0/0x3b0 [ 295.107717][T10752] ? __might_sleep+0xe0/0xe0 [ 295.112300][T10752] ? __lock_acquire+0x7c80/0x7c80 [ 295.117317][T10752] should_fail_ex+0x39d/0x4d0 [ 295.121989][T10752] should_failslab+0x9/0x20 [ 295.126746][T10752] slab_pre_alloc_hook+0x59/0x310 [ 295.131775][T10752] ? apparmor_sk_alloc_security+0x77/0x100 [ 295.137576][T10752] __kmem_cache_alloc_node+0x53/0x260 [ 295.142946][T10752] ? apparmor_sk_alloc_security+0x77/0x100 [ 295.148751][T10752] kmalloc_trace+0x2a/0xe0 [ 295.153265][T10752] apparmor_sk_alloc_security+0x77/0x100 [ 295.158891][T10752] security_sk_alloc+0x6e/0xa0 [ 295.163659][T10752] sk_prot_alloc+0x101/0x210 [ 295.168239][T10752] ? sk_alloc+0x24/0x360 [ 295.172479][T10752] sk_alloc+0x3a/0x360 [ 295.176536][T10752] ? bpf_ctx_init+0x163/0x1a0 [ 295.181203][T10752] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 295.186739][T10752] bpf_prog_test_run_skb+0x39a/0x11c0 [ 295.192186][T10752] ? __fget_files+0x28/0x4d0 [ 295.196779][T10752] ? cpu_online+0x60/0x60 [ 295.201099][T10752] bpf_prog_test_run+0x321/0x390 [ 295.206027][T10752] __sys_bpf+0x440/0x800 [ 295.210261][T10752] ? bpf_link_show_fdinfo+0x350/0x350 [ 295.215634][T10752] ? lock_chain_count+0x20/0x20 [ 295.220498][T10752] __x64_sys_bpf+0x7c/0x90 [ 295.224900][T10752] do_syscall_64+0x55/0xb0 [ 295.229319][T10752] ? clear_bhb_loop+0x40/0x90 [ 295.233982][T10752] ? clear_bhb_loop+0x40/0x90 [ 295.238648][T10752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.244530][T10752] RIP: 0033:0x7f760d18f749 [ 295.248935][T10752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.268794][T10752] RSP: 002b:00007f760e026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.277198][T10752] RAX: ffffffffffffffda RBX: 00007f760d3e5fa0 RCX: 00007f760d18f749 [ 295.285160][T10752] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 295.293121][T10752] RBP: 00007f760e026090 R08: 0000000000000000 R09: 0000000000000000 [ 295.301089][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.309049][T10752] R13: 00007f760d3e6038 R14: 00007f760d3e5fa0 R15: 00007fffe8c004e8 [ 295.317043][T10752] [ 295.671395][T10763] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1591'. [ 295.880968][T10763] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1591'. [ 295.915039][T10762] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1591'. [ 296.176534][T10770] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1592'. [ 296.729706][T10783] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 297.655555][T10808] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1604'. [ 299.069960][ T7408] wlan1: Trigger new scan to find an IBSS to join [ 300.675448][T10824] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1610'. [ 300.861453][T10834] netlink: 'syz.3.1611': attribute type 11 has an invalid length. [ 300.942917][T10838] netlink: 'syz.1.1613': attribute type 4 has an invalid length. [ 300.952844][T10838] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1613'. [ 300.972545][T10838] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1613'. [ 300.999531][T10838] team_slave_0: entered allmulticast mode [ 301.006356][T10838] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 302.062223][T10855] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1618'. [ 303.151160][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 303.299895][T10885] netlink: 'syz.0.1627': attribute type 19 has an invalid length. [ 303.307805][T10885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1627'. [ 303.371500][T10885] netlink: 'syz.0.1627': attribute type 4 has an invalid length. [ 303.389054][T10885] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1627'. [ 303.557648][T10892] FAULT_INJECTION: forcing a failure. [ 303.557648][T10892] name failslab, interval 1, probability 0, space 0, times 0 [ 303.586841][T10892] CPU: 0 PID: 10892 Comm: syz.1.1629 Not tainted syzkaller #0 [ 303.594354][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.604449][T10892] Call Trace: [ 303.607750][T10892] [ 303.610698][T10892] dump_stack_lvl+0x16c/0x230 [ 303.615405][T10892] ? show_regs_print_info+0x20/0x20 [ 303.620628][T10892] ? load_image+0x3b0/0x3b0 [ 303.625142][T10892] ? __might_sleep+0xe0/0xe0 [ 303.629742][T10892] ? __lock_acquire+0x7c80/0x7c80 [ 303.634778][T10892] should_fail_ex+0x39d/0x4d0 [ 303.639475][T10892] should_failslab+0x9/0x20 [ 303.643985][T10892] slab_pre_alloc_hook+0x59/0x310 [ 303.649021][T10892] ? __kernfs_new_node+0x9d/0x7e0 [ 303.654065][T10892] ? rcu_is_watching+0x15/0xb0 [ 303.658847][T10892] kmem_cache_alloc+0x5a/0x2e0 [ 303.663619][T10892] ? __kernfs_new_node+0xd8/0x7e0 [ 303.668660][T10892] __kernfs_new_node+0xd8/0x7e0 [ 303.673518][T10892] ? kernfs_add_one+0x235/0x6b0 [ 303.678375][T10892] ? __lock_acquire+0x7c80/0x7c80 [ 303.683402][T10892] ? down_write+0x162/0x1f0 [ 303.687906][T10892] ? kernfs_new_node+0x260/0x260 [ 303.692859][T10892] ? down_write+0x162/0x1f0 [ 303.697366][T10892] ? up_write+0x1c3/0x410 [ 303.701704][T10892] kernfs_new_node+0x14c/0x260 [ 303.706482][T10892] __kernfs_create_file+0x4b/0x2e0 [ 303.711618][T10892] cgroup_addrm_files+0x73c/0xb80 [ 303.716839][T10892] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 303.722998][T10892] ? mark_lock+0x94/0x320 [ 303.727369][T10892] ? css_next_descendant_pre+0x183/0x260 [ 303.733012][T10892] css_populate_dir+0x197/0x390 [ 303.737885][T10892] cgroup_mkdir+0xbcb/0xde0 [ 303.742402][T10892] ? css_task_iter_end+0x2d0/0x2d0 [ 303.747533][T10892] ? css_task_iter_end+0x2d0/0x2d0 [ 303.752645][T10892] kernfs_iop_mkdir+0x250/0x3d0 [ 303.757509][T10892] vfs_mkdir+0x296/0x440 [ 303.761770][T10892] do_mkdirat+0x1d4/0x440 [ 303.766117][T10892] ? vfs_mkdir+0x440/0x440 [ 303.770550][T10892] __x64_sys_mkdirat+0x89/0xa0 [ 303.775501][T10892] do_syscall_64+0x55/0xb0 [ 303.779925][T10892] ? clear_bhb_loop+0x40/0x90 [ 303.784819][T10892] ? clear_bhb_loop+0x40/0x90 [ 303.789514][T10892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.795411][T10892] RIP: 0033:0x7f5c0bd8f749 [ 303.799833][T10892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.819448][T10892] RSP: 002b:00007f5c0cbfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 303.827872][T10892] RAX: ffffffffffffffda RBX: 00007f5c0bfe5fa0 RCX: 00007f5c0bd8f749 [ 303.835844][T10892] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 0000000000000003 [ 303.843919][T10892] RBP: 00007f5c0cbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 303.852258][T10892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.860250][T10892] R13: 00007f5c0bfe6038 R14: 00007f5c0bfe5fa0 R15: 00007ffde2913028 [ 303.868245][T10892] [ 303.887479][T10892] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 304.021948][T10897] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1631'. [ 304.216893][ T7405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.221217][ T11] O3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.545296][ T7409] wlan1: Creating new IBSS network, BSSID 0a:c3:ac:bf:6b:b1 [ 305.012171][T10913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1636'. [ 305.040432][T10913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1636'. [ 305.051716][T10913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1636'. [ 305.079555][T10913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1636'. [ 305.111365][T10915] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1637'. [ 306.307113][T10942] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1647'. [ 307.096328][T10959] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1651'. [ 307.471797][T10978] lo: entered allmulticast mode [ 308.513274][T10999] __nla_validate_parse: 2 callbacks suppressed [ 308.513292][T10999] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1667'. [ 308.985311][T11016] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1672'. [ 309.125204][T11025] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1675'. [ 309.537904][T11041] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1679'. [ 309.762932][ T7405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.103158][T11041] netlink: 'syz.3.1679': attribute type 10 has an invalid length. [ 310.114111][T11041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1679'. [ 310.123550][T11041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1679'. [ 310.133893][T11041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1679'. [ 311.160706][T11071] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1688'. [ 312.608356][T11097] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1695'. [ 312.623649][T11095] netlink: 'syz.2.1697': attribute type 13 has an invalid length. [ 312.642294][T11095] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1697'. [ 312.672819][T11095] erspan0: refused to change device tx_queue_len [ 312.701718][T11095] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 312.730633][T11097] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 312.750321][T11099] netlink: 'syz.1.1695': attribute type 10 has an invalid length. [ 312.800617][T11099] team0: Port device dummy0 added [ 312.845022][T11104] netlink: 'syz.1.1695': attribute type 10 has an invalid length. [ 312.905561][T11104] team0: Port device dummy0 removed [ 312.926399][T11104] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 313.836721][T11133] __nla_validate_parse: 4 callbacks suppressed [ 313.836737][T11133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1707'. [ 313.866706][T11133] netlink: 'syz.2.1707': attribute type 25 has an invalid length. [ 313.894135][T11133] netlink: 'syz.2.1707': attribute type 25 has an invalid length. [ 313.911652][T11133] netlink: 'syz.2.1707': attribute type 28 has an invalid length. [ 313.961483][T11133] netlink: 'syz.2.1707': attribute type 39 has an invalid length. [ 313.980970][T11133] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1707'. [ 314.416545][T11138] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1709'. [ 316.221132][T11170] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1718'. [ 316.525445][T11186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1724'. [ 316.574904][T11186] netlink: 'syz.2.1724': attribute type 25 has an invalid length. [ 316.598503][T11179] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.636820][T11186] netlink: 'syz.2.1724': attribute type 25 has an invalid length. [ 316.646331][T11186] netlink: 'syz.2.1724': attribute type 28 has an invalid length. [ 316.676972][T11186] netlink: 'syz.2.1724': attribute type 39 has an invalid length. [ 316.700902][T11186] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1724'. [ 317.420042][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.432676][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.066355][T11222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1736'. [ 318.127209][T11222] netlink: 'syz.2.1736': attribute type 25 has an invalid length. [ 318.227585][T11220] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1734'. [ 318.249952][T11225] netlink: 'syz.2.1736': attribute type 39 has an invalid length. [ 318.264211][T11222] netlink: 'syz.2.1736': attribute type 25 has an invalid length. [ 318.274410][T11222] netlink: 'syz.2.1736': attribute type 28 has an invalid length. [ 318.338945][T11225] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1736'. [ 318.562214][T11240] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 319.087367][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 319.602298][T11260] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1749'. [ 320.063377][T11275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1754'. [ 320.109743][T11275] netlink: 'syz.2.1754': attribute type 25 has an invalid length. [ 320.123172][T11275] netlink: 'syz.2.1754': attribute type 25 has an invalid length. [ 320.152509][T11275] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1754'. [ 320.475376][T11287] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1759'. [ 321.252107][T11308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1766'. [ 321.310834][T11308] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1766'. [ 322.048397][T11321] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1769'. [ 322.110037][ T7408] wlan1: Trigger new scan to find an IBSS to join [ 322.664139][T11342] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 322.688579][T11339] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1775'. [ 322.774532][T11347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1779'. [ 322.870995][T11347] validate_nla: 7 callbacks suppressed [ 322.871017][T11347] netlink: 'syz.0.1779': attribute type 39 has an invalid length. [ 323.795531][ T7405] wlan1: Creating new IBSS network, BSSID c2:84:75:1d:49:d1 [ 324.075959][T11362] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1784'. [ 324.657567][T11382] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1791'. [ 324.659629][T11377] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1789'. [ 324.686224][T11382] netlink: 'syz.2.1791': attribute type 25 has an invalid length. [ 324.720106][T11382] netlink: 'syz.2.1791': attribute type 25 has an invalid length. [ 324.767359][T11382] netlink: 'syz.2.1791': attribute type 28 has an invalid length. [ 324.939390][T11387] netlink: 'syz.2.1791': attribute type 39 has an invalid length. [ 325.072775][T11388] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1791'. [ 325.152009][ T7402] wlan1: Trigger new scan to find an IBSS to join [ 325.830668][T11399] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 326.382777][T11411] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1800'. [ 326.447493][T11413] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1801'. [ 326.913751][T11423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1805'. [ 326.937383][T11423] netlink: 'syz.1.1805': attribute type 25 has an invalid length. [ 326.968603][T11423] netlink: 'syz.1.1805': attribute type 25 has an invalid length. [ 326.979255][T11423] netlink: 'syz.1.1805': attribute type 28 has an invalid length. [ 326.995606][T11423] netlink: 'syz.1.1805': attribute type 39 has an invalid length. [ 327.016799][T11423] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1805'. [ 327.723660][T11439] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1810'. [ 327.803692][T11441] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1812'. [ 328.148377][T11444] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 328.409333][T11465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1818'. [ 328.434236][T11465] netlink: 'syz.3.1818': attribute type 25 has an invalid length. [ 328.456659][T11465] netlink: 'syz.3.1818': attribute type 25 has an invalid length. [ 328.488887][T11465] netlink: 'syz.3.1818': attribute type 28 has an invalid length. [ 328.514116][T11468] netlink: 'syz.3.1818': attribute type 39 has an invalid length. [ 330.110586][ T7408] wlan1: Trigger new scan to find an IBSS to join [ 330.168630][T11506] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 330.196502][T11509] __nla_validate_parse: 3 callbacks suppressed [ 330.196522][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1832'. [ 330.269291][T11509] netlink: 'syz.0.1832': attribute type 39 has an invalid length. [ 330.405053][T11512] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1834'. [ 330.804118][T11520] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1838'. [ 331.295261][ T7408] wlan1: Creating new IBSS network, BSSID 56:ac:7c:a4:9d:c4 [ 331.537963][T11533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1844'. [ 331.567648][T11533] netlink: 'syz.1.1844': attribute type 25 has an invalid length. [ 331.582723][T11533] netlink: 'syz.1.1844': attribute type 39 has an invalid length. [ 331.615659][T11533] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1844'. [ 331.837739][T11544] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1846'. [ 332.042799][T11550] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1848'. [ 332.112153][ T11] wlan1: Trigger new scan to find an IBSS to join [ 332.394820][T11564] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.487741][T11568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1855'. [ 332.499659][T11568] netlink: 'syz.3.1855': attribute type 25 has an invalid length. [ 332.515589][T11568] netlink: 'syz.3.1855': attribute type 39 has an invalid length. [ 332.524694][T11568] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1855'. [ 332.708170][T11576] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1858'. [ 333.178593][T11584] netlink: 'syz.3.1860': attribute type 58 has an invalid length. [ 333.871230][T11602] netlink: 'syz.1.1866': attribute type 25 has an invalid length. [ 333.916798][T11602] netlink: 'syz.1.1866': attribute type 39 has an invalid length. [ 334.348582][T11619] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.159273][ T7408] wlan1: Trigger new scan to find an IBSS to join [ 335.176693][ T7402] O3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 335.382236][T11633] __nla_validate_parse: 6 callbacks suppressed [ 335.382255][T11633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1878'. [ 335.432524][T11633] netlink: 'syz.2.1878': attribute type 25 has an invalid length. [ 335.513572][T11633] netlink: 'syz.2.1878': attribute type 39 has an invalid length. [ 335.542255][T11633] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1878'. [ 335.582933][T11635] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1879'. [ 336.050818][T11654] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1885'. [ 336.109177][ T7402] wlan1: Trigger new scan to find an IBSS to join [ 336.341811][T11665] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.835042][T11674] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1891'. [ 336.848369][T11674] netlink: 'syz.3.1891': attribute type 25 has an invalid length. [ 336.863822][T11674] netlink: 'syz.3.1891': attribute type 39 has an invalid length. [ 336.874348][T11674] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1891'. [ 336.917021][T11672] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1890'. [ 337.381675][T11691] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1897'. [ 338.009494][T11709] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1904'. [ 338.033570][T11710] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.045928][T11709] netlink: 'syz.2.1904': attribute type 25 has an invalid length. [ 338.109800][T11709] netlink: 'syz.2.1904': attribute type 28 has an invalid length. [ 338.159194][T11714] netlink: 'syz.2.1904': attribute type 39 has an invalid length. [ 338.180217][T11709] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1904'. [ 339.133451][T11741] netlink: 'syz.3.1913': attribute type 25 has an invalid length. [ 339.143338][T11741] netlink: 'syz.3.1913': attribute type 28 has an invalid length. [ 339.207593][ T3510] wlan1: Trigger new scan to find an IBSS to join [ 339.214469][ T11] wlan1: Trigger new scan to find an IBSS to join [ 339.319370][T11741] netlink: 'syz.3.1913': attribute type 39 has an invalid length. [ 339.950437][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 340.163906][T11767] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.179933][ T11] wlan1: Creating new IBSS network, BSSID 36:32:6a:7c:25:00 [ 340.613471][T11779] __nla_validate_parse: 6 callbacks suppressed [ 340.613508][T11779] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1926'. [ 340.738641][T11785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1929'. [ 340.755968][T11785] netlink: 'syz.1.1929': attribute type 25 has an invalid length. [ 340.764467][T11785] netlink: 'syz.1.1929': attribute type 28 has an invalid length. [ 340.779521][T11785] netlink: 'syz.1.1929': attribute type 39 has an invalid length. [ 340.788539][T11785] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1929'. [ 341.649809][T11801] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1934'. [ 341.763901][T11807] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1937'. [ 341.837976][T11809] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1938'. [ 342.033150][T11815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1940'. [ 342.077089][T11815] netlink: 'syz.2.1940': attribute type 25 has an invalid length. [ 342.093094][T11815] netlink: 'syz.2.1940': attribute type 28 has an invalid length. [ 342.118085][T11815] netlink: 'syz.2.1940': attribute type 39 has an invalid length. [ 342.132410][T11815] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1940'. [ 342.225998][T11823] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 342.444641][T11833] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1948'. [ 343.222065][T11846] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1951'. [ 343.369505][T11851] netlink: 'syz.0.1953': attribute type 39 has an invalid length. [ 344.112604][ T3510] wlan1: Trigger new scan to find an IBSS to join [ 344.385084][T11876] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.355721][T11898] netlink: 'syz.0.1968': attribute type 39 has an invalid length. [ 346.111985][ T7409] wlan1: Trigger new scan to find an IBSS to join [ 346.499839][T11922] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.771362][T11940] __nla_validate_parse: 5 callbacks suppressed [ 346.771383][T11940] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1980'. [ 346.790005][T11940] netlink: 'syz.3.1980': attribute type 25 has an invalid length. [ 346.803315][T11940] netlink: 'syz.3.1980': attribute type 25 has an invalid length. [ 346.811396][T11940] netlink: 'syz.3.1980': attribute type 28 has an invalid length. [ 346.823310][T11940] netlink: 'syz.3.1980': attribute type 39 has an invalid length. [ 346.833498][T11940] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1980'. [ 347.035127][T11947] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1982'. [ 347.156672][ T3510] wlan1: Trigger new scan to find an IBSS to join [ 347.247185][T11955] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1986'. [ 347.992515][T11965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1990'. [ 348.003034][T11965] netlink: 'syz.1.1990': attribute type 25 has an invalid length. [ 348.033287][T11965] netlink: 'syz.1.1990': attribute type 25 has an invalid length. [ 348.048905][T11965] netlink: 'syz.1.1990': attribute type 28 has an invalid length. [ 348.064998][T11965] netlink: 'syz.1.1990': attribute type 39 has an invalid length. [ 348.081185][T11965] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1990'. [ 348.180757][T11966] delete_channel: no stack [ 348.260742][T11973] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 348.399057][T11981] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1996'. [ 348.718745][T11993] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1998'. [ 349.047081][T12001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2002'. [ 349.068529][T12001] netlink: 'syz.1.2002': attribute type 25 has an invalid length. [ 349.113710][T12001] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2002'. [ 349.391831][T12005] delete_channel: no stack [ 350.111965][ T7409] wlan1: Trigger new scan to find an IBSS to join [ 350.118370][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 350.620017][T12031] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 350.705617][T12035] validate_nla: 3 callbacks suppressed [ 350.705636][T12035] netlink: 'syz.3.2014': attribute type 25 has an invalid length. [ 350.767651][T12035] netlink: 'syz.3.2014': attribute type 25 has an invalid length. [ 350.778523][T12035] netlink: 'syz.3.2014': attribute type 28 has an invalid length. [ 350.793708][T12035] netlink: 'syz.3.2014': attribute type 39 has an invalid length. [ 351.988014][T12063] FAULT_INJECTION: forcing a failure. [ 351.988014][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 352.035666][T12063] CPU: 1 PID: 12063 Comm: syz.0.2023 Not tainted syzkaller #0 [ 352.043197][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.053274][T12063] Call Trace: [ 352.056593][T12063] [ 352.059546][T12063] dump_stack_lvl+0x16c/0x230 [ 352.064256][T12063] ? show_regs_print_info+0x20/0x20 [ 352.069573][T12063] ? load_image+0x3b0/0x3b0 [ 352.074105][T12063] ? __lock_acquire+0x7c80/0x7c80 [ 352.079140][T12063] ? number+0xd21/0xf70 [ 352.083311][T12063] should_fail_ex+0x39d/0x4d0 [ 352.088013][T12063] should_failslab+0x9/0x20 [ 352.092563][T12063] slab_pre_alloc_hook+0x59/0x310 [ 352.097702][T12063] ? __kthread_create_on_node+0x1c7/0x3e0 [ 352.103452][T12063] ? __kthread_create_on_node+0x1c7/0x3e0 [ 352.109284][T12063] __kmem_cache_alloc_node+0x53/0x260 [ 352.114695][T12063] ? __kthread_create_on_node+0x1c7/0x3e0 [ 352.120446][T12063] __kmalloc_node_track_caller+0xa2/0x230 [ 352.126210][T12063] kvasprintf+0xdd/0x190 [ 352.130757][T12063] ? bust_spinlocks+0xd0/0xd0 [ 352.136010][T12063] __kthread_create_on_node+0x1c7/0x3e0 [ 352.141857][T12063] ? kthread_create_on_node+0x120/0x120 [ 352.147420][T12063] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 352.153394][T12063] ? rxrpc_direct_abort+0x330/0x330 [ 352.158600][T12063] ? rxrpc_direct_abort+0x330/0x330 [ 352.163788][T12063] kthread_create_on_node+0xde/0x120 [ 352.169157][T12063] ? __local_bh_enable_ip+0x12e/0x1c0 [ 352.174532][T12063] ? tsk_fork_get_node+0x70/0x70 [ 352.179481][T12063] ? __local_bh_enable_ip+0x12e/0x1c0 [ 352.184854][T12063] rxrpc_lookup_local+0xf59/0x1550 [ 352.189972][T12063] ? rxrpc_local_dont_fragment+0x70/0x70 [ 352.195599][T12063] ? none_clear+0x10/0x10 [ 352.199920][T12063] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 352.205983][T12063] ? lockdep_hardirqs_on+0x98/0x150 [ 352.211178][T12063] ? _local_bh_enable+0xa0/0xa0 [ 352.216110][T12063] rxrpc_sendmsg+0x30a/0x5b0 [ 352.220699][T12063] ? rxrpc_getsockopt+0x150/0x150 [ 352.225722][T12063] ____sys_sendmsg+0x5bf/0x950 [ 352.230490][T12063] ? __sys_sendmsg_sock+0x30/0x30 [ 352.235514][T12063] ? __import_iovec+0x5f2/0x860 [ 352.240454][T12063] ? import_iovec+0x73/0xa0 [ 352.244953][T12063] ___sys_sendmsg+0x220/0x290 [ 352.249629][T12063] ? __sys_sendmsg+0x270/0x270 [ 352.254426][T12063] __se_sys_sendmsg+0x1a5/0x270 [ 352.259273][T12063] ? perf_trace_preemptirq_template+0x281/0x340 [ 352.265508][T12063] ? __x64_sys_sendmsg+0x80/0x80 [ 352.270460][T12063] ? trace_sys_enter+0x1f/0x80 [ 352.275223][T12063] do_syscall_64+0x55/0xb0 [ 352.279635][T12063] ? clear_bhb_loop+0x40/0x90 [ 352.284304][T12063] ? clear_bhb_loop+0x40/0x90 [ 352.288973][T12063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.294858][T12063] RIP: 0033:0x7f760d18f749 [ 352.299319][T12063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.318921][T12063] RSP: 002b:00007f760e026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.327328][T12063] RAX: ffffffffffffffda RBX: 00007f760d3e5fa0 RCX: 00007f760d18f749 [ 352.335293][T12063] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000007 [ 352.343342][T12063] RBP: 00007f760e026090 R08: 0000000000000000 R09: 0000000000000000 [ 352.351305][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.359265][T12063] R13: 00007f760d3e6038 R14: 00007f760d3e5fa0 R15: 00007fffe8c004e8 [ 352.367237][T12063] [ 352.375293][ T7409] wlan1: Trigger new scan to find an IBSS to join [ 352.472065][T12062] delete_channel: no stack [ 352.638423][T12073] netlink: 'syz.2.2025': attribute type 25 has an invalid length. [ 352.667365][T12073] netlink: 'syz.2.2025': attribute type 25 has an invalid length. [ 352.690736][T12073] netlink: 'syz.2.2025': attribute type 28 has an invalid length. [ 352.727823][T12073] netlink: 'syz.2.2025': attribute type 39 has an invalid length. [ 352.754216][T12073] __nla_validate_parse: 5 callbacks suppressed [ 352.754234][T12073] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2025'. [ 352.914202][T12081] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2028'. [ 353.000858][T12083] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2029'. [ 353.068882][ T7402] wlan1: Trigger new scan to find an IBSS to join [ 353.075524][ T7402] wlan1: Trigger new scan to find an IBSS to join [ 353.219845][T12098] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 354.003453][T12113] netlink: 'syz.3.2038': attribute type 25 has an invalid length. [ 354.070012][T12113] netlink: 'syz.3.2038': attribute type 25 has an invalid length. [ 354.111105][T12113] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2038'. [ 354.208582][T12117] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2039'. [ 354.404929][T12126] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2042'. [ 355.587671][T12145] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 355.936670][T12153] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2051'. [ 356.110555][ T7402] wlan1: Trigger new scan to find an IBSS to join [ 356.117393][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 356.253996][T12165] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2055'. [ 357.040216][ T7402] wlan1: Creating new IBSS network, BSSID 8a:bc:20:a6:50:f8 [ 357.122914][T12180] validate_nla: 3 callbacks suppressed [ 357.122933][T12180] netlink: 'syz.3.2060': attribute type 25 has an invalid length. [ 357.161264][T12180] netlink: 'syz.3.2060': attribute type 25 has an invalid length. [ 357.191778][T12180] netlink: 'syz.3.2060': attribute type 28 has an invalid length. [ 357.268487][T12180] netlink: 'syz.3.2060': attribute type 39 has an invalid length. [ 357.363344][T12186] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2063'. [ 357.731900][T12204] FAULT_INJECTION: forcing a failure. [ 357.731900][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 357.760522][T12204] CPU: 0 PID: 12204 Comm: syz.3.2068 Not tainted syzkaller #0 [ 357.768512][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.778678][T12204] Call Trace: [ 357.781992][T12204] [ 357.784943][T12204] dump_stack_lvl+0x16c/0x230 [ 357.789657][T12204] ? show_regs_print_info+0x20/0x20 [ 357.794973][T12204] ? load_image+0x3b0/0x3b0 [ 357.799774][T12204] ? __might_sleep+0xe0/0xe0 [ 357.804388][T12204] ? __lock_acquire+0x7c80/0x7c80 [ 357.809437][T12204] should_fail_ex+0x39d/0x4d0 [ 357.814150][T12204] should_failslab+0x9/0x20 [ 357.818691][T12204] slab_pre_alloc_hook+0x59/0x310 [ 357.823746][T12204] ? tomoyo_encode+0x28b/0x540 [ 357.828536][T12204] ? tomoyo_encode+0x28b/0x540 [ 357.833327][T12204] __kmem_cache_alloc_node+0x53/0x260 [ 357.838735][T12204] ? tomoyo_encode+0x28b/0x540 [ 357.843521][T12204] __kmalloc+0xa4/0x240 [ 357.847772][T12204] tomoyo_encode+0x28b/0x540 [ 357.852452][T12204] tomoyo_realpath_from_path+0x592/0x5d0 [ 357.858095][T12204] tomoyo_path_number_perm+0x1ea/0x590 [ 357.863547][T12204] ? tomoyo_path_number_perm+0x1ba/0x590 [ 357.869202][T12204] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 357.874660][T12204] ? ksys_write+0x1c1/0x250 [ 357.879186][T12204] ? __fget_files+0x28/0x4d0 [ 357.883779][T12204] security_file_ioctl+0x70/0xa0 [ 357.888712][T12204] __se_sys_ioctl+0x48/0x170 [ 357.893302][T12204] do_syscall_64+0x55/0xb0 [ 357.897826][T12204] ? clear_bhb_loop+0x40/0x90 [ 357.902844][T12204] ? clear_bhb_loop+0x40/0x90 [ 357.907525][T12204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.913407][T12204] RIP: 0033:0x7fb4adb8f749 [ 357.917813][T12204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.937615][T12204] RSP: 002b:00007fb4ae9a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.946147][T12204] RAX: ffffffffffffffda RBX: 00007fb4adde5fa0 RCX: 00007fb4adb8f749 [ 357.954145][T12204] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000005 [ 357.962297][T12204] RBP: 00007fb4ae9a8090 R08: 0000000000000000 R09: 0000000000000000 [ 357.970445][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.978416][T12204] R13: 00007fb4adde6038 R14: 00007fb4adde5fa0 R15: 00007ffd38cfbe78 [ 357.986407][T12204] [ 357.993968][T12207] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.065116][T12204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 358.109225][ T11] wlan1: Trigger new scan to find an IBSS to join [ 358.164881][T12210] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2069'. [ 358.851561][T12222] netlink: 'syz.3.2073': attribute type 25 has an invalid length. [ 358.887654][T12222] netlink: 'syz.3.2073': attribute type 25 has an invalid length. [ 358.916300][T12222] netlink: 'syz.3.2073': attribute type 28 has an invalid length. [ 358.990247][T12222] netlink: 'syz.3.2073': attribute type 39 has an invalid length. [ 359.051306][T12225] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2073'. [ 359.216168][T12229] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2076'. [ 359.862322][T12234] IPv6: Can't replace route, no match found [ 359.885063][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 360.109854][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 360.239546][T12253] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 360.519586][T12258] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2082'. [ 361.034688][T12269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2086'. [ 361.066571][T12269] netlink: 'syz.0.2086': attribute type 39 has an invalid length. [ 361.241937][T12274] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2088'. [ 362.454880][T12295] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2094'. [ 362.882592][T12305] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 362.943904][T12308] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2098'. [ 363.000288][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2099'. [ 363.013574][T12314] netlink: 'syz.1.2099': attribute type 25 has an invalid length. [ 363.026842][T12314] netlink: 'syz.1.2099': attribute type 25 has an invalid length. [ 363.035446][T12314] netlink: 'syz.1.2099': attribute type 28 has an invalid length. [ 363.048450][T12314] netlink: 'syz.1.2099': attribute type 39 has an invalid length. [ 364.109058][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 364.281294][T12343] __nla_validate_parse: 1 callbacks suppressed [ 364.281330][T12343] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2109'. [ 364.376428][T12348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2111'. [ 364.421832][T12345] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2110'. [ 364.469390][T12348] netlink: 'syz.0.2111': attribute type 39 has an invalid length. [ 364.961826][T12368] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.108157][ T7405] wlan1: Trigger new scan to find an IBSS to join [ 365.738439][T12385] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2121'. [ 365.935395][T12394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2125'. [ 365.978039][T12394] netlink: 'syz.0.2125': attribute type 39 has an invalid length. [ 366.083954][T12391] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2124'. [ 366.371643][ T3510] O3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 367.072646][T12422] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.217610][T12429] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2135'. [ 367.325852][T12434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2137'. [ 367.348655][T12434] netlink: 'syz.3.2137': attribute type 25 has an invalid length. [ 367.364669][T12434] netlink: 'syz.3.2137': attribute type 25 has an invalid length. [ 367.374051][T12434] netlink: 'syz.3.2137': attribute type 28 has an invalid length. [ 367.388009][T12434] netlink: 'syz.3.2137': attribute type 39 has an invalid length. [ 367.402870][T12434] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2137'. [ 367.593070][T12436] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2138'. [ 367.657683][T12444] FAULT_INJECTION: forcing a failure. [ 367.657683][T12444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.672220][T12444] CPU: 0 PID: 12444 Comm: syz.0.2140 Not tainted syzkaller #0 [ 367.679722][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.689892][T12444] Call Trace: [ 367.693181][T12444] [ 367.696125][T12444] dump_stack_lvl+0x16c/0x230 [ 367.700821][T12444] ? show_regs_print_info+0x20/0x20 [ 367.706014][T12444] ? load_image+0x3b0/0x3b0 [ 367.710510][T12444] ? __might_fault+0xaa/0x120 [ 367.715189][T12444] ? __lock_acquire+0x7c80/0x7c80 [ 367.720228][T12444] should_fail_ex+0x39d/0x4d0 [ 367.724912][T12444] _copy_from_user+0x2f/0xe0 [ 367.729496][T12444] generic_map_update_batch+0x53f/0x810 [ 367.735046][T12444] ? rcu_read_unlock+0xa0/0xa0 [ 367.739815][T12444] ? __fdget+0x180/0x210 [ 367.744052][T12444] ? rcu_read_unlock+0xa0/0xa0 [ 367.749069][T12444] bpf_map_do_batch+0x3d7/0x610 [ 367.754179][T12444] __sys_bpf+0x31b/0x800 [ 367.758417][T12444] ? bpf_link_show_fdinfo+0x350/0x350 [ 367.763792][T12444] ? lock_chain_count+0x20/0x20 [ 367.768643][T12444] __x64_sys_bpf+0x7c/0x90 [ 367.773071][T12444] do_syscall_64+0x55/0xb0 [ 367.777484][T12444] ? clear_bhb_loop+0x40/0x90 [ 367.782154][T12444] ? clear_bhb_loop+0x40/0x90 [ 367.786911][T12444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.792796][T12444] RIP: 0033:0x7f760d18f749 [ 367.797203][T12444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.816886][T12444] RSP: 002b:00007f760e026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.825294][T12444] RAX: ffffffffffffffda RBX: 00007f760d3e5fa0 RCX: 00007f760d18f749 [ 367.833263][T12444] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 367.841223][T12444] RBP: 00007f760e026090 R08: 0000000000000000 R09: 0000000000000000 [ 367.849185][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.857144][T12444] R13: 00007f760d3e6038 R14: 00007f760d3e5fa0 R15: 00007fffe8c004e8 [ 367.865118][T12444] [ 368.123554][ T3510] wlan1: Trigger new scan to find an IBSS to join [ 369.152224][ T7405] wlan1: Trigger new scan to find an IBSS to join [ 369.568029][ T3510] wlan1: Creating new IBSS network, BSSID d6:0f:59:31:94:70 [ 369.583830][T12474] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.593573][ T7408] ------------[ cut here ]------------ [ 369.599424][ T7408] WARNING: CPU: 1 PID: 7408 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3c2/0x430 [ 369.609334][ T7408] Modules linked in: [ 369.613254][ T7408] CPU: 1 PID: 7408 Comm: kworker/u4:19 Not tainted syzkaller #0 [ 369.621060][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.631361][ T7408] Workqueue: cfg80211 cfg80211_event_work [ 369.637142][ T7408] RIP: 0010:__cfg80211_ibss_joined+0x3c2/0x430 [ 369.643443][ T7408] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 07 c1 b3 f7 0f 0b eb c3 e8 fe c0 b3 f7 <0f> 0b 4c 8b 6c 24 18 eb b5 e8 f0 c0 b3 f7 0f 0b e9 e8 fd ff ff e8 [ 369.663412][ T7408] RSP: 0018:ffffc9000c677a20 EFLAGS: 00010293 [ 369.669564][ T7408] RAX: ffffffff89d1df82 RBX: dffffc0000000000 RCX: ffff88802a228000 [ 369.677569][ T7408] RDX: 0000000000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f40 [ 369.685889][ T7408] RBP: ffffc9000c677af8 R08: ffffffff90da956f R09: 1ffffffff21b52ad [ 369.694020][ T7408] R10: dffffc0000000000 R11: fffffbfff21b52ae R12: ffff8880563e8c90 [ 369.702295][ T7408] R13: 1ffff920018cef4c R14: ffff88805d26b5b8 R15: 000000000000001f [ 369.710358][ T7408] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 369.719384][ T7408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.726002][ T7408] CR2: 00007f1d707d4f98 CR3: 000000007cd82000 CR4: 00000000003506e0 [ 369.734110][ T7408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.742185][ T7408] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 369.750235][ T7408] Call Trace: [ 369.753835][ T7408] [ 369.756792][ T7408] ? mutex_lock_nested+0x20/0x20 [ 369.761853][ T7408] ? trace_rdev_return_void+0x1c0/0x1c0 [ 369.767444][ T7408] cfg80211_process_wdev_events+0x3bc/0x550 [ 369.773430][ T7408] cfg80211_process_rdev_events+0xa1/0x110 [ 369.779335][ T7408] cfg80211_event_work+0x2f/0x40 [ 369.784295][ T7408] ? process_scheduled_works+0x957/0x15b0 [ 369.790104][ T7408] process_scheduled_works+0xa45/0x15b0 [ 369.795697][ T7408] ? assign_work+0x400/0x400 [ 369.800491][ T7408] ? assign_work+0x39e/0x400 [ 369.805111][ T7408] worker_thread+0xa55/0xfc0 [ 369.809798][ T7408] kthread+0x2fa/0x390 [ 369.813895][ T7408] ? pr_cont_work+0x560/0x560 [ 369.818603][ T7408] ? kthread_blkcg+0xd0/0xd0 [ 369.823269][ T7408] ret_from_fork+0x48/0x80 [ 369.827697][ T7408] ? kthread_blkcg+0xd0/0xd0 [ 369.832336][ T7408] ret_from_fork_asm+0x11/0x20 [ 369.837128][ T7408] [ 369.840256][ T7408] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 369.847570][ T7408] CPU: 1 PID: 7408 Comm: kworker/u4:19 Not tainted syzkaller #0 [ 369.855202][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.865353][ T7408] Workqueue: cfg80211 cfg80211_event_work [ 369.871080][ T7408] Call Trace: [ 369.874350][ T7408] [ 369.877270][ T7408] dump_stack_lvl+0x16c/0x230 [ 369.882033][ T7408] ? show_regs_print_info+0x20/0x20 [ 369.887240][ T7408] ? load_image+0x3b0/0x3b0 [ 369.891744][ T7408] panic+0x2c0/0x710 [ 369.895630][ T7408] ? bpf_jit_dump+0xd0/0xd0 [ 369.900146][ T7408] ? ret_from_fork_asm+0x11/0x20 [ 369.905102][ T7408] __warn+0x2e0/0x470 [ 369.909079][ T7408] ? __cfg80211_ibss_joined+0x3c2/0x430 [ 369.914969][ T7408] ? __cfg80211_ibss_joined+0x3c2/0x430 [ 369.920507][ T7408] report_bug+0x2be/0x4f0 [ 369.924829][ T7408] ? __cfg80211_ibss_joined+0x3c2/0x430 [ 369.930361][ T7408] ? __cfg80211_ibss_joined+0x3c2/0x430 [ 369.935987][ T7408] ? __cfg80211_ibss_joined+0x3c4/0x430 [ 369.941518][ T7408] handle_bug+0xcf/0x120 [ 369.945757][ T7408] exc_invalid_op+0x1a/0x50 [ 369.950268][ T7408] asm_exc_invalid_op+0x1a/0x20 [ 369.955128][ T7408] RIP: 0010:__cfg80211_ibss_joined+0x3c2/0x430 [ 369.961495][ T7408] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 07 c1 b3 f7 0f 0b eb c3 e8 fe c0 b3 f7 <0f> 0b 4c 8b 6c 24 18 eb b5 e8 f0 c0 b3 f7 0f 0b e9 e8 fd ff ff e8 [ 369.981097][ T7408] RSP: 0018:ffffc9000c677a20 EFLAGS: 00010293 [ 369.987158][ T7408] RAX: ffffffff89d1df82 RBX: dffffc0000000000 RCX: ffff88802a228000 [ 369.995552][ T7408] RDX: 0000000000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f40 [ 370.003774][ T7408] RBP: ffffc9000c677af8 R08: ffffffff90da956f R09: 1ffffffff21b52ad [ 370.011744][ T7408] R10: dffffc0000000000 R11: fffffbfff21b52ae R12: ffff8880563e8c90 [ 370.019704][ T7408] R13: 1ffff920018cef4c R14: ffff88805d26b5b8 R15: 000000000000001f [ 370.027669][ T7408] ? __cfg80211_ibss_joined+0x3c2/0x430 [ 370.033219][ T7408] ? mutex_lock_nested+0x20/0x20 [ 370.038161][ T7408] ? trace_rdev_return_void+0x1c0/0x1c0 [ 370.043702][ T7408] cfg80211_process_wdev_events+0x3bc/0x550 [ 370.049592][ T7408] cfg80211_process_rdev_events+0xa1/0x110 [ 370.055389][ T7408] cfg80211_event_work+0x2f/0x40 [ 370.060322][ T7408] ? process_scheduled_works+0x957/0x15b0 [ 370.066037][ T7408] process_scheduled_works+0xa45/0x15b0 [ 370.071592][ T7408] ? assign_work+0x400/0x400 [ 370.076263][ T7408] ? assign_work+0x39e/0x400 [ 370.080846][ T7408] worker_thread+0xa55/0xfc0 [ 370.085449][ T7408] kthread+0x2fa/0x390 [ 370.089503][ T7408] ? pr_cont_work+0x560/0x560 [ 370.094170][ T7408] ? kthread_blkcg+0xd0/0xd0 [ 370.098748][ T7408] ret_from_fork+0x48/0x80 [ 370.103162][ T7408] ? kthread_blkcg+0xd0/0xd0 [ 370.107740][ T7408] ret_from_fork_asm+0x11/0x20 [ 370.112508][ T7408] [ 370.115748][ T7408] Kernel Offset: disabled [ 370.120131][ T7408] Rebooting in 86400 seconds..