last executing test programs: 35.86369541s ago: executing program 0 (id=15988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0xa, 0x7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0xa956, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5e6c68b2ec608327, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair(0x8, 0xa, 0xfffffffe, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0xfffd, 0x0, 0x6f6}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 34.66881686s ago: executing program 0 (id=15992): socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x30, 0x0, 0x8001, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@map_val={0x18, 0x1b, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x3, 0x1, 0x9, 0x1, 0xffffffffffffffe0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x800}, @call={0x85, 0x0, 0x0, 0x65}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x74, &(0x7f00000003c0)=""/116, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x0, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x3, 0x10, 0x2}, {0x5, 0x1, 0xb, 0xb}, {0x0, 0x4, 0x10, 0xc}, {0x2, 0x2, 0xd, 0x9}, {0x3, 0x5, 0xf, 0x1}, {0x5, 0x4, 0x3, 0x3}], 0x10, 0x400}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x7fff, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x8}], 0x10}, 0x20000) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x43}, [@call={0x85, 0x0, 0x0, 0x81}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000c76d000000000000008100000081"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 33.505279649s ago: executing program 0 (id=15995): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe67, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xe, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) perf_event_open$cgroup(&(0x7f00000007c0)={0x5, 0x80, 0x0, 0x8, 0x0, 0x6, 0x0, 0x6, 0x4cc41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5d7, 0x2, @perf_bp={&(0x7f0000000040)}, 0x880c, 0x10001, 0xffffff3d, 0x0, 0xab70, 0x23b1, 0x7, 0x0, 0x10000, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080c571000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x21) 32.995049699s ago: executing program 0 (id=16000): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x50) socketpair(0x10, 0x3, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000080000000000000040000009578163402000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 32.4713475s ago: executing program 0 (id=16003): bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x30, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) 30.984079518s ago: executing program 0 (id=16009): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x2020) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000300000000000001000004001e00000000000002000000000000000000002e"], 0x0, 0x51}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006bafbc662f490697348d69e37eac7146fd00205928eb038d4faff801cfc4f137b027b5e52ce1748cd73a9cdfbc11d1fbcb970507c41b7cc16af90c9f5c674d0efd30e3c2abb512af9ca9710c31b3e7fecaa8a3b79e942e88d74aada932d654", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.839734596s ago: executing program 4 (id=16095): socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000100), 0x120) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11f631, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x73) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00', 0x20}) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) 7.167795666s ago: executing program 4 (id=16098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) socket$kcm(0xa, 0x7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0xa956, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5e6c68b2ec608327, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair(0x8, 0xa, 0xfffffffe, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0xfffd, 0x0, 0x6f6}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 6.890424172s ago: executing program 2 (id=16101): bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x30, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.439812159s ago: executing program 1 (id=16104): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x50) socketpair(0x10, 0x3, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000080000000000000040000009578163402000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 6.225699141s ago: executing program 3 (id=16105): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/uts\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000002200000000e3066dcb5f121755d80c4171fb8abf106958cf725a08430374f23f2d36bb6d3b63ccba75e8fa8696a00b9bdd37d2b510fe97ff1456902470bb9aa9835b8eb678ee840065215477c518", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e1703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(sm4-generic)\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001680)="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", 0x1000}], 0x1, &(0x7f0000000780)=[{0x90, 0x1, 0x8, "53f217d66b35bab8edaf42507c93e9847452dcdd9f3d8985ef86dd680bcbd14f254c431ab3f2046828b85ac8852075d4bd46b7f1664266c176b16e327bfd2ddde8891f64682c2c149af466ad443d504f1222d87b53107ef5568e8e9031118c6559b41d5d8a9abbb24fbbdb447beedbceba75249dd366ab19c0477c96c6d9"}, {0x28, 0x119, 0x6110, "57e94dd0d6b086ce211dba0950fd976a9c9271f835"}], 0xb8}, 0x20004044) 5.92060899s ago: executing program 4 (id=16106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3", 0x25}], 0x1}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x45, &(0x7f0000000440)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x180, 0x180, 0x6, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0xb, 0x3}, {0xc, 0x2}, {0x5, 0x1}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0xa}, @struct={0x0, 0x9, 0x0, 0x4, 0x1, 0x7, [{0xc, 0x1, 0x6}, {0xa, 0x5, 0x8001}, {0xf, 0x3, 0x10}, {0x7, 0x0, 0xfffffffe}, {0x4, 0x1, 0x2}, {0x3, 0x3, 0x4}, {0x8}, {0xa, 0x2, 0x400}, {0x5, 0x2, 0x3}]}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x67, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {0xd, 0x1}, {0x0, 0x3}, {0xe, 0x5}, {0xc, 0x4}]}, @enum64={0x2, 0x6, 0x0, 0x13, 0x1, 0x0, [{0xd, 0x6}, {0x9, 0x9, 0x3}, {0x3, 0xffff, 0x1}, {0x2, 0x7, 0x1}, {0xe, 0x9, 0x8001}, {0xa, 0x7, 0x2}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x78, 0x4}]}, {0x0, [0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000500)=""/157, 0x19e, 0x9d, 0x0, 0x0, 0x10000, @value=r0}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3ff, '\x00', 0x0, r4, 0x1, 0x2, 0x4}, 0x50) write$cgroup_subtree(r3, 0x0, 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000006100000095000000000000000000001100"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xfffffffc}, 0x50) 5.794362917s ago: executing program 3 (id=16107): socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000100), 0x120) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11f631, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x73) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00', 0x20}) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) 5.713896242s ago: executing program 2 (id=16108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) socket$kcm(0xa, 0x7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0xa956, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5e6c68b2ec608327, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair(0x8, 0xa, 0xfffffffe, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0xfffd, 0x0, 0x6f6}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 5.161341264s ago: executing program 1 (id=16109): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="14000000101c3507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f0000000280), 0x4) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @empty, 0x9}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000140)="75d73a70024c05930c6126bccceca7d827c310a828c89783fa5ee343c32e5479df67a9660fc280c5647a322841b767f41cfe48d962e23e1d485b60760f04ca00305922726629a117", 0x48}, {&(0x7f0000000400)="ac7e2d157468ebb6eaee30da06ee7d7d69fa58c6c61f4198b5a2c59cb0d8526713481ee6e79836107ad52035fa57f371c614de4e0947db43ac6aeff868f3a0b167242664318969937a9c0812b8794a8706eedf68c082040e346dc3f995587af7f906cee9ca6d47d579ff0a78e55fe16d96acda3606172ca1d83add4a3693c8ee562085b28a79164e4db9a55334aad34a990d8faf2abb40f83ac9e3ae3c795c00"/173, 0xad}, {&(0x7f0000000280)="2bdcd757f046d9c3d7f9b5ce466a0c027bb5438d", 0x14}, {&(0x7f00000004c0)="42a4ae7cfe62478d02ff4127baa1983648069aced4f3fb6edc0c65aeb1f734ea107c4816e39cd03b596733a95ff3efc1e8033017aba7aadf36d52fc026f8816edd44acf640a8fb6ae6f9adb9335fff70f91d26a77da4ca09a93d73fb28366e8c371561d8c60ad4f474a396e369b877f6703bcfbbe72a3a2275bd9bf239d8570ca775a89e4896a45373a1f6a50b78dbd2f106b858c3b296acfeb2e211cc588fbe52a84d8bb2bdf19a", 0xa8}, {&(0x7f0000000c40)="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", 0x3c7}, {&(0x7f00000008c0)="ae6755d9", 0x4}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2.615881425s ago: executing program 4 (id=16110): socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x30, 0x0, 0x8001, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@map_val={0x18, 0x1b, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x3, 0x1, 0x9, 0x1, 0xffffffffffffffe0, 0x10}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x800}, @call={0x85, 0x0, 0x0, 0x65}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x74, &(0x7f00000003c0)=""/116, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x0, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x3, 0x10, 0x2}, {0x5, 0x1, 0xb, 0xb}, {0x0, 0x4, 0x10, 0xc}, {0x2, 0x2, 0xd, 0x9}, {0x3, 0x5, 0xf, 0x1}, {0x5, 0x4, 0x3, 0x3}], 0x10, 0x400}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x7fff, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x8}], 0x10}, 0x20000) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x43}, [@call={0x85, 0x0, 0x0, 0x81}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000c76d000000000000008100000081"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.615077865s ago: executing program 1 (id=16111): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="140000004f007f049e", 0x9}, {&(0x7f0000000080)="00000000000000001b0000", 0xb}], 0x2}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) close(r1) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x1005, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&-0\t||') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010004008500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 2.552226258s ago: executing program 3 (id=16112): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1d}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 2.36722408s ago: executing program 2 (id=16113): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1d}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9a, 0x9a, 0x8, [@const={0x10, 0x0, 0x0, 0xa, 0x4}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x5e9}]}, @datasec={0x7, 0x8, 0x0, 0xf, 0x2, [{0x2, 0x5, 0x40775ede}, {0x5, 0x3ff, 0x4}, {0x4, 0xc1, 0xd}, {0x3, 0x6, 0xffffffda}, {0x2, 0x8, 0x7}, {0x1, 0x8, 0xfffff001}, {0x3, 0x4, 0x38e}, {0x2, 0x400, 0xb4}], "1654"}, @const={0xb, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x30, 0x30, 0x2e, 0x30, 0x30]}}, &(0x7f00000006c0)=""/252, 0xbc, 0xfc, 0x0, 0x4, 0x10000, @value=r2}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 2.211954109s ago: executing program 3 (id=16114): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], 0x18}, 0x20020000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e933"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 2.150356542s ago: executing program 4 (id=16115): perf_event_open(&(0x7f0000000040)={0x2, 0xff65, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x10040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x425, 0x8001}, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="02", 0x1}, {0x0, 0x500}], 0x2}, 0x400c090) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/25, 0x19}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee0ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac02781245bd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) 2.009322191s ago: executing program 3 (id=16116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000080000000000000000000000000000000053ed1c3cb0cb1bae51ff48e93758a63638b18031b1cde726af2f20762b2e1e73ba89d496a0fbf0acce9845061a0a6dbe8813f3ddae7b1bd018fc37583d18cec71eb5b2627ab1e6fd6573"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000500040000000100000001000000", @ANYRES32=r0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x1a890, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=r2, @ANYBLOB="6c916f1ede4fbcf755f2112eb4765d4c7c6372a9dfa527bc4b86812022e9", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2d00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x6000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d0000000003000000030000000000000a0300000004000000030000000000000011e13e309d0cd3b67d5100000005000000000000005f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0xfffffffffffffffe, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 1.816524412s ago: executing program 1 (id=16117): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/uts\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000002200000000e3066dcb5f121755d80c4171fb8abf106958cf725a08430374f23f2d36bb6d3b63ccba75e8fa8696a00b9bdd37d2b510fe97ff1456902470bb9aa9835b8eb678ee840065215477c518", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e1703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(sm4-generic)\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001680)="d24b5d4937128d074d1da4d99ebeb822a8cf75ce8a03c890af09a3565a265bcf9081b4bb412f099ffc3990d71bb3b8c305e7cdccdcc70666559023813af499b6f736fd70c6f0e0cf6918188ca468e82744dcaef402886e1d231e81cf851aafbde52f391b7919337d7cc9968ed7bc10f7dcd85dc222658ae7226f868c5e778fb77eb295729b0149fbfd1be2d8d12f2087f7f87c7a5de408c23a771888b2fd210f48cff21195b90ed6cb8060e9c7580ff398f3a85a4b0c81f365afe2cb0a775bad09d6c37f14aa375140a0c48ef7bc6a244d43736c1ecd8684fcae3c50736bc08cdf0e0bb47f59e20deaa8535d37eae22ae016243980c12296675752e1db97165f9c215f35b9182f2630c2e51b5b91cbbb6b74af649b0b67cf813ead3ca21407d7928aed727efe31deee7be7d321c8bd54c57a915de3af71fa86bd03cefba0f370ed8e7027afc14733d47e4a1b2c2a953b1d771a3d614256c0e1209a1c3487797bc09415278a3cff585e5886632c1a032412114131a05487a043709f61dd2503569de4a63c5f35e41235a179b1e4d46763ee35a7bdbd9e6a26f1391bce7d0fb6cc162589e44c7dc715c6dc9f96f6ee2787531cd9ea894bcae8b2dd183e5e6e9e749017a794628fa718b295240958b877b1a83c075a101f4bfc997d7df75c43d165d9acd6b0f4c5999b28510011deb7014b855f9b0fe8d125f13affe97a323b90bd642bb46e94a3b5eb9f201c6c3178b17260631ff1eb7e5ecde4daef1846a0ad75f186d15cf5a2edc88de74b0ffd7b9c97a03afa07da717d8ba1b7c93c9a76490d351ed91cff116cc648d08efb41bcd800250764f02b6f5ad25ac9a17d94272168867bc0524fee4aa4de85fa38dbecaa224a3562a02a53ccae6101aee08988e993a6c7cc8261aaf384d9d447bb1495e8083d6bb08204669b39a35922b3a67d8b5f9aeba66dae9d6ed43f09c6c0366536fba9c41a8b6cba9bea3348ab25b1a5ac0cb78c375304bcc947b1486ceffb6f667b4ceed9cafaec76ca8738228280e770f5643dafa25b5a1a48187b554f277ccac95e56263395fd88d31241d9b30fffc6491a787131c8f6a8f1729ae8b1d3422e28b10c85007a15971b9b82eb27e48d26bb4924e2339b23cf9e6ea969e7d4b0c4fab965f3ef2a7c26e976ca38be7bbd087ca6acee7a61bc7f6834f41500267ca12a235a585add21a8d31d9bb26992581b7522853d1e095b958b9440e5fc0f60e28ddd36e05b5db7bdcbe28cc19c4de3c43cac38a8e09e5b31ba2a49d5cfa947dcae0e3825b032d2a47a42dda2425c0806d697ae9260444c9970b8ed744edd3bb9a9d6b52807b0055e4ff4d926fa48afe1f78fbfeba4c86c12f942baabd73fb5cabf1df8bed8a78b5c0db751aa4915fec5045ff22a39ffdeffac6b00ea0757e84b5e2b0bfb6c41c5810c823449d35fde49e0eee73a73b05d124eafb2d8d0a136871965f462fb7c92de5ace8ad9471f71b6bf4058a1e88f222d49b0bf8b43df5b3ecef7507ef352e620681ceca0c52aa6169ea68f16e8b5c3174f3a77dc16767c088ddc41bbd74b87aeb9681e6f473cb63a0555d8c8ecfe920c47f33907e4e244cb7bd94176289c67297a6684582b9dbcd5d413ae92d5fd4a7f4bb32d9bbf18e97a6576a74082521ce7d372f4857046f35411cde75424c19e98ed4bd1d8e3ff35092bdefb9fbecf9e1ef339596b0875ffa43f24970778f6fba93cd5ee1202e7f3d22c2df15f15f8951b74fbf19b345f29487186e97b1f839b1036e1ff0dbedefe06036f10742f9f9a18a2058eb49084e247e64ad279a90aaf99c01648f5803896d9f3a50973a72e4b4846965ad78a754e423ea69d4866b846da90a23b7ad4b786ec02ad1a239bd406edb582d3410c2b5051a30ca7f3da4d6d2f38e4723cc842f56f74f4ccc2abe53d972a90142aeb153dc623064e7284cdf478205451cf42896bdfeb12dbd8430196ada8cadf61ec7108ff14a0bc75124b6c069823cf6b2ddb61b68f39079ebc512434f615ebec177c206620116521a13fd1841cc888f5acede71d786c254232456972b688fe3a6a3c1aab2bb11b1aa819652ab3341e567a68588c817504f2642fb4c68cc8978a5fe5ab2f7e64d5d2fd71294f46bed1c0447c3bd857a9ac9aaef227165313834169c7e4d59db20271b87b390bd08f79dc92cc3d8b1e9b72da2aaf68ff8e993c423e301a8d69b290ae3b1441458a004232173f400d60366575eff2155391e14c8490d37d8a4cf4d853227ad3b259b66cda99f576ae7daf071434a0ce79b16d2d459ba68cd65e5c2f407308f78c46dc69e4cc219c572c176849ef17ac4e47ab2d99efb43f2a1f44b3c367662fe05e6756234048b0d6f6641fb0c7f86bd52284c49596d3f1005d1e4fef548069736f6df201629485ae4361cd3c6d28ed8aed3a37cf316327ed7350341140c452b166f090e21daf0796856d2843b70f42df90378c4af3373e2ca03008d9f0afafff7ab96456a2495f11a625a458241958fdc23a43410738d04da53ffed05b4d8a156124ec67409ed110b39951c04057992d442afa825291707db0b5a2ebd02558a5d57cab3e29310246bb5b11a6a6d02fb5407c9b77914088b19449b284f88b034b3490ee0b638ed981fa5c6907f3bd9276b8e76bfc5f7b3c5df84f28b11ee43a8e8ff962ad7e317f7f7b67cfd66ebf503e23a1b4f35a1b64dafec95fcf0136f13cf18225025075a042d839674f986e53e56231a9624e909953e29e57f9fd3528a4b995c08cd88b4366f42ae1fbd4911794048498dd16a05aa8b491d4510a61a10dde3e097a599d4212004f297713d672fa7c45517c5325ae1b3641e23a8e2316da0360a3ba2555eecd66a7cfc52b14e3a51565a57bd3c3af80220c474697f59e74c54a30f02eef5649b9ca813015c5bf419e5f5f57a35b49fcc2ceb4fadaa6814c61638075eaab1ef2f3b4a7071b85ece46e6c070b24d56080aa902d0f17d0207574113ce0f3cd18df5b40e4607720a1575fb8d258d348647733fccd22832dc8620531c4fdc89d075bf86b29536087e4c828cc3ca0dd98bfe9320b150beaaf04db3e65d3cb339b28c411633f4fc21689831e3e06b6d5cd00ec36b08d89c96c20ad9bce0b4258c53f1702eab28c99ccafd911e7db5b326461a1c3236a5404cc1d5e716d6965ffb3f786c01ddac369b7b0e8b90cd7f92e99c76157b41391de42b6d161d26992c403fca57f55f2aa33faf8395fc8f5398e17554cecb6962346958853130766080f5871f3e2f049b46f84808baefd1a625355dcc999eedcc2f5687625312e417c06abf1ce6aea116b091d861284eead74ad29d8bf22fc8e98b7ca84669ed2c2aa5483e607a54fe951296fcde2b0b7524419c41abe1e5a103fad0236037b4c2013f7a458171185bd0e791d5b0d8c00b3178f391ab8109a57fa78b82db944d30b65d1e0df7a4443b2bbdb1a654457dadc650cbb4cbc0ec3e837dbc662be130d4a6944af4efa499fb881465be2d99406ca6abe952238662b9bd071d45a3ed37495598db2e4dd0893fad914550a41002561c381638df55020eddcfa5af3a16bdf0e286ecfdb9f9abe03acff312718020b35b7235e56df43d74fefdf5b9eb2ce2055cdc5d17e4a76cdb16bb45d298cd7ace57da86a012684b642531610925fcab87774ff9668dc19c266ef996862f26b83ab95a2b4c628104c24a08e20f8897228a8d3ca9cf63e66f1c1baad9b6f9acb444e966d04030914ec968047c7e3922de1a881336f0dd4899f8a26056d43d462dba3c46e41a11ae6c57f98b4fb6abc700d769ec2ad2b0e6cb8a2727f649d9b264cdf2f3b32608a0b7152c98cfc90d95594bbd032259aa8fcf2235f587c1dc277e5651db2a82782f716c13cae0fbee80a59039308c6f01aa4907efb58559c820b0f1473f24c9b16e91e9ee588183149a6d4f1945fa9279f588f6fb0f283dd12e07195e3f66fbc11502848cc1820dec3e70e4d8d7d627659c9f563e9bc8e35b099a97c88322772416ee122b537d2bc9afa4012e430a0f0c1435e7aab0ac7f94b6ba1b1a60dc7f7bf912d5444325039c4c5d41570989e59467d02f7589b87595852686236eb1fe8e2f4fd15074f35ee83a2324d5eeedff7e6fa5da10504c75392904843fcd61039a7c26562808e7b927502a458a96f5f100b05f83089b53a0eeeab1e8223c79a6c4e0afa51593c04ca3c6ee9f633b3223a06d9f4c37c3859df4191a8d9d4944ce3b8020d31d1618e7f990e98f85cc20ac03807b5243b59091c4be8be7093cc227e01b5fb8af7b4850fe1561775e653d1c6e05a9bda7a00ed5d89248339fe4fab66356241c74a765542f11f2adbda93456a05b109a98e28fbf973c9b1790c22a09bdc8564c6d4bd16cd08242f03093a17047bd569ba360b4214bcbf5c049347be9541e1303b7405fe68642a79ca2075e967927d94d9537559693ccffa8c38cfef7e9d1dccf2d6b33a392778a8362707696a5eb0a668ca6578c2c52f87b0f5c8ef057b9c3cb1b81696261d4b07bc42923fec526a2854fbe8f16efef8ae39fa5d368720582998bfa9aec4801753f24cbfbed9d340ccb5fef4ac9f9680bd7f6438b72b4ef36f740a431cec0c2239290c43a2216c588d33363ea562e274b15c679d6325a6fd864dd837c3c68d585e5d3341f831ebb9586d0a5c5221352d3646b019b45cd151ad64667690c7b31edf536b23ea54622785a020c79417bad784488d83bac7611b7345579ee7e304cccd4481d212bb3f6d04601f2a5a99d91839a2f656d62ded99744f424f3c8bba90b1f1633c6e5deed051e02df8e31049d6bf5dc08f31fbb7bac661f273541c504a1d87099b4548479281b6ae65e8ead3d1f430684e7aabd93fd25ba09c2213bc06416ce196b9b048da17e7bb7f0fe292bffcaeca0a8afe7e80be6c864b22b534d20d1ed299b77c05234f823447020616e9798add6ca7a1cdd055d40434e22f41c9ce1b6d432f9d26ab957579d297af7c556535001c7d49e3d2bb0dc2b2d11a6587cc5accc6ad6f2a9e2e0f031245b272acdb8224cdae463ce60ab1aa0e268e901e2469fad353ba35c515299dbf56d2585bf7b4e8b807a35670595702ae472d2652d0e10a9843f2ce1740af9e61ba32ccc33c6011a45113713bf7fb14a4393bf0f08d20f6c81cb6878874ee4f30acc5b03ecaaf400fa3a3c02f989c57833bd42f73b299f005f937adc063558aed6dc8e601c429a9aa3622ceac595673c533f10f03d4fe6b8053f68142f90967e2b0dfd3190ad5b39f2cfa9279158bedbae8740c0c8a1c23b3711d7c125911e2e0b45f852e5e45eec1175499d21626356e81297ebe1fa09247d6065173391f3a7df6a85ec979c4e35d48ab3a625c4d8b10f9b5fa8411a8c83f09cfb30c27b6f6b321cf1214c0c6b8024ecec75437eeb8b1d6c6c9c69e2742e3a68186099b09a656adbd0f4d9d88a1b1ffa1ada53a206db9ac63f4928403f88ad974fce3a39095a7112aa2d7af377f6ebeeaf0556519e66228488b2b2070a209d53ccdc9a8025766c66f6926373e39aa24ee0834edda65e0f75fe48f9236d32b6305cb45d0b864eb9af5acb4bc401dabcc5b532006bbf371d17194b44645fcbc65758fd20c7880cd5f0c0949a6ca5442ad4190f5913c58a36e6b6f840a6e1121fd1acbe35a4384d1ca314bcc694aac55af29d842744b8537fd04a9a2b568e0330a5fe71b88c58c1e5955fa73ef88ef0cf3af4523cfd9bc5c90b3afa0355a5a9c0e9185514918cd9bf28b75f732dcb3533e875071", 0x1000}], 0x1, &(0x7f0000000780)=[{0x90, 0x1, 0x8, "53f217d66b35bab8edaf42507c93e9847452dcdd9f3d8985ef86dd680bcbd14f254c431ab3f2046828b85ac8852075d4bd46b7f1664266c176b16e327bfd2ddde8891f64682c2c149af466ad443d504f1222d87b53107ef5568e8e9031118c6559b41d5d8a9abbb24fbbdb447beedbceba75249dd366ab19c0477c96c6d9"}, {0x28, 0x119, 0x6110, "57e94dd0d6b086ce211dba0950fd976a9c9271f835"}], 0xb8}, 0x20004044) 1.749237786s ago: executing program 2 (id=16118): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/uts\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000002200000000e3066dcb5f121755d80c4171fb8abf106958cf725a08430374f23f2d36bb6d3b63ccba75e8fa8696a00b9bdd37d2b510fe97ff1456902470bb9aa9835b8eb678ee840065215477c518", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e1703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000500)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(sm4-generic)\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001680)="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", 0x1000}], 0x1, &(0x7f0000000780)=[{0x90, 0x1, 0x8, "53f217d66b35bab8edaf42507c93e9847452dcdd9f3d8985ef86dd680bcbd14f254c431ab3f2046828b85ac8852075d4bd46b7f1664266c176b16e327bfd2ddde8891f64682c2c149af466ad443d504f1222d87b53107ef5568e8e9031118c6559b41d5d8a9abbb24fbbdb447beedbceba75249dd366ab19c0477c96c6d9"}, {0x28, 0x119, 0x6110, "57e94dd0d6b086ce211dba0950fd976a9c9271f835"}], 0xb8}, 0x20004044) 1.69395556s ago: executing program 4 (id=16119): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000403000028feffff620af0fff8ffffff61a4f0ff000000004d040000000000002d000000000000005504030001ed0a0025000000170000001c0080ff000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379d00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a607c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a59234ed56bc83987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d06c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292cfbe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d700ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec52d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d105800f000000000000ef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f6845b6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd51015dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d0800bf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3aee1ff8c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9000080ac970cc4fd0847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000000000000000000000000000be9ab5e329e962d96a283b6182c1cf6c8e350a7784ca39ecb9178f4118559f1eccb0b738a255146ebbc4357c16f94cd4"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x80, 0xb, 0x95, 0x6, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x4, @perf_config_ext={0xdd, 0x8}, 0x100, 0x4, 0x0, 0x6, 0x8, 0xc4b860f, 0x6, 0x0, 0x261, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r0, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x40001, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000cc0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000340)={0x1, 0x80, 0x3, 0x7, 0x1, 0xc, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x2802, 0xfffffffffffffffb, 0x10000, 0x9, 0x3, 0xfffffffb, 0x4, 0x0, 0x5, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000007180100002020782500000000002020207b1af8ff00000000bf9500000000000007010000f8ffffffb7024c0008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r6 = openat$cgroup_pressure(r4, &(0x7f0000000300)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000400)={'full', 0x20, 0x6, 0x20, 0x8}, 0x2f) close(r5) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x3, 0xe, 0x0, &(0x7f0000000500)="0000001afa3cb651ce2f2f009ec3", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x1a, &(0x7f0000000840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9, 0x12}, 0x20) setsockopt$sock_attach_bpf(r8, 0x6, 0x8, &(0x7f0000000240), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0x5}, @fwd={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x6}}, @restrict={0x9, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000080)=""/152, 0x5c, 0x98, 0x1, 0x4000001, 0x10000}, 0x28) 1.155761581s ago: executing program 1 (id=16120): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f01000000000000000000000d0200000000002e2e5f"], 0x0, 0x44}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x2, 0x1000, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x35}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002500)={0xffffffffffffffff, 0x58, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r3, &(0x7f0000002580)={&(0x7f0000001ec0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002400), 0x0, &(0x7f0000002540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x38}, 0x2000c041) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r5) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1ff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xecd3}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff80}]}, &(0x7f0000000080)='syzkaller\x00', 0x894, 0x9, &(0x7f00000001c0)=""/9, 0x40f00, 0x8, '\x00', r4, 0x25, r0, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[r2, r1, r2, r7, r2], &(0x7f00000006c0)=[{0x2, 0x1, 0xc, 0xc}, {0x5, 0x5, 0xe, 0x4}, {0x5, 0x2, 0x2, 0x7}, {0x0, 0x2, 0xa, 0x7}, {0x4, 0x2, 0x8, 0x2}, {0x0, 0x5, 0x4, 0xb}, {0x0, 0x5, 0x4, 0xb}, {0x2, 0x4, 0xb, 0x3}, {0x4, 0x4, 0x3, 0x5}, {0x1, 0x5, 0x10, 0x7}], 0x10, 0xfff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r8, 0x0, 0x0}, 0x10) 1.014237519s ago: executing program 3 (id=16121): socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000100), 0x120) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11f631, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x73) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00', 0x20}) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) 917.551915ms ago: executing program 2 (id=16122): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x94) 528.299µs ago: executing program 1 (id=16123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) socket$kcm(0xa, 0x7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0xa956, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5e6c68b2ec608327, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair(0x8, 0xa, 0xfffffffe, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0xfffd, 0x0, 0x6f6}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 0s ago: executing program 2 (id=16124): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x50) socketpair(0x10, 0x3, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.2.15284'. [ 2267.828365][T19065] netlink: 'syz.2.15284': attribute type 4 has an invalid length. [ 2267.876623][T19065] netlink: 'syz.2.15284': attribute type 3 has an invalid length. [ 2267.963834][T19065] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15284'. [ 2268.281698][T19072] mac80211_hwsim hwsim78 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2268.557588][ T11] wlan1: Creating new IBSS network, BSSID ae:fe:5e:ce:d0:80 [ 2269.285255][T19094] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15292'. [ 2269.501361][T19097] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15292'. [ 2270.916864][T19113] validate_nla: 3 callbacks suppressed [ 2270.916901][T19113] netlink: 'syz.1.15299': attribute type 21 has an invalid length. [ 2270.938616][T19113] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15299'. [ 2270.973060][T19113] netlink: 'syz.1.15299': attribute type 4 has an invalid length. [ 2270.989581][T19113] netlink: 'syz.1.15299': attribute type 3 has an invalid length. [ 2270.999443][T19113] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15299'. [ 2271.583128][ T4282] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 2271.871545][T19141] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2272.309098][T19157] FAULT_INJECTION: forcing a failure. [ 2272.309098][T19157] name failslab, interval 1, probability 0, space 0, times 0 [ 2272.379628][T19157] CPU: 0 PID: 19157 Comm: syz.2.15311 Not tainted syzkaller #0 [ 2272.387251][T19157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2272.397338][T19157] Call Trace: [ 2272.400642][T19157] [ 2272.403603][T19157] dump_stack_lvl+0x188/0x24e [ 2272.408325][T19157] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2272.414546][T19157] ? show_regs_print_info+0x12/0x12 [ 2272.419789][T19157] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2272.425984][T19157] ? dump_stack+0x5/0x12 [ 2272.430281][T19157] should_fail_ex+0x399/0x4d0 [ 2272.435018][T19157] should_failslab+0x5/0x20 [ 2272.439568][T19157] slab_pre_alloc_hook+0x59/0x310 [ 2272.444645][T19157] ? sctp_add_bind_addr+0x89/0x350 [ 2272.449771][T19157] __kmem_cache_alloc_node+0x4f/0x260 [ 2272.455161][T19157] ? sctp_add_bind_addr+0x89/0x350 [ 2272.460299][T19157] kmalloc_trace+0x26/0xe0 [ 2272.464747][T19157] sctp_add_bind_addr+0x89/0x350 [ 2272.469707][T19157] sctp_copy_local_addr_list+0x311/0x4e0 [ 2272.475369][T19157] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 2272.481126][T19157] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2272.487223][T19157] ? sctp_copy_one_addr+0x93/0x660 [ 2272.492351][T19157] ? sctp_copy_local_addr_list+0x1/0x4e0 [ 2272.498004][T19157] sctp_bind_addr_copy+0xaf/0x3c0 [ 2272.503056][T19157] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2272.509407][T19157] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2272.514716][T19157] ? __sctp_connect+0xd80/0xd80 [ 2272.519599][T19157] ? security_sctp_bind_connect+0x5b/0xb0 [ 2272.525343][T19157] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2272.530897][T19157] ? security_sctp_bind_connect+0x85/0xb0 [ 2272.536735][T19157] sctp_sendmsg+0x15b0/0x2940 [ 2272.541440][T19157] ? aa_sk_perm+0x7e1/0x950 [ 2272.545963][T19157] ? sctp_getsockopt+0x8a0/0x8a0 [ 2272.550924][T19157] ? rcu_is_watching+0x11/0xa0 [ 2272.555710][T19157] ? aa_af_perm+0x340/0x340 [ 2272.560233][T19157] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2272.566675][T19157] ? lockdep_hardirqs_on+0x94/0x140 [ 2272.571908][T19157] ? inet_sendmsg+0x78/0x2f0 [ 2272.576527][T19157] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2272.581850][T19157] ? security_socket_sendmsg+0x7c/0xa0 [ 2272.587348][T19157] ? inet_send_prepare+0x260/0x260 [ 2272.592495][T19157] ____sys_sendmsg+0x5be/0x970 [ 2272.597294][T19157] ? __sys_sendmsg_sock+0x30/0x30 [ 2272.602346][T19157] ? __import_iovec+0x315/0x500 [ 2272.607320][T19157] ? import_iovec+0x6f/0xa0 [ 2272.611847][T19157] ___sys_sendmsg+0x2a2/0x360 [ 2272.616568][T19157] ? __sys_sendmsg+0x290/0x290 [ 2272.621383][T19157] ? ktime_get_real_ts64+0x440/0x440 [ 2272.626714][T19157] __se_sys_sendmsg+0x1bb/0x2a0 [ 2272.631597][T19157] ? __x64_sys_sendmsg+0x80/0x80 [ 2272.636573][T19157] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2272.642498][T19157] do_syscall_64+0x4c/0xa0 [ 2272.646933][T19157] ? clear_bhb_loop+0x60/0xb0 [ 2272.651624][T19157] ? clear_bhb_loop+0x60/0xb0 [ 2272.656323][T19157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2272.662231][T19157] RIP: 0033:0x7f40ebd9acb9 [ 2272.666664][T19157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2272.686288][T19157] RSP: 002b:00007f40ecb9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2272.694713][T19157] RAX: ffffffffffffffda RBX: 00007f40ec015fa0 RCX: 00007f40ebd9acb9 [ 2272.702717][T19157] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 2272.710703][T19157] RBP: 00007f40ecb9c090 R08: 0000000000000000 R09: 0000000000000000 [ 2272.718691][T19157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2272.726675][T19157] R13: 00007f40ec016038 R14: 00007f40ec015fa0 R15: 00007ffc6fd2b3d8 [ 2272.734675][T19157] [ 2272.816250][T19161] netlink: 'syz.1.15313': attribute type 21 has an invalid length. [ 2272.824214][T19161] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15313'. [ 2272.840365][T19161] netlink: 'syz.1.15313': attribute type 4 has an invalid length. [ 2272.882028][T19161] netlink: 'syz.1.15313': attribute type 3 has an invalid length. [ 2272.904782][T19161] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15313'. [ 2272.978956][T19166] netlink: 'syz.2.15315': attribute type 17 has an invalid length. [ 2272.997137][T19166] netlink: 'syz.2.15315': attribute type 41 has an invalid length. [ 2273.017977][T19166] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15315'. [ 2273.552342][ T4282] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 2273.992377][T19189] FAULT_INJECTION: forcing a failure. [ 2273.992377][T19189] name failslab, interval 1, probability 0, space 0, times 0 [ 2274.077594][T19189] CPU: 0 PID: 19189 Comm: syz.0.15322 Not tainted syzkaller #0 [ 2274.085214][T19189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2274.095302][T19189] Call Trace: [ 2274.098615][T19189] [ 2274.101585][T19189] dump_stack_lvl+0x188/0x24e [ 2274.106316][T19189] ? show_regs_print_info+0x12/0x12 [ 2274.111557][T19189] ? load_image+0x400/0x400 [ 2274.116093][T19189] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2274.122636][T19189] ? lock_chain_count+0x20/0x20 [ 2274.127539][T19189] should_fail_ex+0x399/0x4d0 [ 2274.132270][T19189] should_failslab+0x5/0x20 [ 2274.136824][T19189] slab_pre_alloc_hook+0x59/0x310 [ 2274.141889][T19189] ? sctp_add_bind_addr+0x89/0x350 [ 2274.147059][T19189] __kmem_cache_alloc_node+0x4f/0x260 [ 2274.152473][T19189] ? sctp_add_bind_addr+0x89/0x350 [ 2274.157656][T19189] kmalloc_trace+0x26/0xe0 [ 2274.162139][T19189] sctp_add_bind_addr+0x89/0x350 [ 2274.167217][T19189] sctp_copy_local_addr_list+0x311/0x4e0 [ 2274.172894][T19189] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 2274.178658][T19189] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2274.184781][T19189] ? sctp_association_new+0x15f0/0x25d0 [ 2274.190393][T19189] ? sctp_v4_is_any+0x31/0x50 [ 2274.195120][T19189] ? sctp_copy_one_addr+0x93/0x660 [ 2274.200293][T19189] sctp_bind_addr_copy+0xaf/0x3c0 [ 2274.205398][T19189] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2274.211798][T19189] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2274.217151][T19189] ? __sctp_connect+0xd80/0xd80 [ 2274.222042][T19189] ? _local_bh_enable+0xa0/0xa0 [ 2274.226925][T19189] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2274.232788][T19189] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2274.238653][T19189] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2274.244240][T19189] ? security_sctp_bind_connect+0x85/0xb0 [ 2274.250002][T19189] sctp_sendmsg+0x15b0/0x2940 [ 2274.254758][T19189] ? sctp_getsockopt+0x8a0/0x8a0 [ 2274.259753][T19189] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2274.265972][T19189] ? lockdep_hardirqs_on+0x94/0x140 [ 2274.271231][T19189] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2274.277445][T19189] ? inet_sendmsg+0x78/0x2f0 [ 2274.282091][T19189] ? inet_send_prepare+0x260/0x260 [ 2274.287249][T19189] ____sys_sendmsg+0x5be/0x970 [ 2274.292073][T19189] ? __sys_sendmsg_sock+0x30/0x30 [ 2274.297146][T19189] ? __import_iovec+0x315/0x500 [ 2274.302039][T19189] ? import_iovec+0x6f/0xa0 [ 2274.306583][T19189] ___sys_sendmsg+0x2a2/0x360 [ 2274.311313][T19189] ? __sys_sendmsg+0x290/0x290 [ 2274.316154][T19189] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2274.321950][T19189] __se_sys_sendmsg+0x1bb/0x2a0 [ 2274.326851][T19189] ? __x64_sys_sendmsg+0x80/0x80 [ 2274.331829][T19189] ? lockdep_hardirqs_on+0x94/0x140 [ 2274.337090][T19189] ? __x64_sys_sendmsg+0x69/0x80 [ 2274.342099][T19189] do_syscall_64+0x4c/0xa0 [ 2274.346559][T19189] ? clear_bhb_loop+0x60/0xb0 [ 2274.351274][T19189] ? clear_bhb_loop+0x60/0xb0 [ 2274.355985][T19189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2274.361916][T19189] RIP: 0033:0x7f7f2f39acb9 [ 2274.366359][T19189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2274.386094][T19189] RSP: 002b:00007f7f30349028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2274.394563][T19189] RAX: ffffffffffffffda RBX: 00007f7f2f615fa0 RCX: 00007f7f2f39acb9 [ 2274.402574][T19189] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 2274.410588][T19189] RBP: 00007f7f30349090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.418597][T19189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2274.426612][T19189] R13: 00007f7f2f616038 R14: 00007f7f2f615fa0 R15: 00007ffe47180018 [ 2274.434641][T19189] [ 2274.464801][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2274.644362][T19199] netlink: 112 bytes leftover after parsing attributes in process `syz.2.15325'. [ 2274.723071][T19199] netlink: 'syz.2.15325': attribute type 28 has an invalid length. [ 2274.732619][T19199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15325'. [ 2274.823408][T19201] netlink: 'syz.3.15327': attribute type 21 has an invalid length. [ 2274.831804][T19201] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15327'. [ 2274.864805][T19201] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15327'. [ 2275.084553][T19212] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15332'. [ 2275.257102][ T4282] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 2276.715610][T19242] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15340'. [ 2276.820360][T19254] validate_nla: 4 callbacks suppressed [ 2276.820381][T19254] netlink: 'syz.1.15343': attribute type 12 has an invalid length. [ 2276.868648][T19254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15343'. [ 2277.089878][T19258] netlink: 'syz.1.15343': attribute type 1 has an invalid length. [ 2277.135110][T19258] netlink: 'syz.1.15343': attribute type 1 has an invalid length. [ 2277.143377][T19258] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15343'. [ 2277.494750][T19268] netlink: 'syz.4.15348': attribute type 17 has an invalid length. [ 2277.504192][T19268] netlink: 'syz.4.15348': attribute type 41 has an invalid length. [ 2277.512345][T19268] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15348'. [ 2277.696031][T29479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2277.873148][ T4282] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 2278.494926][T29479] wlan1: Trigger new scan to find an IBSS to join [ 2279.142467][T19307] netlink: 'syz.0.15360': attribute type 17 has an invalid length. [ 2279.156101][T19307] netlink: 'syz.0.15360': attribute type 41 has an invalid length. [ 2279.164057][T19307] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15360'. [ 2279.202375][T19311] netlink: 'syz.3.15364': attribute type 12 has an invalid length. [ 2279.224869][T19311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15364'. [ 2279.371679][T19311] netlink: 'syz.3.15364': attribute type 1 has an invalid length. [ 2279.398920][T19311] netlink: 'syz.3.15364': attribute type 1 has an invalid length. [ 2279.419693][T19311] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.15364'. [ 2279.479078][ T46] wlan1: Creating new IBSS network, BSSID 4a:bf:f8:e2:e6:15 [ 2279.492804][T19317] netlink: 10 bytes leftover after parsing attributes in process `syz.2.15366'. [ 2280.005428][T19328] mac80211_hwsim hwsim78 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2280.303895][T19339] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2280.682311][T19360] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.15377'. [ 2280.906801][T19363] FAULT_INJECTION: forcing a failure. [ 2280.906801][T19363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2280.932247][T19363] CPU: 0 PID: 19363 Comm: syz.1.15379 Not tainted syzkaller #0 [ 2280.939850][T19363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2280.949941][T19363] Call Trace: [ 2280.953242][T19363] [ 2280.956209][T19363] dump_stack_lvl+0x188/0x24e [ 2280.960944][T19363] ? show_regs_print_info+0x12/0x12 [ 2280.966215][T19363] ? load_image+0x400/0x400 [ 2280.970750][T19363] ? __might_fault+0xa6/0x120 [ 2280.975465][T19363] should_fail_ex+0x399/0x4d0 [ 2280.980194][T19363] copyin+0x1b/0x120 [ 2280.984145][T19363] _copy_from_iter+0x447/0x1130 [ 2280.989041][T19363] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 2280.994463][T19363] ? copyout_mc+0x110/0x110 [ 2280.999012][T19363] ? __virt_addr_valid+0x188/0x540 [ 2281.004159][T19363] ? __virt_addr_valid+0x188/0x540 [ 2281.009308][T19363] ? __virt_addr_valid+0x465/0x540 [ 2281.014548][T19363] ? __check_object_size+0x500/0xa40 [ 2281.019888][T19363] skb_copy_datagram_from_iter+0xef/0x690 [ 2281.025738][T19363] ? skb_put+0x117/0x210 [ 2281.030025][T19363] unix_stream_sendmsg+0x4d5/0xa70 [ 2281.035188][T19363] ? unix_show_fdinfo+0x2c0/0x2c0 [ 2281.040253][T19363] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2281.046722][T19363] ? aa_sock_msg_perm+0x94/0x150 [ 2281.051697][T19363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2281.057017][T19363] ? security_socket_sendmsg+0x7c/0xa0 [ 2281.062520][T19363] ? unix_show_fdinfo+0x2c0/0x2c0 [ 2281.067576][T19363] ____sys_sendmsg+0x5be/0x970 [ 2281.072394][T19363] ? __sys_sendmsg_sock+0x30/0x30 [ 2281.077470][T19363] ? __import_iovec+0x315/0x500 [ 2281.082362][T19363] ? import_iovec+0x6f/0xa0 [ 2281.086896][T19363] ___sys_sendmsg+0x2a2/0x360 [ 2281.091620][T19363] ? __sys_sendmsg+0x290/0x290 [ 2281.096416][T19363] ? __lock_acquire+0x7d10/0x7d10 [ 2281.101482][T19363] __se_sys_sendmsg+0x1bb/0x2a0 [ 2281.106356][T19363] ? __x64_sys_sendmsg+0x80/0x80 [ 2281.111321][T19363] ? lockdep_hardirqs_on+0x94/0x140 [ 2281.116547][T19363] do_syscall_64+0x4c/0xa0 [ 2281.120994][T19363] ? clear_bhb_loop+0x60/0xb0 [ 2281.125686][T19363] ? clear_bhb_loop+0x60/0xb0 [ 2281.130376][T19363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2281.136281][T19363] RIP: 0033:0x7f3e4b99acb9 [ 2281.140710][T19363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.160337][T19363] RSP: 002b:00007f3e4c7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2281.168768][T19363] RAX: ffffffffffffffda RBX: 00007f3e4bc15fa0 RCX: 00007f3e4b99acb9 [ 2281.176785][T19363] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 2281.184800][T19363] RBP: 00007f3e4c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.192788][T19363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.200771][T19363] R13: 00007f3e4bc16038 R14: 00007f3e4bc15fa0 R15: 00007ffdc4959e98 [ 2281.208775][T19363] [ 2281.681765][T19385] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2281.759060][T19387] FAULT_INJECTION: forcing a failure. [ 2281.759060][T19387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2281.802689][T19387] CPU: 0 PID: 19387 Comm: syz.3.15387 Not tainted syzkaller #0 [ 2281.810328][T19387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2281.820433][T19387] Call Trace: [ 2281.823756][T19387] [ 2281.826734][T19387] dump_stack_lvl+0x188/0x24e [ 2281.831498][T19387] ? show_regs_print_info+0x12/0x12 [ 2281.836774][T19387] ? load_image+0x400/0x400 [ 2281.841360][T19387] ? __lock_acquire+0x7d10/0x7d10 [ 2281.846472][T19387] should_fail_ex+0x399/0x4d0 [ 2281.851231][T19387] _copy_from_user+0x2c/0x170 [ 2281.855986][T19387] __sys_bpf+0x2ea/0x780 [ 2281.860305][T19387] ? bpf_link_show_fdinfo+0x380/0x380 [ 2281.865825][T19387] ? lock_chain_count+0x20/0x20 [ 2281.870777][T19387] __x64_sys_bpf+0x78/0x90 [ 2281.875264][T19387] do_syscall_64+0x4c/0xa0 [ 2281.879752][T19387] ? clear_bhb_loop+0x60/0xb0 [ 2281.884490][T19387] ? clear_bhb_loop+0x60/0xb0 [ 2281.889272][T19387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2281.895257][T19387] RIP: 0033:0x7f235239acb9 [ 2281.899733][T19387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.919407][T19387] RSP: 002b:00007f2353295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2281.927894][T19387] RAX: ffffffffffffffda RBX: 00007f2352615fa0 RCX: 00007f235239acb9 [ 2281.935930][T19387] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000002 [ 2281.943952][T19387] RBP: 00007f2353295090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.951978][T19387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.960003][T19387] R13: 00007f2352616038 R14: 00007f2352615fa0 R15: 00007ffdb45d3468 [ 2281.968101][T19387] [ 2282.450763][T19404] validate_nla: 2 callbacks suppressed [ 2282.450789][T19404] netlink: 'syz.4.15391': attribute type 1 has an invalid length. [ 2282.584104][T19404] netlink: 'syz.4.15391': attribute type 1 has an invalid length. [ 2282.667985][T19404] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.15391'. [ 2282.796130][T19406] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2282.845283][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.851709][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.496081][T29479] wlan1: Trigger new scan to find an IBSS to join [ 2285.458757][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2286.079338][T19452] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15405'. [ 2286.905276][T19474] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2287.240689][T19487] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2287.454931][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2288.213990][T19514] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2288.901245][T19535] netlink: 'syz.1.15425': attribute type 10 has an invalid length. [ 2288.969965][T19535] netlink: 56823 bytes leftover after parsing attributes in process `syz.1.15425'. [ 2289.457561][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2289.550990][T19550] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2289.768487][T19557] netlink: 'syz.3.15430': attribute type 27 has an invalid length. [ 2289.831163][T19557] netlink: 'syz.3.15430': attribute type 21 has an invalid length. [ 2289.841976][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15430'. [ 2290.417538][T11953] wlan1: Creating new IBSS network, BSSID 62:02:a8:cf:12:c1 [ 2290.521870][T29479] wlan1: Trigger new scan to find an IBSS to join [ 2291.103035][T19586] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2291.622861][T19615] netlink: 'syz.1.15445': attribute type 1 has an invalid length. [ 2291.671373][T19615] netlink: 'syz.1.15445': attribute type 1 has an invalid length. [ 2291.713615][T19615] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15445'. [ 2292.255017][T19620] netlink: 'syz.3.15458': attribute type 1 has an invalid length. [ 2292.265117][T19620] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.15458'. [ 2292.453146][T19624] netlink: 10 bytes leftover after parsing attributes in process `syz.4.15448'. [ 2293.470915][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2293.477795][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2293.491642][T29471] wlan1: Trigger new scan to find an IBSS to join [ 2294.464004][ T46] wlan1: Creating new IBSS network, BSSID ba:c8:41:b8:3f:e7 [ 2294.880729][T19646] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.15455'. [ 2295.137474][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 2295.454906][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2296.101908][T19655] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2296.389472][T19671] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15463'. [ 2296.476316][T19673] FAULT_INJECTION: forcing a failure. [ 2296.476316][T19673] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.490667][T11953] wlan1: Creating new IBSS network, BSSID de:0e:f1:45:e8:68 [ 2296.508025][T19673] CPU: 1 PID: 19673 Comm: syz.0.15464 Not tainted syzkaller #0 [ 2296.515654][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2296.525748][T19673] Call Trace: [ 2296.529055][T19673] [ 2296.532018][T19673] dump_stack_lvl+0x188/0x24e [ 2296.536734][T19673] ? show_regs_print_info+0x12/0x12 [ 2296.541962][T19673] ? load_image+0x400/0x400 [ 2296.546492][T19673] ? __might_sleep+0xd0/0xd0 [ 2296.551095][T19673] ? __lock_acquire+0x7d10/0x7d10 [ 2296.556147][T19673] should_fail_ex+0x399/0x4d0 [ 2296.560859][T19673] should_failslab+0x5/0x20 [ 2296.565391][T19673] slab_pre_alloc_hook+0x59/0x310 [ 2296.570455][T19673] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2296.576468][T19673] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 2296.581791][T19673] __kmem_cache_alloc_node+0x4f/0x260 [ 2296.587192][T19673] ? memset+0x1e/0x40 [ 2296.591202][T19673] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 2296.596515][T19673] kmalloc_trace+0x26/0xe0 [ 2296.600962][T19673] __xdp_reg_mem_model+0x1e0/0x5c0 [ 2296.606109][T19673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2296.612294][T19673] ? xdp_reg_mem_model+0x30/0x30 [ 2296.617279][T19673] xdp_reg_mem_model+0x1e/0x30 [ 2296.622088][T19673] bpf_test_run_xdp_live+0x299/0x1a90 [ 2296.627514][T19673] ? 0xffffffffa00041c0 [ 2296.631702][T19673] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 2296.637644][T19673] ? 0xffffffffa00041c0 [ 2296.641824][T19673] ? xdp_convert_md_to_buff+0x330/0x330 [ 2296.647414][T19673] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2296.653689][T19673] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2296.659167][T19673] bpf_prog_test_run_xdp+0x736/0xf10 [ 2296.664484][T19673] ? dev_put+0x80/0x80 [ 2296.668587][T19673] ? dev_put+0x80/0x80 [ 2296.672680][T19673] bpf_prog_test_run+0x31e/0x390 [ 2296.677649][T19673] __sys_bpf+0x62b/0x780 [ 2296.681934][T19673] ? bpf_link_show_fdinfo+0x380/0x380 [ 2296.687373][T19673] __x64_sys_bpf+0x78/0x90 [ 2296.691835][T19673] do_syscall_64+0x4c/0xa0 [ 2296.696275][T19673] ? clear_bhb_loop+0x60/0xb0 [ 2296.700979][T19673] ? clear_bhb_loop+0x60/0xb0 [ 2296.705680][T19673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2296.711608][T19673] RIP: 0033:0x7f7f2f39acb9 [ 2296.716129][T19673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2296.735760][T19673] RSP: 002b:00007f7f30349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2296.744192][T19673] RAX: ffffffffffffffda RBX: 00007f7f2f615fa0 RCX: 00007f7f2f39acb9 [ 2296.752178][T19673] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2296.760173][T19673] RBP: 00007f7f30349090 R08: 0000000000000000 R09: 0000000000000000 [ 2296.768167][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2296.776159][T19673] R13: 00007f7f2f616038 R14: 00007f7f2f615fa0 R15: 00007ffe47180018 [ 2296.784182][T19673] [ 2297.725366][T19706] mac80211_hwsim hwsim78 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2297.754943][T19708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15475'. [ 2298.297113][T19724] netlink: 'syz.2.15491': attribute type 12 has an invalid length. [ 2298.314928][T19724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15491'. [ 2298.447589][T11953] wlan1: Trigger new scan to find an IBSS to join [ 2298.454365][T29471] wlan1: Trigger new scan to find an IBSS to join [ 2298.494350][T19730] netlink: 'syz.2.15491': attribute type 1 has an invalid length. [ 2298.504197][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2298.564567][T19730] netlink: 'syz.2.15491': attribute type 1 has an invalid length. [ 2298.583601][T19730] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.15491'. [ 2299.630754][T29471] wlan1: Creating new IBSS network, BSSID 52:53:be:a6:24:76 [ 2299.645568][ T8524] wlan1: Creating new IBSS network, BSSID 16:75:23:38:c4:5e [ 2300.079364][T19758] FAULT_INJECTION: forcing a failure. [ 2300.079364][T19758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.106007][T19758] CPU: 1 PID: 19758 Comm: syz.3.15489 Not tainted syzkaller #0 [ 2300.113633][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2300.123738][T19758] Call Trace: [ 2300.127053][T19758] [ 2300.130019][T19758] dump_stack_lvl+0x188/0x24e [ 2300.134761][T19758] ? show_regs_print_info+0x12/0x12 [ 2300.140062][T19758] ? load_image+0x400/0x400 [ 2300.144620][T19758] ? __lock_acquire+0x7d10/0x7d10 [ 2300.149728][T19758] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2300.155516][T19758] should_fail_ex+0x399/0x4d0 [ 2300.160281][T19758] _copy_from_user+0x2c/0x170 [ 2300.165021][T19758] ___sys_sendmsg+0x1c3/0x360 [ 2300.169772][T19758] ? __sys_sendmsg+0x290/0x290 [ 2300.174647][T19758] ? __lock_acquire+0x7d10/0x7d10 [ 2300.179776][T19758] __se_sys_sendmsg+0x1bb/0x2a0 [ 2300.184687][T19758] ? __x64_sys_sendmsg+0x80/0x80 [ 2300.189716][T19758] ? lockdep_hardirqs_on+0x94/0x140 [ 2300.195001][T19758] do_syscall_64+0x4c/0xa0 [ 2300.199484][T19758] ? clear_bhb_loop+0x60/0xb0 [ 2300.204267][T19758] ? clear_bhb_loop+0x60/0xb0 [ 2300.209019][T19758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2300.214990][T19758] RIP: 0033:0x7f235239acb9 [ 2300.219454][T19758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2300.239119][T19758] RSP: 002b:00007f2353295028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2300.247619][T19758] RAX: ffffffffffffffda RBX: 00007f2352615fa0 RCX: 00007f235239acb9 [ 2300.255644][T19758] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2300.263668][T19758] RBP: 00007f2353295090 R08: 0000000000000000 R09: 0000000000000000 [ 2300.271694][T19758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2300.279726][T19758] R13: 00007f2352616038 R14: 00007f2352615fa0 R15: 00007ffdb45d3468 [ 2300.287802][T19758] [ 2300.491354][T19766] netlink: 'syz.2.15493': attribute type 12 has an invalid length. [ 2300.592992][T19766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15493'. [ 2300.806520][T19766] netlink: 'syz.2.15493': attribute type 1 has an invalid length. [ 2300.875631][T19766] netlink: 'syz.2.15493': attribute type 1 has an invalid length. [ 2300.943074][T19788] netlink: 'syz.0.15497': attribute type 1 has an invalid length. [ 2301.007512][T19766] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.15493'. [ 2301.047885][T19788] netlink: 'syz.0.15497': attribute type 1 has an invalid length. [ 2301.114384][T19788] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.15497'. [ 2301.576739][T19768] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2301.849598][T19779] netlink: 'syz.0.15497': attribute type 12 has an invalid length. [ 2301.858319][T19779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15497'. [ 2302.172385][T19808] netlink: 'syz.0.15505': attribute type 29 has an invalid length. [ 2302.323186][T19806] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15504'. [ 2303.250831][T19837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15515'. [ 2303.339566][T19838] validate_nla: 3 callbacks suppressed [ 2303.339588][T19838] netlink: 'syz.3.15515': attribute type 1 has an invalid length. [ 2303.416534][T19838] netlink: 'syz.3.15515': attribute type 1 has an invalid length. [ 2303.424478][T19838] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.15515'. [ 2303.466843][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2303.519705][T19841] netlink: 'syz.1.15516': attribute type 12 has an invalid length. [ 2303.544867][T19841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15516'. [ 2303.706467][T19848] netlink: 'syz.1.15516': attribute type 1 has an invalid length. [ 2303.733333][T19849] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2303.810529][T19848] netlink: 'syz.1.15516': attribute type 1 has an invalid length. [ 2303.912027][T19848] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15516'. [ 2304.898168][T18264] wlan1: Creating new IBSS network, BSSID 9e:cd:77:37:9c:85 [ 2304.914866][T19858] netlink: 'syz.4.15520': attribute type 10 has an invalid length. [ 2304.933115][T19858] team0: Device ipvlan1 failed to register rx_handler [ 2305.456075][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2305.472457][T19876] netlink: 'syz.4.15528': attribute type 39 has an invalid length. [ 2305.967472][T19897] netlink: 'syz.1.15533': attribute type 12 has an invalid length. [ 2306.030979][T19897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15533'. [ 2306.303381][T19897] netlink: 'syz.1.15533': attribute type 1 has an invalid length. [ 2306.385890][T19897] netlink: 'syz.1.15533': attribute type 1 has an invalid length. [ 2306.397724][T19897] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15533'. [ 2306.414916][T12158] wlan1: Trigger new scan to find an IBSS to join [ 2307.668390][T19932] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15545'. [ 2307.866951][T19956] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.15552'. [ 2308.501795][T12158] wlan1: Trigger new scan to find an IBSS to join [ 2309.425190][T11975] wlan1: Creating new IBSS network, BSSID 22:b3:45:5c:52:86 [ 2309.459139][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2309.949660][T19993] validate_nla: 3 callbacks suppressed [ 2309.949684][T19993] netlink: 'syz.0.15574': attribute type 1 has an invalid length. [ 2310.156840][T19993] netlink: 'syz.0.15574': attribute type 1 has an invalid length. [ 2310.305882][T19993] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.15574'. [ 2310.494905][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 2312.612455][T12158] wlan1: Creating new IBSS network, BSSID 32:17:a6:15:bd:bb [ 2312.968777][T20015] netlink: 'syz.2.15569': attribute type 21 has an invalid length. [ 2312.985341][T20015] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15569'. [ 2312.996651][T20015] netlink: 'syz.2.15569': attribute type 4 has an invalid length. [ 2313.006527][T20015] netlink: 'syz.2.15569': attribute type 3 has an invalid length. [ 2313.036863][T20015] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15569'. [ 2313.709919][T20044] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.15581'. [ 2313.729965][T20045] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.15582'. [ 2313.762183][T20045] openvswitch: netlink: Message has 48126 unknown bytes. [ 2313.795206][T20044] netlink: 'syz.0.15581': attribute type 21 has an invalid length. [ 2314.179371][T20062] netlink: 'syz.1.15585': attribute type 1 has an invalid length. [ 2314.229562][T20062] netlink: 'syz.1.15585': attribute type 1 has an invalid length. [ 2314.249902][T20062] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15585'. [ 2314.646600][T20073] netlink: 'syz.0.15589': attribute type 21 has an invalid length. [ 2314.721791][T20073] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15589'. [ 2314.731733][T20073] netlink: 'syz.0.15589': attribute type 4 has an invalid length. [ 2314.784013][T20073] netlink: 3 bytes leftover after parsing attributes in process `syz.0.15589'. [ 2315.097151][T20088] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2315.763132][T20116] validate_nla: 1 callbacks suppressed [ 2315.763151][T20116] netlink: 'syz.1.15605': attribute type 2 has an invalid length. [ 2315.788935][T20114] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2315.846056][T20116] netlink: 'syz.1.15605': attribute type 1 has an invalid length. [ 2315.884224][T20116] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15605'. [ 2315.947869][T20121] netlink: 'syz.3.15607': attribute type 21 has an invalid length. [ 2315.972002][T20121] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15607'. [ 2315.982250][T20121] netlink: 'syz.3.15607': attribute type 4 has an invalid length. [ 2315.998736][T20121] netlink: 'syz.3.15607': attribute type 3 has an invalid length. [ 2316.015278][T20121] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15607'. [ 2316.653915][T20131] netlink: 'syz.3.15610': attribute type 1 has an invalid length. [ 2317.267191][T20149] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2317.472146][T29471] wlan1: Trigger new scan to find an IBSS to join [ 2317.594377][T20164] mac80211_hwsim hwsim78 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2317.629734][T20166] netlink: 'syz.3.15620': attribute type 21 has an invalid length. [ 2317.639742][T20166] netlink: 'syz.3.15620': attribute type 4 has an invalid length. [ 2317.654789][T20166] netlink: 'syz.3.15620': attribute type 3 has an invalid length. [ 2318.392071][T20186] mac80211_hwsim hwsim76 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2318.553710][T20193] __nla_validate_parse: 5 callbacks suppressed [ 2318.553730][T20193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15627'. [ 2318.729357][T20193] netlink: 'syz.4.15627': attribute type 10 has an invalid length. [ 2318.789273][T20193] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2319.456394][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2320.418929][T18264] wlan1: Trigger new scan to find an IBSS to join [ 2320.656617][T20238] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2320.842550][T20232] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2320.903129][T20244] netlink: 184 bytes leftover after parsing attributes in process `syz.3.15647'. [ 2321.953847][T20266] netlink: 'syz.0.15654': attribute type 10 has an invalid length. [ 2322.415039][T29479] wlan1: Trigger new scan to find an IBSS to join [ 2323.454866][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2323.462919][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2323.473375][T18264] wlan1: Trigger new scan to find an IBSS to join [ 2324.596031][T18264] wlan1: Creating new IBSS network, BSSID ba:ee:51:5e:fc:c5 [ 2324.711960][T20266] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2324.964256][T20279] netlink: 'syz.3.15661': attribute type 10 has an invalid length. [ 2325.005044][T20279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2325.028198][T20279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2325.083596][T20279] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2325.330427][T20291] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2326.444346][ T11] wlan1: Creating new IBSS network, BSSID 5e:69:24:2c:b4:25 [ 2326.535111][T20316] netlink: 'syz.0.15671': attribute type 3 has an invalid length. [ 2326.562347][T20316] netlink: 'syz.0.15671': attribute type 1 has an invalid length. [ 2326.606111][T20316] netlink: 21959 bytes leftover after parsing attributes in process `syz.0.15671'. [ 2327.468205][T18264] wlan1: Trigger new scan to find an IBSS to join [ 2327.527676][T20333] netlink: 'syz.1.15676': attribute type 21 has an invalid length. [ 2327.574150][T20333] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15676'. [ 2327.620989][T20333] netlink: 'syz.1.15676': attribute type 4 has an invalid length. [ 2327.695138][T20333] netlink: 'syz.1.15676': attribute type 3 has an invalid length. [ 2327.723669][T20333] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15676'. [ 2327.819132][T20346] netlink: 'syz.2.15678': attribute type 1 has an invalid length. [ 2327.836418][T20346] netlink: 'syz.2.15678': attribute type 1 has an invalid length. [ 2327.863032][T20346] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.15678'. [ 2328.505496][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2328.939408][T20355] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2329.475520][T12158] wlan1: Creating new IBSS network, BSSID 22:b0:e0:11:8e:2f [ 2330.056393][T20380] netlink: 'syz.3.15692': attribute type 10 has an invalid length. [ 2330.530107][T20380] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2330.964344][T20387] netlink: 'syz.2.15695': attribute type 21 has an invalid length. [ 2331.073608][T20387] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15695'. [ 2331.101414][T20395] netlink: 'syz.0.15697': attribute type 1 has an invalid length. [ 2331.216090][T20387] netlink: 'syz.2.15695': attribute type 4 has an invalid length. [ 2331.374224][T20387] netlink: 'syz.2.15695': attribute type 3 has an invalid length. [ 2331.385981][T20387] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15695'. [ 2331.417978][T20395] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.15697'. [ 2331.455414][T29479] wlan1: Trigger new scan to find an IBSS to join [ 2331.461976][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2331.728779][T20405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15700'. [ 2333.876559][ T8524] wlan1: Creating new IBSS network, BSSID b6:56:6f:a2:20:cb [ 2334.179498][T20418] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2334.458245][T20425] validate_nla: 1 callbacks suppressed [ 2334.458292][T20425] netlink: 'syz.4.15705': attribute type 10 has an invalid length. [ 2334.529558][T20425] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2335.669560][T20453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15713'. [ 2335.803620][T20441] device wlan0 entered promiscuous mode [ 2335.813407][T20449] netlink: 'syz.1.15711': attribute type 21 has an invalid length. [ 2335.822263][T20449] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15711'. [ 2335.831736][T20449] netlink: 'syz.1.15711': attribute type 4 has an invalid length. [ 2335.839957][T20449] netlink: 'syz.1.15711': attribute type 3 has an invalid length. [ 2335.848023][T20449] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15711'. [ 2336.528658][T29471] wlan1: Trigger new scan to find an IBSS to join [ 2336.536649][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2336.570313][T20468] netlink: 56 bytes leftover after parsing attributes in process `syz.4.15718'. [ 2337.266346][T20482] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2337.702684][T20496] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15727'. [ 2338.092392][T20499] netlink: 'syz.1.15729': attribute type 21 has an invalid length. [ 2338.175986][T20499] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15729'. [ 2338.251053][T20499] netlink: 'syz.1.15729': attribute type 4 has an invalid length. [ 2338.308578][T20499] netlink: 'syz.1.15729': attribute type 3 has an invalid length. [ 2338.325045][T20499] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15729'. [ 2338.884264][T20514] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.15732'. [ 2339.210375][T20520] netlink: 'syz.3.15733': attribute type 11 has an invalid length. [ 2339.244179][T20520] netlink: 148 bytes leftover after parsing attributes in process `syz.3.15733'. [ 2339.365395][T20523] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2339.407879][T20523] FAULT_INJECTION: forcing a failure. [ 2339.407879][T20523] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.457360][T20523] CPU: 1 PID: 20523 Comm: syz.1.15734 Not tainted syzkaller #0 [ 2339.465068][T20523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2339.475449][T20523] Call Trace: [ 2339.478779][T20523] [ 2339.479157][T20526] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15734'. [ 2339.482181][T20523] dump_stack_lvl+0x188/0x24e [ 2339.496490][T20523] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2339.502705][T20523] ? show_regs_print_info+0x12/0x12 [ 2339.507978][T20523] ? load_image+0x400/0x400 [ 2339.512661][T20523] should_fail_ex+0x399/0x4d0 [ 2339.518032][T20523] should_failslab+0x5/0x20 [ 2339.522646][T20523] slab_pre_alloc_hook+0x59/0x310 [ 2339.527904][T20523] ? genl_family_rcv_msg_doit+0x279/0x330 [ 2339.533733][T20523] kmem_cache_alloc_node+0x5a/0x320 [ 2339.538996][T20523] ? __alloc_skb+0xfc/0x7e0 [ 2339.543574][T20523] __alloc_skb+0xfc/0x7e0 [ 2339.548164][T20523] netlink_ack+0x372/0x1170 [ 2339.552770][T20523] ? genl_rcv_msg+0x604/0x790 [ 2339.557544][T20523] ? genl_bind+0x360/0x360 [ 2339.562021][T20523] ? netlink_dump+0xd00/0xd00 [ 2339.566814][T20523] ? netlink_rcv_skb+0x112/0x450 [ 2339.571901][T20523] ? kasan_check_range+0xe/0x290 [ 2339.576910][T20523] netlink_rcv_skb+0x280/0x450 [ 2339.581739][T20523] ? genl_bind+0x360/0x360 [ 2339.586226][T20523] ? netlink_ack+0x1170/0x1170 [ 2339.591067][T20523] ? down_read+0x1a8/0x2d0 [ 2339.595552][T20523] genl_rcv+0x24/0x40 [ 2339.599701][T20523] netlink_unicast+0x74d/0x8d0 [ 2339.604570][T20523] netlink_sendmsg+0x8ad/0xbd0 [ 2339.609519][T20523] ? lockdep_hardirqs_on+0x94/0x140 [ 2339.614889][T20523] ? netlink_getsockopt+0x550/0x550 [ 2339.620179][T20523] ? security_socket_sendmsg+0x33/0xa0 [ 2339.625787][T20523] ? security_socket_sendmsg+0x7c/0xa0 [ 2339.631388][T20523] ? netlink_getsockopt+0x550/0x550 [ 2339.636849][T20523] ____sys_sendmsg+0x5be/0x970 [ 2339.641779][T20523] ? __sanitizer_cov_trace_pc+0x2c/0x60 [ 2339.647395][T20523] ? __sys_sendmsg_sock+0x30/0x30 [ 2339.652564][T20523] ? __import_iovec+0x315/0x500 [ 2339.657584][T20523] ? import_iovec+0x6f/0xa0 [ 2339.662290][T20523] ___sys_sendmsg+0x2a2/0x360 [ 2339.667213][T20523] ? __sys_sendmsg+0x290/0x290 [ 2339.672076][T20523] ? ktime_get_real_ts64+0x440/0x440 [ 2339.677471][T20523] __se_sys_sendmsg+0x1bb/0x2a0 [ 2339.682423][T20523] ? __x64_sys_sendmsg+0x80/0x80 [ 2339.687441][T20523] ? lockdep_hardirqs_on+0x94/0x140 [ 2339.692713][T20523] do_syscall_64+0x4c/0xa0 [ 2339.697198][T20523] ? clear_bhb_loop+0x60/0xb0 [ 2339.701930][T20523] ? clear_bhb_loop+0x60/0xb0 [ 2339.706681][T20523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2339.712627][T20523] RIP: 0033:0x7f3e4b99acb9 [ 2339.717094][T20523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2339.737298][T20523] RSP: 002b:00007f3e4c7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2339.746109][T20523] RAX: ffffffffffffffda RBX: 00007f3e4bc15fa0 RCX: 00007f3e4b99acb9 [ 2339.754134][T20523] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2339.762178][T20523] RBP: 00007f3e4c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 2339.770192][T20523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2339.778635][T20523] R13: 00007f3e4bc16038 R14: 00007f3e4bc15fa0 R15: 00007ffdc4959e98 [ 2339.786658][T20523] [ 2339.876601][T20528] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2340.345921][T20541] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15741'. [ 2340.356610][T20540] FAULT_INJECTION: forcing a failure. [ 2340.356610][T20540] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.424854][T20540] CPU: 0 PID: 20540 Comm: syz.1.15739 Not tainted syzkaller #0 [ 2340.432600][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2340.442725][T20540] Call Trace: [ 2340.446079][T20540] [ 2340.449144][T20540] dump_stack_lvl+0x188/0x24e [ 2340.454229][T20540] ? show_regs_print_info+0x12/0x12 [ 2340.459670][T20540] ? load_image+0x400/0x400 [ 2340.464258][T20540] ? __might_sleep+0xd0/0xd0 [ 2340.468961][T20540] ? __lock_acquire+0x7d10/0x7d10 [ 2340.474136][T20540] should_fail_ex+0x399/0x4d0 [ 2340.479169][T20540] should_failslab+0x5/0x20 [ 2340.483763][T20540] slab_pre_alloc_hook+0x59/0x310 [ 2340.488866][T20540] ? rxrpc_alloc_peer+0x78/0x340 [ 2340.493937][T20540] __kmem_cache_alloc_node+0x4f/0x260 [ 2340.499384][T20540] ? rxrpc_alloc_peer+0x78/0x340 [ 2340.504364][T20540] kmalloc_trace+0x26/0xe0 [ 2340.508843][T20540] rxrpc_alloc_peer+0x78/0x340 [ 2340.513740][T20540] rxrpc_lookup_peer+0x3f8/0x800 [ 2340.518750][T20540] rxrpc_connect_call+0x11c/0x1550 [ 2340.524090][T20540] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2340.530119][T20540] ? lock_chain_count+0x20/0x20 [ 2340.535054][T20540] ? rxrpc_new_client_call+0x845/0xd30 [ 2340.540568][T20540] ? __local_bh_enable_ip+0x136/0x1c0 [ 2340.545973][T20540] ? rxrpc_put_bundle+0xb0/0xb0 [ 2340.550911][T20540] ? __local_bh_enable_ip+0x136/0x1c0 [ 2340.556326][T20540] ? _local_bh_enable+0xa0/0xa0 [ 2340.561224][T20540] rxrpc_new_client_call+0x85f/0xd30 [ 2340.566561][T20540] ? rxrpc_do_sendmsg+0xab9/0x10c0 [ 2340.571756][T20540] rxrpc_do_sendmsg+0xab9/0x10c0 [ 2340.576760][T20540] ? rxrpc_process_local_events+0xa50/0xa50 [ 2340.582709][T20540] ? rxrpc_look_up_server_security+0x530/0x530 [ 2340.588919][T20540] ? rxrpc_sendmsg+0x467/0x890 [ 2340.593729][T20540] ? rxrpc_getsockopt+0x150/0x150 [ 2340.598877][T20540] ____sys_sendmsg+0x5be/0x970 [ 2340.603700][T20540] ? __sys_sendmsg_sock+0x30/0x30 [ 2340.608774][T20540] ? __import_iovec+0x315/0x500 [ 2340.613665][T20540] ? import_iovec+0x6f/0xa0 [ 2340.618204][T20540] ___sys_sendmsg+0x2a2/0x360 [ 2340.622943][T20540] ? __sys_sendmsg+0x290/0x290 [ 2340.627798][T20540] ? __lock_acquire+0x7d10/0x7d10 [ 2340.632907][T20540] __se_sys_sendmsg+0x1bb/0x2a0 [ 2340.637822][T20540] ? __x64_sys_sendmsg+0x80/0x80 [ 2340.642827][T20540] ? lockdep_hardirqs_on+0x94/0x140 [ 2340.648122][T20540] do_syscall_64+0x4c/0xa0 [ 2340.652595][T20540] ? clear_bhb_loop+0x60/0xb0 [ 2340.657404][T20540] ? clear_bhb_loop+0x60/0xb0 [ 2340.662160][T20540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2340.668379][T20540] RIP: 0033:0x7f3e4b99acb9 [ 2340.672939][T20540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2340.692707][T20540] RSP: 002b:00007f3e4c7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2340.701157][T20540] RAX: ffffffffffffffda RBX: 00007f3e4bc15fa0 RCX: 00007f3e4b99acb9 [ 2340.709179][T20540] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2340.717324][T20540] RBP: 00007f3e4c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 2340.725338][T20540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2340.733348][T20540] R13: 00007f3e4bc16038 R14: 00007f3e4bc15fa0 R15: 00007ffdc4959e98 [ 2340.741382][T20540] [ 2341.011429][T20549] netlink: 'syz.3.15744': attribute type 21 has an invalid length. [ 2341.033388][T20549] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15744'. [ 2341.067780][T20549] netlink: 'syz.3.15744': attribute type 4 has an invalid length. [ 2341.085882][T20549] netlink: 'syz.3.15744': attribute type 3 has an invalid length. [ 2341.094544][T20549] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15744'. [ 2341.478329][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2342.444703][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2342.749280][T20579] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15754'. [ 2343.133127][ T46] wlan1: Creating new IBSS network, BSSID d2:bf:34:e5:bc:c5 [ 2343.334715][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2343.345309][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2343.358283][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2343.366462][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2343.374089][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2343.381915][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2343.863558][T20595] netlink: 'syz.0.15758': attribute type 21 has an invalid length. [ 2343.906281][T20595] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15758'. [ 2343.970559][T20595] netlink: 'syz.0.15758': attribute type 4 has an invalid length. [ 2343.989593][T20595] netlink: 'syz.0.15758': attribute type 3 has an invalid length. [ 2344.044806][T20595] netlink: 3 bytes leftover after parsing attributes in process `syz.0.15758'. [ 2344.080069][T20590] chnl_net:caif_netlink_parms(): no params data found [ 2344.279138][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.285620][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.508714][T11975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.536357][T20621] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15767'. [ 2344.702683][T11975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.896302][T11975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.955946][T20590] bridge0: port 1(bridge_slave_0) entered blocking state [ 2344.963547][T20590] bridge0: port 1(bridge_slave_0) entered disabled state [ 2345.012293][T20590] device bridge_slave_0 entered promiscuous mode [ 2345.061918][T20632] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 2345.078411][T20632] syzkaller0: owner set to 0 [ 2345.105401][T20590] bridge0: port 2(bridge_slave_1) entered blocking state [ 2345.131557][T20635] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2345.142180][T20590] bridge0: port 2(bridge_slave_1) entered disabled state [ 2345.176624][T20590] device bridge_slave_1 entered promiscuous mode [ 2345.455083][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 2345.818815][T20633] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2345.859349][T20635] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15773'. [ 2345.951209][T11975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.082259][T20590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2346.158632][T20590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2346.347123][T20590] team0: Port device team_slave_0 added [ 2346.390195][T20590] team0: Port device team_slave_1 added [ 2346.477216][T20590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2346.484366][T20590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2346.540026][T20590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2346.571858][T20645] netlink: 'syz.4.15775': attribute type 21 has an invalid length. [ 2346.603059][T20645] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15775'. [ 2346.648891][T20645] netlink: 'syz.4.15775': attribute type 4 has an invalid length. [ 2346.658349][T20645] netlink: 'syz.4.15775': attribute type 3 has an invalid length. [ 2346.666721][T20645] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15775'. [ 2346.676330][T11975] device 0 left promiscuous mode [ 2346.702854][T20590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2346.715636][T20590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2346.822742][T20590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2346.941020][T11975] device 1 left promiscuous mode [ 2346.982345][T20663] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15780'. [ 2347.025764][T11975] device 2 left promiscuous mode [ 2347.105998][T20590] device hsr_slave_0 entered promiscuous mode [ 2347.145285][T20590] device hsr_slave_1 entered promiscuous mode [ 2347.168095][T20590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2347.213903][T20590] Cannot create hsr debugfs directory [ 2347.241996][T11975] device 3 left promiscuous mode [ 2347.317512][T11975] device 4 left promiscuous mode [ 2347.430973][T11975] device 5 left promiscuous mode [ 2347.481646][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2347.541194][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 2348.314935][T20686] netlink: 'syz.1.15786': attribute type 21 has an invalid length. [ 2348.364909][T11975] device 6 left promiscuous mode [ 2348.391137][T20689] netlink: 'syz.1.15786': attribute type 21 has an invalid length. [ 2348.414838][T12158] wlan1: Trigger new scan to find an IBSS to join [ 2348.425639][ T8524] wlan1: Creating new IBSS network, BSSID e2:15:6c:d6:f3:05 [ 2348.525104][T20691] netlink: 'syz.1.15786': attribute type 10 has an invalid length. [ 2348.598719][T20691] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2348.644940][T11975] device 7 left promiscuous mode [ 2348.737801][T11975] device 8 left promiscuous mode [ 2348.827293][T11975] device 9 left promiscuous mode [ 2348.988074][T11975] device 10 left promiscuous mode [ 2349.169935][T11975] device 11 left promiscuous mode [ 2349.240270][T20702] netlink: 'syz.0.15789': attribute type 21 has an invalid length. [ 2349.255109][T20702] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15789'. [ 2349.279919][T20702] netlink: 'syz.0.15789': attribute type 4 has an invalid length. [ 2349.294918][T20702] netlink: 'syz.0.15789': attribute type 3 has an invalid length. [ 2349.314875][T20702] netlink: 3 bytes leftover after parsing attributes in process `syz.0.15789'. [ 2349.371230][T11975] device 12 left promiscuous mode [ 2349.435008][T20711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15792'. [ 2349.574464][T11975] device 13 left promiscuous mode [ 2349.614851][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 2349.648627][T20719] mac80211_hwsim hwsim78 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2349.662200][T11975] device 14 left promiscuous mode [ 2349.736650][T11975] device 15 left promiscuous mode [ 2349.836516][T11975] device 16 left promiscuous mode [ 2349.894035][T11975] device 17 left promiscuous mode [ 2349.986723][T11975] device 18 left promiscuous mode [ 2350.045764][T11975] device 19 left promiscuous mode [ 2350.104538][T20590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2350.141865][T11975] device 20 left promiscuous mode [ 2350.178743][T20735] mac80211_hwsim hwsim78 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2350.210849][T20590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2350.311739][T20590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2350.596448][T20590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2350.921881][T20760] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15805'. [ 2351.003798][T20757] netlink: 'syz.1.15804': attribute type 21 has an invalid length. [ 2351.025275][T20757] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15804'. [ 2351.055466][T20757] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15804'. [ 2351.454941][ T8530] wlan1: Trigger new scan to find an IBSS to join [ 2351.670051][T20590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2351.694961][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 2351.742551][T20783] validate_nla: 2 callbacks suppressed [ 2351.742573][T20783] netlink: 'syz.3.15813': attribute type 5 has an invalid length. [ 2351.760028][T20783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15813'. [ 2351.781092][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2351.801175][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2351.819456][T20590] 8021q: adding VLAN 0 to HW filter on device team0 [ 2351.837498][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2351.918266][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2351.953551][T11953] bridge0: port 1(bridge_slave_0) entered blocking state [ 2351.960835][T11953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2352.119945][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2352.140382][T20797] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15817'. [ 2352.155511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2352.174301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2352.203139][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2352.210530][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2352.306527][T20804] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2352.363623][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2352.384100][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2352.447327][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2352.471405][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2352.503116][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2352.554205][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2352.625968][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2352.645445][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2352.705460][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2352.735750][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2352.771844][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2352.880211][T20812] netlink: 'syz.3.15819': attribute type 21 has an invalid length. [ 2352.891875][T20812] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15819'. [ 2352.903493][T20812] netlink: 'syz.3.15819': attribute type 4 has an invalid length. [ 2352.919841][T20812] netlink: 'syz.3.15819': attribute type 3 has an invalid length. [ 2352.944094][T20812] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15819'. [ 2353.107941][T20825] FAULT_INJECTION: forcing a failure. [ 2353.107941][T20825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2353.122909][T20825] CPU: 1 PID: 20825 Comm: syz.3.15823 Not tainted syzkaller #0 [ 2353.130534][T20825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2353.140997][T20825] Call Trace: [ 2353.144326][T20825] [ 2353.147313][T20825] dump_stack_lvl+0x188/0x24e [ 2353.152114][T20825] ? show_regs_print_info+0x12/0x12 [ 2353.157391][T20825] ? load_image+0x400/0x400 [ 2353.161961][T20825] ? __lock_acquire+0x7d10/0x7d10 [ 2353.167149][T20825] ? snprintf+0xe5/0x140 [ 2353.171465][T20825] should_fail_ex+0x399/0x4d0 [ 2353.176219][T20825] _copy_to_user+0x2c/0x130 [ 2353.180794][T20825] simple_read_from_buffer+0xe3/0x150 [ 2353.186240][T20825] proc_fail_nth_read+0x1a6/0x220 [ 2353.191330][T20825] ? proc_fault_inject_write+0x310/0x310 [ 2353.197041][T20825] ? fsnotify_perm+0x248/0x550 [ 2353.201877][T20825] ? proc_fault_inject_write+0x310/0x310 [ 2353.207749][T20825] vfs_read+0x2de/0xa00 [ 2353.211987][T20825] ? kernel_read+0x1e0/0x1e0 [ 2353.216646][T20825] ? __fget_files+0x28/0x4b0 [ 2353.221297][T20825] ? __fget_files+0x28/0x4b0 [ 2353.225945][T20825] ? __fget_files+0x43d/0x4b0 [ 2353.230835][T20825] ? __fdget_pos+0x2ae/0x360 [ 2353.235582][T20825] ? ksys_read+0x71/0x250 [ 2353.239966][T20825] ksys_read+0x14c/0x250 [ 2353.244436][T20825] ? vfs_write+0xa30/0xa30 [ 2353.248903][T20825] ? lockdep_hardirqs_on+0x94/0x140 [ 2353.254251][T20825] do_syscall_64+0x4c/0xa0 [ 2353.258792][T20825] ? clear_bhb_loop+0x60/0xb0 [ 2353.263498][T20825] ? clear_bhb_loop+0x60/0xb0 [ 2353.268237][T20825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2353.274214][T20825] RIP: 0033:0x7f235235b58e [ 2353.278676][T20825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2353.298437][T20825] RSP: 002b:00007f2353294fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2353.306963][T20825] RAX: ffffffffffffffda RBX: 00007f23532956c0 RCX: 00007f235235b58e [ 2353.315857][T20825] RDX: 000000000000000f RSI: 00007f23532950a0 RDI: 0000000000000004 [ 2353.323979][T20825] RBP: 00007f2353295090 R08: 0000000000000000 R09: 0000000000000000 [ 2353.332106][T20825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2353.340117][T20825] R13: 00007f2352616038 R14: 00007f2352615fa0 R15: 00007ffdb45d3468 [ 2353.348157][T20825] [ 2353.576719][T11975] device hsr_slave_0 left promiscuous mode [ 2353.622668][T11975] device hsr_slave_1 left promiscuous mode [ 2353.672282][T11975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2353.681084][T11975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2353.762058][T11975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2353.783486][T11975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2354.006018][T11975] device bridge_slave_1 left promiscuous mode [ 2354.026134][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.166307][T11975] device bridge_slave_0 left promiscuous mode [ 2354.208053][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.433634][T11975] device veth1_macvtap left promiscuous mode [ 2354.461353][T11975] device veth0_macvtap left promiscuous mode [ 2354.472720][T11975] device veth1_vlan left promiscuous mode [ 2354.526165][T11975] device veth0_vlan left promiscuous mode [ 2355.697662][T20859] netlink: 'syz.3.15832': attribute type 3 has an invalid length. [ 2355.720261][T20859] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15832'. [ 2356.364360][T11975] team0 (unregistering): Port device team_slave_1 removed [ 2356.430746][T11975] team0 (unregistering): Port device team_slave_0 removed [ 2356.490869][T11975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2356.499614][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2356.562569][T11975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2357.112962][T11975] bond0 (unregistering): Released all slaves [ 2357.295768][T20835] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2357.318007][T20841] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15827'. [ 2357.767495][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2357.806469][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2357.845569][T20590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2357.928133][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2357.938721][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2358.019535][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2358.084310][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2358.118298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2358.145428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2358.155263][T20590] device veth0_vlan entered promiscuous mode [ 2358.177483][T20590] device veth1_vlan entered promiscuous mode [ 2358.285319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2358.300208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2358.328496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2358.350121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2358.363157][T20590] device veth0_macvtap entered promiscuous mode [ 2358.376008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2358.390861][T20590] device veth1_macvtap entered promiscuous mode [ 2358.447558][T20590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.473398][T20590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.486940][T20590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.499024][T20590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.509623][T20590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2358.520902][T20590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.605085][T20590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2358.644007][T20590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.655203][T20590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.665539][T20590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.676525][T20590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.727224][T20590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.775316][T20590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.806247][T20590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2358.829746][T20590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2358.842687][T20590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2358.861781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2358.872129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2358.896830][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2358.915865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2358.937536][T20590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2358.972042][T20590] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2358.982513][T20590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2358.992358][T20590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2359.007074][T20913] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15849'. [ 2359.017721][T20915] netlink: 'syz.1.15850': attribute type 12 has an invalid length. [ 2359.058735][T20915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15850'. [ 2359.381366][T20915] netlink: 'syz.1.15850': attribute type 1 has an invalid length. [ 2359.417909][T20915] netlink: 'syz.1.15850': attribute type 1 has an invalid length. [ 2359.512528][T20915] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15850'. [ 2361.455583][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2361.536078][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2362.115034][T20923] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2362.606983][T29471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2362.645404][T29471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2362.896942][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2362.919003][T20939] netlink: 'syz.3.15857': attribute type 21 has an invalid length. [ 2362.927334][T20939] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15857'. [ 2362.952248][T20939] netlink: 'syz.3.15857': attribute type 4 has an invalid length. [ 2362.960669][T20939] netlink: 'syz.3.15857': attribute type 3 has an invalid length. [ 2362.968946][T20939] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15857'. [ 2363.127603][ T8524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2363.141532][ T8524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2363.248880][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2364.414803][T29471] wlan1: Trigger new scan to find an IBSS to join [ 2364.421774][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2365.421429][T11975] wlan1: Creating new IBSS network, BSSID 16:f2:a8:ec:dc:9d [ 2366.176738][T20976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15864'. [ 2366.423976][T20983] netlink: 'syz.0.15867': attribute type 12 has an invalid length. [ 2366.583061][T20983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15867'. [ 2366.675663][T20988] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2366.812950][T20995] netlink: 'syz.0.15867': attribute type 1 has an invalid length. [ 2366.891643][T20995] netlink: 'syz.0.15867': attribute type 1 has an invalid length. [ 2366.950137][T20995] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.15867'. [ 2367.458323][T29471] wlan1: Trigger new scan to find an IBSS to join [ 2368.412064][T21024] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15881'. [ 2368.638927][T21028] netlink: 'syz.3.15884': attribute type 12 has an invalid length. [ 2368.684971][T21028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15884'. [ 2368.850933][T21034] netlink: 'syz.3.15884': attribute type 1 has an invalid length. [ 2368.895052][T21034] netlink: 'syz.3.15884': attribute type 1 has an invalid length. [ 2368.984795][T21034] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.15884'. [ 2369.142355][T21039] netlink: 168 bytes leftover after parsing attributes in process `syz.0.15886'. [ 2369.273866][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2369.290976][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2369.300606][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2369.312590][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2369.320737][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2369.332841][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2369.474226][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2370.019275][T12158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.152831][T21053] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2370.212350][T21042] chnl_net:caif_netlink_parms(): no params data found [ 2370.535602][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2371.048191][T12158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2371.097440][T21057] netlink: 'syz.1.15890': attribute type 21 has an invalid length. [ 2371.107749][T21057] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15890'. [ 2371.118877][T21057] netlink: 'syz.1.15890': attribute type 4 has an invalid length. [ 2371.127621][T21057] netlink: 'syz.1.15890': attribute type 3 has an invalid length. [ 2371.137320][T21057] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15890'. [ 2371.157539][T21068] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2371.347202][T12158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2371.375032][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 2371.449897][T12158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2371.465285][T21074] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15893'. [ 2371.490076][T21042] bridge0: port 1(bridge_slave_0) entered blocking state [ 2371.499099][T21042] bridge0: port 1(bridge_slave_0) entered disabled state [ 2371.523376][ T8530] wlan1: Creating new IBSS network, BSSID 96:05:98:25:32:e9 [ 2371.553825][T21042] device bridge_slave_0 entered promiscuous mode [ 2371.619904][T21042] bridge0: port 2(bridge_slave_1) entered blocking state [ 2371.669783][T21042] bridge0: port 2(bridge_slave_1) entered disabled state [ 2371.681445][T21042] device bridge_slave_1 entered promiscuous mode [ 2371.712127][T21076] Â: renamed from pim6reg1 [ 2371.969280][T21042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2372.068562][T21042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2372.171670][T21091] netlink: 'syz.1.15898': attribute type 12 has an invalid length. [ 2372.185822][T21091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15898'. [ 2372.284130][T21091] netlink: 'syz.1.15898': attribute type 1 has an invalid length. [ 2372.333043][T21091] netlink: 'syz.1.15898': attribute type 1 has an invalid length. [ 2372.346019][T12158] device 0 left promiscuous mode [ 2372.381230][T21091] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15898'. [ 2372.629009][T11953] wlan1: Trigger new scan to find an IBSS to join [ 2372.635494][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2372.972933][T21042] team0: Port device team_slave_0 added [ 2373.038050][T21042] team0: Port device team_slave_1 added [ 2373.088441][T12158] device 1 left promiscuous mode [ 2373.144234][T21042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2373.163779][T21042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2373.198748][T21042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2373.211424][T12158] device 2 left promiscuous mode [ 2373.249660][T21042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2373.277677][T21042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2373.320963][T21042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2373.351200][T12158] device 3 left promiscuous mode [ 2373.418488][T12158] device 4 left promiscuous mode [ 2373.447708][T21042] device hsr_slave_0 entered promiscuous mode [ 2373.454823][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 2373.459824][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2373.491673][T21042] device hsr_slave_1 entered promiscuous mode [ 2373.543854][T21042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2373.596669][T21042] Cannot create hsr debugfs directory [ 2373.602497][T12158] device 5 left promiscuous mode [ 2373.704182][T12158] device 6 left promiscuous mode [ 2373.821589][T12158] device 7 left promiscuous mode [ 2373.913632][T12158] device 8 left promiscuous mode [ 2374.067584][T12158] device 9 left promiscuous mode [ 2374.208118][T12158] device 10 left promiscuous mode [ 2374.380020][T12158] device 11 left promiscuous mode [ 2374.447094][T21107] netlink: 'syz.2.15902': attribute type 3 has an invalid length. [ 2374.488893][T21107] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15902'. [ 2374.533101][T21124] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15905'. [ 2374.555207][T12158] device 12 left promiscuous mode [ 2374.713677][T12158] device 13 left promiscuous mode [ 2374.888310][T21128] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2374.899122][T12158] device 14 left promiscuous mode [ 2374.978490][T12158] device 15 left promiscuous mode [ 2375.125738][T12158] tipc: Left network mode [ 2375.535468][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 2376.395956][T21042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2376.416585][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2376.464920][T21161] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15916'. [ 2376.602942][T21042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2377.227782][T21042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2377.249191][T21173] netlink: 'syz.1.15918': attribute type 21 has an invalid length. [ 2377.271317][T21173] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15918'. [ 2377.283445][T21173] netlink: 'syz.1.15918': attribute type 4 has an invalid length. [ 2377.305614][T21173] netlink: 'syz.1.15918': attribute type 3 has an invalid length. [ 2377.314269][T21173] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15918'. [ 2377.351848][T11953] wlan1: Creating new IBSS network, BSSID d2:8c:a1:3f:f6:2b [ 2377.365691][T12158] Ÿë: port 1(erspan0) entered disabled state [ 2377.438390][T12158] device erspan0 left promiscuous mode [ 2377.455092][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2377.461796][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2377.465282][T12158] Ÿë: port 1(erspan0) entered disabled state [ 2377.538813][T21042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2377.614842][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 2377.753376][T21193] netlink: 'syz.0.15920': attribute type 1 has an invalid length. [ 2378.110598][T21193] netlink: 'syz.0.15920': attribute type 1 has an invalid length. [ 2378.121531][T21193] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.15920'. [ 2378.495470][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2379.978853][ T8524] wlan1: Creating new IBSS network, BSSID c6:37:f1:14:e2:4d [ 2379.987217][T11975] wlan1: Creating new IBSS network, BSSID 62:bf:e4:3b:35:cc [ 2380.539889][T21042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2380.604403][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2380.619387][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2380.644422][T21042] 8021q: adding VLAN 0 to HW filter on device team0 [ 2380.663114][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2380.688608][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2380.711017][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 2380.718343][ T8530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2380.907184][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2380.919138][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2380.960550][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2381.005719][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 2381.013160][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2381.478873][T21227] FAULT_INJECTION: forcing a failure. [ 2381.478873][T21227] name failslab, interval 1, probability 0, space 0, times 0 [ 2381.494911][T21227] CPU: 0 PID: 21227 Comm: syz.1.15927 Not tainted syzkaller #0 [ 2381.502584][T21227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2381.512915][T21227] Call Trace: [ 2381.516284][T21227] [ 2381.519299][T21227] dump_stack_lvl+0x188/0x24e [ 2381.524185][T21227] ? show_regs_print_info+0x12/0x12 [ 2381.529680][T21227] ? load_image+0x400/0x400 [ 2381.534562][T21227] ? trace_event_raw_event_lock+0x250/0x250 [ 2381.540605][T21227] should_fail_ex+0x399/0x4d0 [ 2381.545436][T21227] should_failslab+0x5/0x20 [ 2381.550070][T21227] slab_pre_alloc_hook+0x59/0x310 [ 2381.555300][T21227] ? __hw_addr_add_ex+0x202/0x710 [ 2381.560711][T21227] __kmem_cache_alloc_node+0x4f/0x260 [ 2381.566293][T21227] ? __hw_addr_add_ex+0x202/0x710 [ 2381.571529][T21227] kmalloc_trace+0x26/0xe0 [ 2381.576076][T21227] __hw_addr_add_ex+0x202/0x710 [ 2381.581139][T21227] dev_addr_init+0x147/0x230 [ 2381.585859][T21227] ? free_zapped_rcu+0x1f0/0x1f0 [ 2381.591257][T21227] ? dev_addr_flush+0x210/0x210 [ 2381.596321][T21227] ? kvmalloc_node+0x6c/0x180 [ 2381.601172][T21227] ? __kmalloc_node+0xe1/0x240 [ 2381.606319][T21227] alloc_netdev_mqs+0x275/0xf00 [ 2381.611809][T21227] ? IP6_ECN_decapsulate+0x1800/0x1800 [ 2381.617408][T21227] ip6_tnl_locate+0x680/0x830 [ 2381.622542][T21227] ? perf_trace_lock+0x301/0x390 [ 2381.627831][T21227] ? ip6_tnl_unlink+0x2d0/0x2d0 [ 2381.632938][T21227] ? __might_fault+0xa6/0x120 [ 2381.638001][T21227] ? ip6_tnl_siocdevprivate+0x5c9/0xaf0 [ 2381.643771][T21227] ip6_tnl_siocdevprivate+0x5ef/0xaf0 [ 2381.649374][T21227] ? ip6_tnl_start_xmit+0x1200/0x1200 [ 2381.654894][T21227] ? __rwlock_init+0x140/0x140 [ 2381.659986][T21227] ? full_name_hash+0x8e/0xe0 [ 2381.664827][T21227] dev_ifsioc+0xa4a/0xd40 [ 2381.669665][T21227] ? dev_ioctl+0xe80/0xe80 [ 2381.674292][T21227] ? full_name_hash+0x8e/0xe0 [ 2381.679613][T21227] ? dev_load+0x1d/0x1e0 [ 2381.683994][T21227] ? dev_load+0x1d/0x1e0 [ 2381.688626][T21227] dev_ioctl+0x5f8/0xe80 [ 2381.693117][T21227] ? get_user_ifreq+0xc7/0x170 [ 2381.698047][T21227] sock_ioctl+0x691/0x710 [ 2381.702601][T21227] ? sock_poll+0x410/0x410 [ 2381.707290][T21227] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2381.712726][T21227] ? security_file_ioctl+0x7c/0xa0 [ 2381.718062][T21227] ? sock_poll+0x410/0x410 [ 2381.722863][T21227] __se_sys_ioctl+0xfa/0x170 [ 2381.727642][T21227] do_syscall_64+0x4c/0xa0 [ 2381.732357][T21227] ? clear_bhb_loop+0x60/0xb0 [ 2381.737321][T21227] ? clear_bhb_loop+0x60/0xb0 [ 2381.742115][T21227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2381.748112][T21227] RIP: 0033:0x7f3e4b99acb9 [ 2381.752624][T21227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2381.772524][T21227] RSP: 002b:00007f3e4c7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2381.781418][T21227] RAX: ffffffffffffffda RBX: 00007f3e4bc15fa0 RCX: 00007f3e4b99acb9 [ 2381.789926][T21227] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 2381.798112][T21227] RBP: 00007f3e4c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 2381.806178][T21227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2381.815383][T21227] R13: 00007f3e4bc16038 R14: 00007f3e4bc15fa0 R15: 00007ffdc4959e98 [ 2381.823531][T21227] [ 2381.878557][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2381.902985][T21230] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15928'. [ 2382.415238][T18264] wlan1: Trigger new scan to find an IBSS to join [ 2382.584909][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2382.641885][T21244] netlink: 'syz.3.15932': attribute type 10 has an invalid length. [ 2382.673610][T21244] 8021q: adding VLAN 0 to HW filter on device team0 [ 2382.692935][T21244] bond0: (slave team0): Enslaving as an active interface with an up link [ 2382.717067][T21246] netlink: 'syz.1.15931': attribute type 21 has an invalid length. [ 2382.745013][T21246] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15931'. [ 2382.785531][T21246] netlink: 'syz.1.15931': attribute type 4 has an invalid length. [ 2382.814365][T21246] netlink: 'syz.1.15931': attribute type 3 has an invalid length. [ 2382.910313][T21246] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15931'. [ 2382.949720][T11975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2382.988910][T11975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2383.801497][ T11] wlan1: Creating new IBSS network, BSSID 2a:75:36:80:94:d9 [ 2383.977389][T11975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2384.027347][T11975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2384.064909][T11975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2384.644953][T21281] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2384.670089][T11975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2384.697255][T11975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2384.724435][T21042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2384.781991][T21042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2384.798485][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2384.809191][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2384.977202][T21297] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15943'. [ 2385.098284][T12158] device hsr_slave_0 left promiscuous mode [ 2385.125363][T12158] device hsr_slave_1 left promiscuous mode [ 2385.152659][T12158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2385.188559][T12158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2385.265072][T12158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2385.291979][T12158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2385.317300][T12158] device bridge_slave_0 left promiscuous mode [ 2385.324062][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.417814][T12158] device veth1_macvtap left promiscuous mode [ 2385.424161][T12158] device veth0_macvtap left promiscuous mode [ 2385.458602][T12158] device veth1_vlan left promiscuous mode [ 2385.467682][T12158] device veth0_vlan left promiscuous mode [ 2386.533178][T12158] team0 (unregistering): Port device team_slave_1 removed [ 2386.595487][T12158] team0 (unregistering): Port device team_slave_0 removed [ 2386.663387][T12158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2386.672457][T12158] device bond_slave_1 left promiscuous mode [ 2386.734490][T12158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2386.744064][T12158] device bond_slave_0 left promiscuous mode [ 2386.802276][T12158] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2386.811864][T12158] device bridge_slave_1 left promiscuous mode [ 2387.180765][T12158] bond0 (unregistering): Released all slaves [ 2387.315176][T21302] netlink: 'syz.3.15945': attribute type 21 has an invalid length. [ 2387.323457][T21302] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15945'. [ 2387.333130][T21302] netlink: 'syz.3.15945': attribute type 4 has an invalid length. [ 2387.341384][T21302] netlink: 'syz.3.15945': attribute type 3 has an invalid length. [ 2387.350947][T21302] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15945'. [ 2387.360638][T21310] netlink: 'syz.2.15947': attribute type 10 has an invalid length. [ 2387.389917][T21310] 8021q: adding VLAN 0 to HW filter on device team0 [ 2387.436743][T21310] bond0: (slave team0): Enslaving as an active interface with an up link [ 2387.454998][T18264] wlan1: Trigger new scan to find an IBSS to join [ 2387.464984][T21312] netlink: 177 bytes leftover after parsing attributes in process `syz.0.15948'. [ 2388.104151][T21333] netlink: 'syz.1.15950': attribute type 1 has an invalid length. [ 2388.228719][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2388.245417][T21333] netlink: 'syz.1.15950': attribute type 1 has an invalid length. [ 2388.263998][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2388.284770][T21333] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.15950'. [ 2388.301006][T21042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2388.898834][T21342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15954'. [ 2389.199087][T21356] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2389.967816][T21358] netlink: 'syz.1.15959': attribute type 21 has an invalid length. [ 2389.996724][T21358] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15959'. [ 2390.025117][T21358] netlink: 'syz.1.15959': attribute type 4 has an invalid length. [ 2390.033056][T21358] netlink: 'syz.1.15959': attribute type 3 has an invalid length. [ 2390.051403][T21358] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15959'. [ 2390.291699][T21372] netlink: 'syz.2.15962': attribute type 21 has an invalid length. [ 2390.300093][T21372] netlink: 'syz.2.15962': attribute type 2 has an invalid length. [ 2390.308550][T21370] netlink: 'syz.1.15961': attribute type 10 has an invalid length. [ 2390.422051][T21370] bridge0: port 3(team0) entered disabled state [ 2390.537802][T21370] device team0 left promiscuous mode [ 2390.543530][T21370] device team_slave_0 left promiscuous mode [ 2390.617395][T21370] device team_slave_1 left promiscuous mode [ 2390.682128][T21370] bridge0: port 3(team0) entered disabled state [ 2390.761465][T21370] 8021q: adding VLAN 0 to HW filter on device team0 [ 2390.798981][T21370] bond0: (slave team0): Enslaving as an active interface with an up link [ 2390.834805][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2390.854462][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2390.913136][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2390.945788][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2390.962456][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2390.987623][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2391.012572][T21042] device veth0_vlan entered promiscuous mode [ 2391.060575][T21042] device veth1_vlan entered promiscuous mode [ 2391.169887][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2391.197503][T21390] netlink: 'syz.0.15964': attribute type 1 has an invalid length. [ 2391.206773][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2391.234536][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2391.252148][T21390] netlink: 'syz.0.15964': attribute type 1 has an invalid length. [ 2391.267875][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2391.314023][T21042] device veth0_macvtap entered promiscuous mode [ 2391.323473][T21390] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.15964'. [ 2391.356276][T21042] device veth1_macvtap entered promiscuous mode [ 2391.437910][T21042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2391.456684][T11975] wlan1: Trigger new scan to find an IBSS to join [ 2391.463967][T18264] wlan1: Trigger new scan to find an IBSS to join [ 2391.491067][T21042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2391.522075][T21042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2391.561103][T21042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2391.591834][T21042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2391.615765][T21042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2391.657303][T21042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2391.707655][T21042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2391.727119][T21042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2391.757880][T21042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2391.790422][T21042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2391.838869][T21042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2391.899794][T21042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2391.923857][T21042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2391.940372][T21042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2391.971849][T21042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2391.993483][T21395] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15967'. [ 2392.019405][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2392.033442][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2392.073268][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2392.085392][T29471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2392.101836][T21406] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2392.119785][T21042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2392.149130][T21042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2392.173961][T21042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2392.203460][T21042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2392.219810][T21407] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15970'. [ 2392.395160][T18264] wlan1: Creating new IBSS network, BSSID ca:70:31:11:3e:2a [ 2392.430620][T11975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2392.447484][T11975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2392.547676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2392.565172][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2392.593441][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2392.624738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2392.747113][T21416] __nla_validate_parse: 1 callbacks suppressed [ 2392.747135][T21416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15974'. [ 2392.871107][T21416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15974'. [ 2393.005741][T21419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15974'. [ 2393.029451][T21421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15974'. [ 2393.135811][T21432] validate_nla: 5 callbacks suppressed [ 2393.135832][T21432] netlink: 'syz.2.15976': attribute type 1 has an invalid length. [ 2393.192204][T21432] netlink: 'syz.2.15976': attribute type 1 has an invalid length. [ 2393.228202][T21432] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.15976'. [ 2394.495038][T12158] wlan1: Trigger new scan to find an IBSS to join [ 2394.501918][T12158] wlan1: Trigger new scan to find an IBSS to join [ 2394.616003][T21455] netlink: 'syz.3.15983': attribute type 21 has an invalid length. [ 2394.652184][T21455] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15983'. [ 2394.663332][T21455] netlink: 'syz.3.15983': attribute type 4 has an invalid length. [ 2394.676738][T21455] netlink: 'syz.3.15983': attribute type 3 has an invalid length. [ 2394.706800][T21455] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15983'. [ 2394.720412][T21458] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15984'. [ 2394.867162][T21464] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2395.225226][T21468] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.15987'. [ 2395.598085][T21477] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2396.328356][T21484] netlink: 'syz.2.15990': attribute type 1 has an invalid length. [ 2396.372581][T21484] netlink: 'syz.2.15990': attribute type 1 has an invalid length. [ 2396.392666][T21484] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.15990'. [ 2396.774399][T21489] FAULT_INJECTION: forcing a failure. [ 2396.774399][T21489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2396.834762][T21489] CPU: 0 PID: 21489 Comm: syz.1.15993 Not tainted syzkaller #0 [ 2396.842413][T21489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2396.852682][T21489] Call Trace: [ 2396.855992][T21489] [ 2396.858963][T21489] dump_stack_lvl+0x188/0x24e [ 2396.863711][T21489] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2396.869962][T21489] ? show_regs_print_info+0x12/0x12 [ 2396.875212][T21489] ? load_image+0x400/0x400 [ 2396.879773][T21489] should_fail_ex+0x399/0x4d0 [ 2396.884498][T21489] copyin+0x1b/0x120 [ 2396.888439][T21489] _copy_from_iter+0x447/0x1130 [ 2396.893341][T21489] ? copyout_mc+0x110/0x110 [ 2396.897895][T21489] ? copyout_mc+0x110/0x110 [ 2396.902446][T21489] ? page_copy_sane+0x194/0x390 [ 2396.907357][T21489] copy_page_from_iter+0x77/0x100 [ 2396.912448][T21489] skb_copy_datagram_from_iter+0x2b3/0x690 [ 2396.918311][T21489] unix_dgram_sendmsg+0x5fb/0x16e0 [ 2396.923601][T21489] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2396.929891][T21489] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2396.936094][T21489] ? unix_dgram_poll+0x680/0x680 [ 2396.941077][T21489] ? security_socket_sendmsg+0x41/0xa0 [ 2396.946574][T21489] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2396.951936][T21489] ? security_socket_sendmsg+0x7c/0xa0 [ 2396.957443][T21489] ? unix_dgram_poll+0x680/0x680 [ 2396.962442][T21489] ____sys_sendmsg+0x5be/0x970 [ 2396.967267][T21489] ? __sys_sendmsg_sock+0x30/0x30 [ 2396.972336][T21489] ? __import_iovec+0x315/0x500 [ 2396.977246][T21489] ? import_iovec+0x6f/0xa0 [ 2396.981793][T21489] ___sys_sendmsg+0x2a2/0x360 [ 2396.986825][T21489] ? __sys_sendmsg+0x290/0x290 [ 2396.991703][T21489] ? rcu_is_watching+0x11/0xa0 [ 2396.996553][T21489] __se_sys_sendmsg+0x1bb/0x2a0 [ 2397.001979][T21489] ? __x64_sys_sendmsg+0x80/0x80 [ 2397.007062][T21489] ? lockdep_hardirqs_on+0x94/0x140 [ 2397.012315][T21489] do_syscall_64+0x4c/0xa0 [ 2397.016860][T21489] ? clear_bhb_loop+0x60/0xb0 [ 2397.021576][T21489] ? clear_bhb_loop+0x60/0xb0 [ 2397.026288][T21489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2397.032221][T21489] RIP: 0033:0x7f3e4b99acb9 [ 2397.036682][T21489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2397.056352][T21489] RSP: 002b:00007f3e4c7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2397.064808][T21489] RAX: ffffffffffffffda RBX: 00007f3e4bc15fa0 RCX: 00007f3e4b99acb9 [ 2397.072908][T21489] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 2397.080918][T21489] RBP: 00007f3e4c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 2397.089022][T21489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2397.097061][T21489] R13: 00007f3e4bc16038 R14: 00007f3e4bc15fa0 R15: 00007ffdc4959e98 [ 2397.106060][T21489] [ 2398.040777][T21503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15999'. [ 2398.097944][T21501] netlink: 'syz.1.15998': attribute type 21 has an invalid length. [ 2398.245727][T21501] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15998'. [ 2398.267722][T21501] netlink: 'syz.1.15998': attribute type 4 has an invalid length. [ 2398.304474][T21501] netlink: 'syz.1.15998': attribute type 3 has an invalid length. [ 2398.313661][T21501] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15998'. [ 2398.785043][T21517] netlink: 'syz.1.16004': attribute type 1 has an invalid length. [ 2398.793506][T21517] netlink: 'syz.1.16004': attribute type 1 has an invalid length. [ 2398.904980][T21517] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.16004'. [ 2398.926977][T21514] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2399.455441][T29471] wlan1: Trigger new scan to find an IBSS to join [ 2399.463962][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2400.781641][ T46] wlan1: Creating new IBSS network, BSSID ba:31:9a:32:e0:3a [ 2401.454716][T11953] wlan1: Trigger new scan to find an IBSS to join [ 2401.541586][T12861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2401.564187][T12861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2401.585806][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2401.596657][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2401.609326][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2401.625500][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2403.455210][ T8530] wlan1: Trigger new scan to find an IBSS to join [ 2403.788170][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 2404.207126][T11515] bond0: (slave syz_tun): Releasing backup interface [ 2404.275275][T21551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16012'. [ 2404.358687][ T46] wlan1: Creating new IBSS network, BSSID e2:52:96:8d:fa:be [ 2404.403833][T29471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.496424][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2404.619006][T29471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2404.830781][T21565] netlink: 'syz.1.16016': attribute type 1 has an invalid length. [ 2404.849677][T21565] netlink: 'syz.1.16016': attribute type 1 has an invalid length. [ 2404.862941][T21565] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.16016'. [ 2405.536517][T29471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.672375][T29471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2405.699619][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.706043][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.856742][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 2406.110741][T29471] device 0 left promiscuous mode [ 2406.205165][T29471] device 1 left promiscuous mode [ 2406.238048][T21548] chnl_net:caif_netlink_parms(): no params data found [ 2406.288751][T29471] device 2 left promiscuous mode [ 2406.446686][T29471] device 3 left promiscuous mode [ 2406.600601][T29471] device 4 left promiscuous mode [ 2406.666884][T21590] netlink: 'syz.4.16024': attribute type 21 has an invalid length. [ 2406.676843][T21590] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16024'. [ 2406.689293][T21590] netlink: 'syz.4.16024': attribute type 4 has an invalid length. [ 2406.698030][T21590] netlink: 'syz.4.16024': attribute type 3 has an invalid length. [ 2406.708687][T21590] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16024'. [ 2406.797909][T29471] device 5 left promiscuous mode [ 2406.858908][T21548] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.874453][T21548] bridge0: port 1(bridge_slave_0) entered disabled state [ 2406.905781][T21548] device bridge_slave_0 entered promiscuous mode [ 2406.968370][T21595] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16025'. [ 2406.990033][T29471] device 6 left promiscuous mode [ 2407.008574][T21548] bridge0: port 2(bridge_slave_1) entered blocking state [ 2407.031094][T21548] bridge0: port 2(bridge_slave_1) entered disabled state [ 2407.052073][T21548] device bridge_slave_1 entered promiscuous mode [ 2407.102055][T29471] device 7 left promiscuous mode [ 2407.271848][T21548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2407.337862][T21612] netlink: 'syz.1.16027': attribute type 1 has an invalid length. [ 2407.357008][T21548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2407.412299][T21611] netlink: 'syz.3.16030': attribute type 21 has an invalid length. [ 2407.440517][T21611] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16030'. [ 2407.445305][T21612] netlink: 'syz.1.16027': attribute type 1 has an invalid length. [ 2407.458649][T12158] wlan1: Creating new IBSS network, BSSID ea:3c:0e:34:8d:8c [ 2407.479944][T21611] netlink: 'syz.3.16030': attribute type 4 has an invalid length. [ 2407.502023][T21611] netlink: 'syz.3.16030': attribute type 3 has an invalid length. [ 2407.524843][T21611] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16030'. [ 2407.553650][T21612] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.16027'. [ 2407.948705][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 2408.300084][T29471] device 8 left promiscuous mode [ 2408.402927][T21548] team0: Port device team_slave_0 added [ 2408.437528][T21548] team0: Port device team_slave_1 added [ 2408.480064][T29471] device 9 left promiscuous mode [ 2408.531962][T21548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2408.539214][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2408.566536][T21548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2408.615674][T29471] device 10 left promiscuous mode [ 2408.646319][T21548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2408.653371][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2408.784169][T21548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2408.840338][T29471] device 11 left promiscuous mode [ 2408.914238][T21646] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16037'. [ 2408.925336][T21646] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16037'. [ 2408.993422][T29471] device 12 left promiscuous mode [ 2409.061065][T21548] device hsr_slave_0 entered promiscuous mode [ 2409.088766][T21548] device hsr_slave_1 entered promiscuous mode [ 2409.101063][T21548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2409.111820][T21548] Cannot create hsr debugfs directory [ 2409.162909][T29471] device 13 left promiscuous mode [ 2409.602168][T21664] __nla_validate_parse: 1 callbacks suppressed [ 2409.602188][T21664] netlink: 192 bytes leftover after parsing attributes in process `syz.4.16043'. [ 2409.819869][T21666] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16042'. [ 2409.842818][T21666] validate_nla: 4 callbacks suppressed [ 2409.842841][T21666] netlink: 'syz.1.16042': attribute type 4 has an invalid length. [ 2409.894179][T21666] netlink: 'syz.1.16042': attribute type 3 has an invalid length. [ 2409.954894][T21666] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16042'. [ 2410.014915][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 2411.237456][T21684] netlink: 'syz.2.16048': attribute type 21 has an invalid length. [ 2411.254624][T21684] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16048'. [ 2411.265103][T21684] netlink: 'syz.2.16048': attribute type 4 has an invalid length. [ 2411.273085][T21684] netlink: 'syz.2.16048': attribute type 3 has an invalid length. [ 2411.281576][T21684] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16048'. [ 2411.629387][T21704] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16052'. [ 2411.815398][T21708] netlink: 'syz.4.16051': attribute type 1 has an invalid length. [ 2411.907855][T21708] netlink: 'syz.4.16051': attribute type 1 has an invalid length. [ 2412.069862][T21708] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.16051'. [ 2412.578150][T29471] Ÿë: port 1(erspan0) entered disabled state [ 2412.797113][T29471] device erspan0 left promiscuous mode [ 2412.841922][T29471] Ÿë: port 1(erspan0) entered disabled state [ 2412.956662][T21723] FAULT_INJECTION: forcing a failure. [ 2412.956662][T21723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2412.984843][T21723] CPU: 1 PID: 21723 Comm: syz.1.16056 Not tainted syzkaller #0 [ 2412.992501][T21723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2413.002895][T21723] Call Trace: [ 2413.006241][T21723] [ 2413.009237][T21723] dump_stack_lvl+0x188/0x24e [ 2413.013990][T21723] ? show_regs_print_info+0x12/0x12 [ 2413.019344][T21723] ? load_image+0x400/0x400 [ 2413.023924][T21723] ? __lock_acquire+0x7d10/0x7d10 [ 2413.029033][T21723] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2413.035106][T21723] should_fail_ex+0x399/0x4d0 [ 2413.039888][T21723] _copy_from_user+0x2c/0x170 [ 2413.044646][T21723] __ia32_sys_rt_sigreturn+0x21d/0x760 [ 2413.050205][T21723] ? load_gs_index+0x130/0x130 [ 2413.055148][T21723] ? lock_chain_count+0x20/0x20 [ 2413.060093][T21723] ? lockdep_hardirqs_on+0x94/0x140 [ 2413.065388][T21723] do_syscall_64+0x4c/0xa0 [ 2413.069883][T21723] ? clear_bhb_loop+0x60/0xb0 [ 2413.074680][T21723] ? clear_bhb_loop+0x60/0xb0 [ 2413.079432][T21723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2413.085402][T21723] RIP: 0033:0x7f3e4b93c0d9 [ 2413.089889][T21723] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 2413.109746][T21723] RSP: 002b:00007f3e4c7f6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 2413.118245][T21723] RAX: ffffffffffffffda RBX: 00007f3e4bc15fa0 RCX: 00007f3e4b93c0d9 [ 2413.126399][T21723] RDX: 00007f3e4c7f6a80 RSI: 00007f3e4c7f6bb0 RDI: 0000000000000021 [ 2413.134450][T21723] RBP: 00007f3e4c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 2413.142492][T21723] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2413.150535][T21723] R13: 00007f3e4bc16038 R14: 00007f3e4bc15fa0 R15: 00007ffdc4959e98 [ 2413.158614][T21723] [ 2413.415429][T21733] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2414.374754][T21757] netlink: 'syz.2.16061': attribute type 21 has an invalid length. [ 2414.441029][T21757] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16061'. [ 2414.473779][T21757] netlink: 'syz.2.16061': attribute type 4 has an invalid length. [ 2414.493050][T21757] netlink: 'syz.2.16061': attribute type 3 has an invalid length. [ 2414.616644][T21757] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16061'. [ 2414.885986][T21772] netlink: 'syz.3.16066': attribute type 1 has an invalid length. [ 2414.893958][T21772] netlink: 'syz.3.16066': attribute type 1 has an invalid length. [ 2414.987996][T21772] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.16066'. [ 2415.457040][T21735] wlan1: Trigger new scan to find an IBSS to join [ 2415.664252][T21766] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16065'. [ 2415.678893][T21761] netlink: 'syz.1.16063': attribute type 21 has an invalid length. [ 2415.690793][T21761] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16063'. [ 2415.724199][T21761] netlink: 'syz.1.16063': attribute type 4 has an invalid length. [ 2415.753022][T21761] netlink: 'syz.1.16063': attribute type 3 has an invalid length. [ 2415.774244][T21761] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16063'. [ 2415.840129][T29471] device hsr_slave_0 left promiscuous mode [ 2415.848243][T29471] device hsr_slave_1 left promiscuous mode [ 2415.875452][T29471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2415.904858][T29471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2415.943321][T29471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2415.972575][T29471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2416.008696][T29471] bridge0: port 2(team0) entered disabled state [ 2416.085475][T29471] device bridge_slave_0 left promiscuous mode [ 2416.091870][T29471] bridge0: port 1(bridge_slave_0) entered disabled state [ 2416.185131][T21788] netlink: 'syz.4.16070': attribute type 27 has an invalid length. [ 2416.227386][T21788] netlink: 164 bytes leftover after parsing attributes in process `syz.4.16070'. [ 2416.453773][T29471] device veth1_macvtap left promiscuous mode [ 2416.467219][T29471] device veth0_macvtap left promiscuous mode [ 2416.482844][T29471] device veth1_vlan left promiscuous mode [ 2418.506831][T21735] wlan1: Trigger new scan to find an IBSS to join [ 2418.781961][T29471] device team_slave_1 left promiscuous mode [ 2418.796390][T29471] team0 (unregistering): Port device team_slave_1 removed [ 2418.863261][T29471] device team_slave_0 left promiscuous mode [ 2418.879833][T29471] team0 (unregistering): Port device team_slave_0 removed [ 2418.991538][T29471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2419.062183][T29471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2419.145747][T29471] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2419.499868][T29471] bond0 (unregistering): Released all slaves [ 2419.653097][T21797] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2419.729489][T21548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2419.864674][T21816] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16079'. [ 2419.875176][T21548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2419.927878][T21548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2419.981590][T21548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2420.122200][T21823] netlink: 'syz.1.16078': attribute type 1 has an invalid length. [ 2420.182979][T21823] netlink: 'syz.1.16078': attribute type 1 has an invalid length. [ 2420.316012][T21823] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.16078'. [ 2421.278711][T21821] netlink: 'syz.4.16080': attribute type 21 has an invalid length. [ 2421.288309][T21821] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16080'. [ 2421.297878][T21821] netlink: 'syz.4.16080': attribute type 4 has an invalid length. [ 2421.306057][T21821] netlink: 'syz.4.16080': attribute type 3 has an invalid length. [ 2421.314186][T21821] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16080'. [ 2421.462571][ T46] wlan1: Trigger new scan to find an IBSS to join [ 2421.767742][T21850] netlink: 'syz.2.16087': attribute type 33 has an invalid length. [ 2421.857760][T21548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2421.925542][T21856] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.16088'. [ 2422.000370][T21548] 8021q: adding VLAN 0 to HW filter on device team0 [ 2422.066638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2422.105554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2422.154287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2422.206667][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2422.251886][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 2422.259154][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2422.346356][T21866] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16090'. [ 2422.415086][T18264] wlan1: Trigger new scan to find an IBSS to join [ 2422.527161][T21868] device bond0 entered promiscuous mode [ 2422.556445][T21735] wlan1: Creating new IBSS network, BSSID 0a:03:de:cc:ce:b8 [ 2422.604891][T21868] device bond_slave_0 entered promiscuous mode [ 2422.629372][T21868] device bond_slave_1 entered promiscuous mode [ 2422.743904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2422.786370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2422.813135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2422.847952][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 2422.855243][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2422.893365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2422.960063][T21877] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2422.989637][T21887] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2423.025088][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2423.057595][T21881] netlink: 'syz.2.16094': attribute type 21 has an invalid length. [ 2423.075837][T21881] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16094'. [ 2423.135044][T21881] netlink: 'syz.2.16094': attribute type 4 has an invalid length. [ 2423.164973][T21881] netlink: 'syz.2.16094': attribute type 3 has an invalid length. [ 2423.213008][T21881] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16094'. [ 2423.274932][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2423.295412][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2423.343354][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2423.388626][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2423.403515][T21891] netlink: 'syz.4.16095': attribute type 1 has an invalid length. [ 2423.426822][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2423.433817][T21891] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.16095'. [ 2423.446391][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2423.462428][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2423.478194][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2423.502996][T21548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2423.533269][T21735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2424.238199][T21912] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2424.517107][T21921] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16103'. [ 2424.960626][T21931] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16105'. [ 2424.985212][T21931] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16105'. [ 2425.292010][T21944] validate_nla: 4 callbacks suppressed [ 2425.292038][T21944] netlink: 'syz.3.16107': attribute type 1 has an invalid length. [ 2425.336482][T21944] netlink: 'syz.3.16107': attribute type 1 has an invalid length. [ 2425.376930][T21944] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.16107'. [ 2425.454965][T29471] wlan1: Trigger new scan to find an IBSS to join [ 2425.464865][T21735] wlan1: Trigger new scan to find an IBSS to join [ 2425.471534][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2425.510986][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2425.542601][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2425.612404][T21548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2426.527580][T18264] wlan1: Trigger new scan to find an IBSS to join [ 2428.163716][T21950] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2428.234746][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2428.289331][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2428.407333][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2428.423758][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2428.483541][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2428.556091][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2428.645892][T21548] device veth0_vlan entered promiscuous mode [ 2428.725604][T21548] device veth1_vlan entered promiscuous mode [ 2428.841931][T21986] netlink: 763 bytes leftover after parsing attributes in process `syz.1.16111'. [ 2428.893268][T21997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16115'. [ 2428.926910][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2428.947476][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2428.973838][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2429.001729][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2429.013646][T21548] device veth0_macvtap entered promiscuous mode [ 2429.050707][T21548] device veth1_macvtap entered promiscuous mode [ 2429.225767][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.259574][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.283464][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.324693][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.364251][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.404778][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.445042][T21548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2429.457473][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2429.467362][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2429.477409][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2429.487609][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2429.507016][T22006] netlink: 'syz.1.16117': attribute type 21 has an invalid length. [ 2429.516915][T22006] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16117'. [ 2429.529688][T22006] netlink: 'syz.1.16117': attribute type 4 has an invalid length. [ 2429.549532][T22006] netlink: 'syz.1.16117': attribute type 3 has an invalid length. [ 2429.575362][T22006] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16117'. [ 2429.609195][T22008] netlink: 'syz.2.16118': attribute type 21 has an invalid length. [ 2429.629706][T22008] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16118'. [ 2429.683628][T22008] netlink: 'syz.2.16118': attribute type 4 has an invalid length. [ 2429.721085][T22008] netlink: 'syz.2.16118': attribute type 3 has an invalid length. [ 2429.765065][T22008] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16118'. [ 2429.783942][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.796208][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.855209][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.886561][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.927711][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.959404][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.004601][T21548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2430.037513][T22025] netlink: 'syz.3.16121': attribute type 1 has an invalid length. [ 2430.046203][T21548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2430.047395][T22025] netlink: 'syz.3.16121': attribute type 1 has an invalid length. [ 2430.072683][T22025] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.16121'. [ 2430.084254][T21548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2430.195152][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2430.204374][T18264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2430.242312][T21548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.268611][T21548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.298876][T21548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.327999][T21548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2430.369416][T22029] tipc: Started in network mode [ 2430.380190][T22029] tipc: Node identity 9215a268, cluster identity 4711 [ 2430.403901][T22029] tipc: Node number set to 2450891368 [ 2430.439457][T21737] wlan1: Trigger new scan to find an IBSS to join [ 2430.446525][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2430.453259][ T8524] wlan1: Trigger new scan to find an IBSS to join [ 2431.464265][T21734] wlan1: Trigger new scan to find an IBSS to join [ 2432.452157][ T8524] wlan1: Creating new IBSS network, BSSID 0a:f9:99:e9:46:3d [ 2432.459252][T21734] wlan1: Creating new IBSS network, BSSID c2:77:eb:df:ea:3d [ 2432.461230][T21737] wlan1: Creating new IBSS network, BSSID aa:3d:9c:02:7e:35 [ 2432.577670][T22046] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2432.580640][ T8524] ------------[ cut here ]------------ [ 2432.593798][ T8524] WARNING: CPU: 1 PID: 8524 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 2432.604422][ T8524] Modules linked in: [ 2432.608645][ T8524] CPU: 1 PID: 8524 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 2432.616322][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2432.626580][ T8524] Workqueue: cfg80211 cfg80211_event_work [ 2432.632459][ T8524] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2432.638868][ T8524] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 f2 ee f7 0f 0b eb bb e8 58 f2 ee f7 <0f> 0b eb b2 e8 4f f2 ee f7 0f 0b e9 77 fd ff ff e8 43 f2 ee f7 0f [ 2432.659654][ T8524] RSP: 0018:ffffc90004ff7aa0 EFLAGS: 00010293 [ 2432.665991][ T8524] RAX: ffffffff89938018 RBX: dffffc0000000000 RCX: ffff88807e2c3b80 [ 2432.674224][ T8524] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20 [ 2432.682584][ T8524] RBP: ffffc90004ff7b70 R08: ffffffff90af32a7 R09: 1ffffffff215e654 [ 2432.690687][ T8524] R10: dffffc0000000000 R11: fffffbfff215e655 R12: ffff8880765435d8 [ 2432.698980][ T8524] R13: 1ffff920009fef5c R14: 000000000000001f R15: ffff88804efccc90 [ 2432.707134][ T8524] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2432.716264][ T8524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2432.723076][ T8524] CR2: 00007f82b9571286 CR3: 000000004fb1a000 CR4: 00000000003506e0 [ 2432.731369][ T8524] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 2432.739464][ T8524] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2432.747735][ T8524] Call Trace: [ 2432.751212][ T8524] [ 2432.754208][ T8524] ? mutex_lock_nested+0x10/0x10 [ 2432.759296][ T8524] ? trace_rdev_return_void+0x240/0x240 [ 2432.765150][ T8524] cfg80211_process_wdev_events+0x3ad/0x550 [ 2432.771242][ T8524] cfg80211_process_rdev_events+0x9d/0x110 [ 2432.777204][ T8524] ? process_one_work+0x7b0/0x1160 [ 2432.782396][ T8524] cfg80211_event_work+0x2b/0x40 [ 2432.787493][ T8524] process_one_work+0x8a2/0x1160 [ 2432.792530][ T8524] ? worker_detach_from_pool+0x240/0x240 [ 2432.798407][ T8524] ? _raw_spin_lock_irq+0x86/0xf0 [ 2432.803524][ T8524] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2432.808692][ T8524] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2432.814412][ T8524] ? kthread_data+0x4b/0xc0 [ 2432.819083][ T8524] worker_thread+0xaa2/0x1270 [ 2432.823981][ T8524] kthread+0x29d/0x330 [ 2432.828240][ T8524] ? worker_clr_flags+0x1a0/0x1a0 [ 2432.833472][ T8524] ? kthread_blkcg+0xd0/0xd0 [ 2432.838271][ T8524] ret_from_fork+0x1f/0x30 [ 2432.842805][ T8524] [ 2432.845957][ T8524] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2432.853289][ T8524] CPU: 1 PID: 8524 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 2432.860976][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2432.871094][ T8524] Workqueue: cfg80211 cfg80211_event_work [ 2432.876927][ T8524] Call Trace: [ 2432.880238][ T8524] [ 2432.883199][ T8524] dump_stack_lvl+0x188/0x24e [ 2432.887918][ T8524] ? memcpy+0x3c/0x60 [ 2432.891943][ T8524] ? show_regs_print_info+0x12/0x12 [ 2432.897184][ T8524] ? load_image+0x400/0x400 [ 2432.901753][ T8524] panic+0x2e5/0x730 [ 2432.905790][ T8524] ? bpf_jit_dump+0xd0/0xd0 [ 2432.910402][ T8524] ? ret_from_fork+0x1f/0x30 [ 2432.915043][ T8524] __warn+0x2f8/0x4f0 [ 2432.919127][ T8524] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2432.924727][ T8524] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2432.930849][ T8524] report_bug+0x2ba/0x4f0 [ 2432.935257][ T8524] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2432.940940][ T8524] handle_bug+0x3a/0x70 [ 2432.945149][ T8524] exc_invalid_op+0x16/0x40 [ 2432.949711][ T8524] asm_exc_invalid_op+0x16/0x20 [ 2432.954602][ T8524] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2432.960815][ T8524] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 f2 ee f7 0f 0b eb bb e8 58 f2 ee f7 <0f> 0b eb b2 e8 4f f2 ee f7 0f 0b e9 77 fd ff ff e8 43 f2 ee f7 0f [ 2432.980483][ T8524] RSP: 0018:ffffc90004ff7aa0 EFLAGS: 00010293 [ 2432.986598][ T8524] RAX: ffffffff89938018 RBX: dffffc0000000000 RCX: ffff88807e2c3b80 [ 2432.994621][ T8524] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20 [ 2433.002667][ T8524] RBP: ffffc90004ff7b70 R08: ffffffff90af32a7 R09: 1ffffffff215e654 [ 2433.010681][ T8524] R10: dffffc0000000000 R11: fffffbfff215e655 R12: ffff8880765435d8 [ 2433.018873][ T8524] R13: 1ffff920009fef5c R14: 000000000000001f R15: ffff88804efccc90 [ 2433.027169][ T8524] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2433.032792][ T8524] ? mutex_lock_nested+0x10/0x10 [ 2433.037798][ T8524] ? trace_rdev_return_void+0x240/0x240 [ 2433.043434][ T8524] cfg80211_process_wdev_events+0x3ad/0x550 [ 2433.049381][ T8524] cfg80211_process_rdev_events+0x9d/0x110 [ 2433.055236][ T8524] ? process_one_work+0x7b0/0x1160 [ 2433.060493][ T8524] cfg80211_event_work+0x2b/0x40 [ 2433.065472][ T8524] process_one_work+0x8a2/0x1160 [ 2433.070480][ T8524] ? worker_detach_from_pool+0x240/0x240 [ 2433.076179][ T8524] ? _raw_spin_lock_irq+0x86/0xf0 [ 2433.081270][ T8524] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2433.086357][ T8524] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2433.091981][ T8524] ? kthread_data+0x4b/0xc0 [ 2433.096541][ T8524] worker_thread+0xaa2/0x1270 [ 2433.101285][ T8524] kthread+0x29d/0x330 [ 2433.105400][ T8524] ? worker_clr_flags+0x1a0/0x1a0 [ 2433.110519][ T8524] ? kthread_blkcg+0xd0/0xd0 [ 2433.115159][ T8524] ret_from_fork+0x1f/0x30 [ 2433.119635][ T8524] [ 2433.123457][ T8524] Kernel Offset: disabled [ 2433.127903][ T8524] Rebooting in 86400 seconds..