last executing test programs: 6.290281127s ago: executing program 0 (id=1234): getpid() socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='[-#]-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0xf401}, 0x3e8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8b41609e09d2f4655c2f2", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000800)=0x200000000000fff9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5.907614726s ago: executing program 0 (id=1240): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x10, 0x84}], 0x20}, 0x880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000240081064e81f782db44b9040a020800060000", 0x17}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2b, 'rdma'}]}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000200114140e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) 4.851215522s ago: executing program 0 (id=1249): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0, 0xffffffffffffffd0, 0x0, 0x7}, 0x977f86009aee877a) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600", @ANYRES32], 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x201, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000540), 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffefffd, 0x0, 0x0, 0x5ff, 0x0, 0x80}, 0x0, 0x10, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/264, 0x108}], 0x1}, 0x40000010) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "823d"}]}}}], 0x38}, 0x20002880) write$cgroup_subtree(r3, &(0x7f0000000100), 0x0) sendmsg(r0, &(0x7f00000040c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="7950de882addbd16e06c463da9168b7b0dd889deecdb5c9aaf46ab1dc700c2ca57fa51364cc79c02fbea29fe", 0x2c}, {&(0x7f0000000340)="01e81a313816416288863552fccfba400a6814e103ee8334a0425511dbead7f360d5c02d06025128329f93c185cf4653408c778c28c22aa95ab213c28e16a6024fd9d9bc0f8a209a2009ae355f1e8d851df3733d566f6a760da8e0f84c", 0x5d}], 0x2, &(0x7f0000002cc0)=[{0x18, 0x84, 0x3ac, "817576ef6c"}, {0x1010, 0x11, 0x2089856b, "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"}, {0xd8, 0x10b, 0x7f, "8bcb52d693a57744ce659a32c35a83615ad912f90bbb5c16749509941e34a360b2f75ec218b1bd093e906dc343acb5e357be528c27731fc2c5e782d59f5f4ff29394da50bf705a584528dc3a526542cae26b3977c222e152020387c9d51c3d8da620171b34e0f4dd0b1502aaef24ae74b03182dffb919dc929de23af9d9e2a3a80a23400c7318a556a621be5fcea7db4ac32d116af4c645c43f5107d337495d624d3862c3eaeb77990942ed39cf7df2aeef26599f23637fe329d4eef37a9ad5e7b5008cc68c4ec"}, {0x48, 0x101, 0x7, "c76ff529868b1a98d9313aa8a3d230f7d3df5869d0f91f13a2aa367db5821b95ad6d6cec140b04d5fd695b1dd731297a1f1dcce2db0855"}, {0x18, 0x1, 0x2, "6c38cc64e80a6d11"}, {0x70, 0x10a, 0x10001, "b52acae036e72c7b702a7ea5507dce4739c04d415e0e790fce9b0bff65484c9fd4e5bfc1fc5ae97a3638b52500ac1662630c7727e29ec6da8b64db8aa6f66f3c7dfee64dc804df3d9e06b7adc43b814097fe2f33d4f9c1d642fbd5f2fa"}, {0xa0, 0x117, 0x7f, "0672101572b8254ea7954d98c47c4337f0ddf5fed781882fb3852f7c177c4d1cd00e740430e5aa36004358580f109bf878c341b710ff22b1b79ddcf1f9a27b46e74b874bb965d4ea097ee8b2e8919aa59822c1f5772e0ba0299805553adbc69f48b74f7ac6ba1c768b20fad98d7f1b2b47e3d000c5fc7640fd1a4b44fe6e5475f7f9d736e419cb21b486097467"}, {0xb8, 0x10b, 0x3, "600cfa2f37205296bfe80d58c9db39d28bf84f461a44a446c07233b772fcade4452a0f596f9834ce2dd97b3a5a0ee66e16c7a1a00f661ce041c20308fc93528ea732721259a5f84a3be53dee83b2b2cb53f193efe2e738829d51fd1570ddec3f49d58f9df618a677b999ba277e21ebdca2f04c6ca0ac0db257209a4d60d5e3137d93d07188eb29be0e195b166dc1f963db32b70df95234badbc3f025903910da8742"}, {0x10, 0x101, 0x3ff}, {0xa8, 0x29, 0xfffffffc, "68e31fa98388ae719dc31b3d7bb975729506204fce76845e451939486af3fc3375729a683a7ba71bb3f04701a39ea905cf0c906371112659c76e8237b71c192fd4f9e52c6adfc325c7b7bbecb133ab33f19e9afa7d97f92761551fa1235e10b9e81a2879b48d6f66f8a7f899073ce9eec3accbd7fcab868ad0a5ca6f40c8f83b99144311718d93eda019327e0ed80f68f51ed1"}], 0x13e0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1080, 0xfffffffd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000091007d0c0000000000000000181100006a4823ef8897cf191ead6afe3ea6e8160781a9424d7152548ee5a41b8bc530b00b32634827ff5f6efc9f118f946b53fa980d7b1d0315acbc18fc123ceed4b34e08e5567d0c92f65a30c7cf1e39790976ce4a883c41c623ec7b520df5fd3c1a451aebb9fdd4e8446ad43115c9b76cf73dd3e73dd1a05f7ab85b54c432733c314ad62d01cb1ada360237b1d006d704d8e397149d00c1f5995734", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000a40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2e0a7, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff7}, 0x94) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da6", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) 3.840253397s ago: executing program 1 (id=1252): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.572001953s ago: executing program 1 (id=1255): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_clone(0x8000, &(0x7f0000000500)="723d28512efc2e79d198f3063b1daa58e4678375072b44a063d095d6c725c6ac49559b2dd3a58c2c99da290d8660740057dae9fb7debb30c9dce48b146102e52bae15d75697b65e9d3d7fdcae7437f5f30039c7efcf5caaef5a7bef4", 0x5c, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="3685575d6ad8417193a132d68ed0d8e62ec64764f63c47589130ea5742368e36b094c1e4b6e0a9a2b39e5f28bb9fe09959dcca4f9ab8bc570e3feab80f5cc2cf184c8c06268b55bf62ec128dcb") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xf}, 0x108e64, 0xc78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8, 0x1040bb, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b7080000000000007baaf8ff0000000094080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.493493165s ago: executing program 2 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) 3.27226301s ago: executing program 2 (id=1259): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x10, 0x84}], 0x20}, 0x880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000240081064e81f782db44b9040a020800060000", 0x17}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2b, 'rdma'}]}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000200114140e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) 3.265220091s ago: executing program 0 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 4) 2.378062452s ago: executing program 1 (id=1263): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.65480892s ago: executing program 1 (id=1266): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, r0, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, 0x0, r0, 0x0, &(0x7f0000002a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 1.579029521s ago: executing program 3 (id=1267): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd000000"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.462582424s ago: executing program 2 (id=1269): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000000000000000850000007b00000095"], 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) 1.433941135s ago: executing program 3 (id=1270): r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffd7f1fc88, 0x2}, 0x140aa, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000020000006d0500000300000002000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000009aa8331000000000000000000000000000000000000000000603cbab8e5cd0ba2783ec5ffb4fc05f7dc109cc858aa8caeb2075dfd6da28b5cad894dc48e87bbb46f76b8c7f8a8539b6bd33cf5fe5d07259e5fcd9942b5a2dd47070dbf3de6b98a317f36c65657a3ef8ad900b1340dfa11e8ef022d3b01f860b9041d37fb56bfee94877ddcc77890ab765941660f531f8f46edb1f447b0cf7581b173c131dce8ce26f969edc095765c775a6ab582cc2bd9fe189e30613fd360baa04ad536e558fd76"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2, 0x0, 0x100000000000000}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x1000, r2}, 0x38) socket$kcm(0xa, 0x3, 0x73) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) sendmsg(r3, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004700)=[{0x0}, {0x0}, {&(0x7f0000004540)="13137dff561dc9bf7fb80cfeeb22ff8da0a9e661", 0x14}, {&(0x7f0000004600)}], 0x4}, 0x4000) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1081c2, 0x6, 0x800, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x684, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x800000000000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='#+(\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000380), 0x2, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000002b00), 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000500)=[{0x8, 0x8, 0x5, 0x4}, {0x7, 0x9c, 0x1, 0x1000000}, {0x1, 0x0, 0xc}, {0xfff8, 0xb, 0x7, 0xd}]}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fd00000000000000eaa08e367e01000000000021"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={&(0x7f00000001c0)='./file0\x00', r7, 0x4000, r5}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socket$kcm(0x10, 0x0, 0x0) 1.176268501s ago: executing program 3 (id=1271): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000030000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.175720261s ago: executing program 4 (id=1272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.161468052s ago: executing program 2 (id=1273): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r1 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f00000001c0), 0x4) socket$kcm(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r5], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.144099392s ago: executing program 1 (id=1274): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x6b, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000100)="6203a105590500000000002f1eafbcf704e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000580)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc2}, {&(0x7f00000004c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x357}], 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="98cae6ae8a6ae55db815a800dd268e0043ddf6078194115830a9623330b2b9e2bcf2491c799a5115dce28e95", 0x2c}], 0x1, &(0x7f0000000680)=[{0x110, 0x101, 0x9, "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"}, {0xd8, 0x102, 0x3, "23dd63030a743d4f63d39791db50c7bcd8ace5f53dfcf61939bacd73d013e3169d8cd23dc155dcd15c7ea1c439185d372c50263d92f12979f0f11ba76a23331f3631d635dbdf370ab28813af5edd8d642b977d9eda7cc93df42ff572736a8bab47604fcf64d5710293d746da198ab885b67246f67752f70f608dcbb75357eba0500a1a0cac3d8f3cbe05481b055209d5c92446cd9bf4205a8bb5b9cff6daec067801c586488195efaf883c45eb71839e93da9da4b92bc6c5b701bfecef504d6e8e"}, {0xd0, 0x114, 0x6, "01cfc2f4a3327824eabee1f06ebf7835b6e3ccb3162598161bb0ab3fbbf03f66ddc7b08d882e8a800865b81df04a2c1441858e00ea7fbed5965175cbce92de4dde15fc18217b2928062b18afb386eb26d0afd7e0f455a393947fa8e254d14e62cd50f6a2e4597a83d9be5567340205e1d4f4ebd240f31f9943b72d423f55d27fb062df2440947447ec815dc700074bc008fdcc37f530be7162cec83751e2ee379fce33b7796a19298febc2db043db5ccc292d30216ecfaf926c5"}, {0x70, 0x108, 0x4, "56b82a30bfb93f913a0ec971a7e5c7035904c9cb8165ef0b94dc4166db83471eaeb6d5132f73da6c219e7bdf00251923db67e08c6da0029510da1a448327207090ffc89856c46508992a209e5a0ac0708a4fac50139b81cae802"}, {0xf8, 0x10c, 0x5, "d9108301c75a08c1efd69b2a2b3215b29dfc43696eaf42a6deb2a8cfbe81c727c336b320e52fdf1a98e266334d51f674174060a6239f0954f36d7cfa80445f9b33468b6d010f0e8ff4c9f7b1f876996dd2dc2369f991d6e50e095d23d166e8d23dd1b34ccbd8d4a7c90f77a0471df8775161bfad2ad49fdc9b58c5890fa215b3af5fc4e1710caf6107b3b24a55063d57eae4c7943783de7905dbf00a2f6613388b17effba4c2b535964d55de90888e600c9ef14a43c32179d084732b2ff08167a6fd2e2cffc3d1b3d9450ff2660e05a47705e4dc00f9e555f98bdd9ed94eaed704"}], 0x420}, 0x4008095) 1.030543945s ago: executing program 3 (id=1275): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000200)) socket$kcm(0x2, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="8510003904000000950000000000002e34ad4e28e6001800000000000000000000950000000000ffff84100000fcffffff9500000000f20000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x9}, 0x113041, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, 0x7, 0x18108c, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x0, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x6, '\x00', 0x0, r7, 0x3, 0x4, 0x2}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x10049014) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 936.354467ms ago: executing program 4 (id=1276): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000440), 0x4) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0xfffffffffffffffe}, 0x1a114, 0xffffffffffffec27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 771.588031ms ago: executing program 4 (id=1277): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 696.137603ms ago: executing program 0 (id=1278): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x80054) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) 587.581145ms ago: executing program 1 (id=1279): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x10, 0x84}], 0x20}, 0x880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000240081064e81f782db44b9040a020800060000", 0x17}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2b, 'rdma'}]}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000200114140e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) 587.124915ms ago: executing program 2 (id=1280): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd000000"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 583.460485ms ago: executing program 3 (id=1281): getpid() socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='[-#]-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8b41609e09d2f4655c2f2", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000800)=0x200000000000fff9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 468.178968ms ago: executing program 4 (id=1282): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x4) (async) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) socketpair(0x50, 0x3, 0x9, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x3a) (async, rerun: 64) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, &(0x7f00000006c0), 0x4) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000140)=@raw=[@generic={0x73, 0xa, 0xa, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000500)='GPL\x00', 0xffffd510, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) (async) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003040)="507cc197", 0x4}], 0x1}, 0x841) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 357.046321ms ago: executing program 2 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x28c081, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, 0x0, 0x0) 297.081112ms ago: executing program 0 (id=1284): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, r0, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, 0x0, r0, 0x0, &(0x7f0000002a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 180.303965ms ago: executing program 3 (id=1285): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000030000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 162.939806ms ago: executing program 4 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 4 (id=1287): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xf6) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x6, &(0x7f0000000740)=r5, 0x4) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r4, 0x84, 0x1f, &(0x7f0000000100)=r6, 0x129) kernel console output (not intermixed with test programs): NGE): hsr_slave_1: link becomes ready [ 72.067339][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.076248][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.084818][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.093232][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.102274][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.109651][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.117404][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.125978][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.140240][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.148075][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.156124][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.172450][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.241279][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.251080][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.309863][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.318146][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.354653][ T4272] device veth0_vlan entered promiscuous mode [ 72.362195][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.380884][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.405789][ T4272] device veth1_vlan entered promiscuous mode [ 72.475308][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.501396][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.524483][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.534673][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.545670][ T4272] device veth0_macvtap entered promiscuous mode [ 72.579265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.597686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.620657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.646002][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.659842][ T4272] device veth1_macvtap entered promiscuous mode [ 72.684385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.710603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.718061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.766746][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.775923][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.786150][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.817237][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.828102][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.837859][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.850188][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.858906][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.869088][ T4276] device veth0_vlan entered promiscuous mode [ 72.877502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.886239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.895106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.903998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.914875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.924241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.932695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.941718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.951283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.958680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.970044][ T4273] device veth0_vlan entered promiscuous mode [ 72.983856][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.016003][ T4276] device veth1_vlan entered promiscuous mode [ 73.034601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.042937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.052337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.061728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.069404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.081602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.088975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.103066][ T4273] device veth1_vlan entered promiscuous mode [ 73.124060][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.156473][ T4273] device veth0_macvtap entered promiscuous mode [ 73.171681][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.182447][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.190997][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.199013][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.208070][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.216739][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.257712][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.268102][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.280824][ T4273] device veth1_macvtap entered promiscuous mode [ 73.306244][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.316209][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.337537][ T4276] device veth0_macvtap entered promiscuous mode [ 73.368263][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.378357][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.382019][ T4276] device veth1_macvtap entered promiscuous mode [ 73.405052][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.416787][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.428127][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.440415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.448936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.457027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.465327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.475807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.485315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.493704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.502869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.511709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.522797][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.531793][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.546372][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.558478][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.572737][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.581153][ T4271] device veth0_vlan entered promiscuous mode [ 73.606074][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.620053][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.635321][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.645969][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.657343][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.665439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.678358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.687460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.696259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.707665][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.716839][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.721733][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.725352][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.735015][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.750060][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.766018][ T4284] device veth0_vlan entered promiscuous mode [ 73.779600][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.789287][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.797077][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 73.806097][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.821909][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.832834][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.843664][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.854178][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.864935][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.872878][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 73.872896][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 73.878864][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 73.905184][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.915846][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.928586][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.945808][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.960295][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 73.960619][ T4284] device veth1_vlan entered promiscuous mode [ 73.977410][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.986720][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.995604][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.004367][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.016833][ T4271] device veth1_vlan entered promiscuous mode [ 74.146986][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.173169][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.183096][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.199053][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.208900][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.226964][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.241597][ T4271] device veth0_macvtap entered promiscuous mode [ 74.261692][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.292245][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.303091][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.325159][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.344183][ T4284] device veth0_macvtap entered promiscuous mode [ 74.351716][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.361360][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.369598][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.394924][ T4284] device veth1_macvtap entered promiscuous mode [ 74.420937][ T4271] device veth1_macvtap entered promiscuous mode [ 74.439810][ C0] hrtimer: interrupt took 115473 ns [ 74.458987][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.470884][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.489528][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.504583][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.515498][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.527744][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.542436][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.568246][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.603192][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.623805][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.639595][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.652158][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.662993][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.674216][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.684747][ T4362] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8'. [ 74.685037][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.705828][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.727377][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.736551][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.748589][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.761061][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.772211][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.782906][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.793252][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.803996][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.813966][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.824691][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.836232][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.850067][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.866112][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.876523][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.877603][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.911323][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.919525][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.930471][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.945689][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.967335][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.976869][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.986552][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.997260][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.015009][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.039862][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.055165][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.066487][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.084974][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.097818][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.109884][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.122362][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.135461][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.168698][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.178105][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.189671][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.199664][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.209187][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.218243][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.270102][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.289279][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.311037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.415294][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.434116][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.492069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.537379][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.549317][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.575652][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.586925][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.596312][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.605687][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.606251][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.627949][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.650643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.874338][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 75.955071][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 75.959927][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 75.961137][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 76.031346][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 76.070130][ T4384] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 76.114922][ T4384] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.162290][ T4386] Zero length message leads to an empty skb [ 77.982893][ T4409] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 78.428746][ T4409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.441871][ T4409] team0: Port device batadv0 added [ 78.539924][ T4409] syz.3.17 (4409) used greatest stack depth: 19536 bytes left [ 78.637521][ T4413] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 78.784898][ T4413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.801311][ T4413] team0: Port device batadv0 added [ 78.811261][ T4411] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 78.920843][ T4411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.937853][ T4411] team0: Port device batadv0 added [ 79.619835][ T4433] netlink: 'syz.3.22': attribute type 2 has an invalid length. [ 79.633533][ T4433] netlink: 'syz.3.22': attribute type 8 has an invalid length. [ 79.673531][ T4433] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22'. [ 83.259223][ T4459] netlink: 'syz.0.35': attribute type 10 has an invalid length. [ 83.300473][ T4459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.308895][ T4459] team0: Port device batadv0 added [ 83.590663][ T4470] netlink: 'syz.1.38': attribute type 10 has an invalid length. [ 84.524144][ T4475] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 84.926708][ T4491] netlink: 'syz.2.44': attribute type 2 has an invalid length. [ 84.983182][ T4491] netlink: 'syz.2.44': attribute type 8 has an invalid length. [ 85.028584][ T4491] netlink: 132 bytes leftover after parsing attributes in process `syz.2.44'. [ 85.360375][ T4494] netlink: 'syz.4.46': attribute type 10 has an invalid length. [ 85.591632][ T4494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.629595][ T4494] team0: Port device batadv0 added [ 85.642441][ T4497] netlink: 'syz.1.45': attribute type 10 has an invalid length. [ 85.662244][ T4494] syz.4.46 (4494) used greatest stack depth: 19216 bytes left [ 85.799209][ T4500] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET) [ 85.918454][ T4504] netlink: 'syz.1.51': attribute type 10 has an invalid length. [ 86.001922][ T4513] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 86.089391][ T4511] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 86.523269][ T22] cfg80211: failed to load regulatory.db [ 86.930390][ T4538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.63'. [ 88.372313][ T4585] validate_nla: 19 callbacks suppressed [ 88.372350][ T4585] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 88.587664][ T4590] netlink: 'syz.0.97': attribute type 10 has an invalid length. [ 88.633392][ T4589] netlink: 'syz.2.86': attribute type 10 has an invalid length. [ 88.877555][ T4600] netlink: 'syz.2.91': attribute type 10 has an invalid length. [ 88.940992][ T4602] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 88.949302][ T4606] netlink: 'syz.4.93': attribute type 2 has an invalid length. [ 88.978853][ T4606] netlink: 'syz.4.93': attribute type 8 has an invalid length. [ 89.009935][ T4606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.93'. [ 89.083644][ T4607] netlink: 'syz.4.93': attribute type 2 has an invalid length. [ 89.119967][ T4607] netlink: 'syz.4.93': attribute type 8 has an invalid length. [ 89.152975][ T4607] netlink: 132 bytes leftover after parsing attributes in process `syz.4.93'. [ 89.184977][ T4611] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 90.036142][ T4638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.108'. [ 90.601489][ T4655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.116'. [ 90.670308][ T4658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.116'. [ 91.428427][ T4686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.130'. [ 92.406836][ T4704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.136'. [ 92.452217][ T4704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.136'. [ 93.552672][ T4731] validate_nla: 29 callbacks suppressed [ 93.552810][ T4731] netlink: 'syz.4.146': attribute type 10 has an invalid length. [ 93.620510][ T4727] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 93.711265][ T4732] netlink: 'syz.2.149': attribute type 2 has an invalid length. [ 93.718968][ T4732] netlink: 'syz.2.149': attribute type 8 has an invalid length. [ 93.790143][ T4732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.149'. [ 94.291537][ T4739] netlink: 'syz.1.151': attribute type 10 has an invalid length. [ 94.703623][ T4752] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 94.736236][ T4754] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 94.971463][ T4760] netlink: 'syz.4.160': attribute type 10 has an invalid length. [ 95.606065][ T4774] netlink: 'syz.4.174': attribute type 10 has an invalid length. [ 95.775412][ T4776] netlink: 'syz.1.165': attribute type 10 has an invalid length. [ 95.971614][ T4783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.167'. [ 97.226365][ T4801] team0: Device vxcan1 is of different type [ 97.276127][ T4805] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.177'. [ 97.938909][ T4827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.186'. [ 98.717901][ T4834] validate_nla: 16 callbacks suppressed [ 98.717916][ T4834] netlink: 'syz.0.190': attribute type 3 has an invalid length. [ 98.747618][ T4840] netlink: 'syz.4.193': attribute type 10 has an invalid length. [ 98.766839][ T4834] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.190'. [ 98.948034][ T4840] team0: Device vxcan1 is of different type [ 98.984304][ T4842] netlink: 'syz.2.192': attribute type 10 has an invalid length. [ 99.030685][ T4849] netlink: 'syz.1.195': attribute type 10 has an invalid length. [ 99.174884][ T4851] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 99.240719][ T4853] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 99.345476][ T4858] netlink: 'syz.1.209': attribute type 10 has an invalid length. [ 99.389119][ T4858] team0: Device vxcan1 is of different type [ 99.445672][ T4862] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 99.462498][ T4862] team0: Device vxcan1 is of different type [ 99.503017][ T4864] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 99.537179][ T4864] team0: Device vxcan1 is of different type [ 99.694714][ T4873] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 99.840894][ T4875] team0: Device vxcan1 is of different type [ 100.047765][ T4883] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.208'. [ 100.412413][ T4904] team0: Device vxcan1 is of different type [ 101.033758][ T4922] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.226'. [ 101.768160][ T4952] team0: Device vxcan1 is of different type [ 102.026034][ T4961] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.244'. [ 102.227669][ T4970] netlink: 132 bytes leftover after parsing attributes in process `syz.3.247'. [ 102.374383][ T4973] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.260'. [ 103.129593][ T5002] team0: Device vxcan1 is of different type [ 103.390240][ T5016] netlink: 132 bytes leftover after parsing attributes in process `syz.4.265'. [ 103.908221][ T5031] validate_nla: 25 callbacks suppressed [ 103.908235][ T5031] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 104.190713][ T5034] netlink: 'syz.2.283': attribute type 2 has an invalid length. [ 104.250295][ T5034] netlink: 'syz.2.283': attribute type 8 has an invalid length. [ 104.278996][ T5034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.283'. [ 104.322450][ T5036] netlink: 'syz.4.273': attribute type 10 has an invalid length. [ 104.555573][ T5040] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 105.364256][ T5055] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 105.437411][ T5055] team0: Device vxcan1 is of different type [ 105.496879][ T5058] netlink: 'syz.2.282': attribute type 10 has an invalid length. [ 106.719116][ T5085] netlink: 'syz.4.292': attribute type 10 has an invalid length. [ 107.042853][ T5094] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 107.316628][ T5099] netlink: 'syz.3.298': attribute type 10 has an invalid length. [ 107.346273][ T5099] team0: Device vxcan1 is of different type [ 109.874174][ T5133] validate_nla: 2 callbacks suppressed [ 109.874252][ T5133] netlink: 'syz.4.309': attribute type 10 has an invalid length. [ 110.117710][ T5141] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 110.236120][ T5145] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 113.330584][ T5193] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 114.873204][ T5218] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 117.129519][ T5262] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 117.475665][ T5274] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 117.639891][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 118.564305][ T5298] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 118.583614][ T5298] team0: Device vxcan1 is of different type [ 119.327697][ T5307] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 119.616313][ T5315] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 119.630368][ T11] wlan1: Trigger new scan to find an IBSS to join [ 121.640347][ T57] wlan1: Trigger new scan to find an IBSS to join [ 121.641048][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 121.874521][ T5350] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 122.335302][ T5352] netlink: 'syz.4.391': attribute type 10 has an invalid length. [ 122.392164][ T5352] team0: Device vxcan1 is of different type [ 123.630140][ T5332] wlan1: Creating new IBSS network, BSSID 76:2a:43:bd:31:81 [ 124.119536][ T5377] netlink: 'syz.3.401': attribute type 10 has an invalid length. [ 124.132422][ T5379] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 124.499281][ T5390] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 124.576332][ T5390] team0: Device vxcan1 is of different type [ 124.670682][ T57] wlan1: Trigger new scan to find an IBSS to join [ 124.677406][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 125.740831][ T5412] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 125.762085][ T5412] team0: Device vxcan1 is of different type [ 126.195024][ T5422] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 126.263885][ T5424] netlink: 'syz.2.416': attribute type 2 has an invalid length. [ 126.281413][ T5424] netlink: 'syz.2.416': attribute type 8 has an invalid length. [ 126.323538][ T5424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.416'. [ 126.669979][ T57] wlan1: Creating new IBSS network, BSSID 36:68:e0:31:13:86 [ 126.670205][ T32] wlan1: Trigger new scan to find an IBSS to join [ 126.821950][ T5432] netlink: 'syz.0.420': attribute type 10 has an invalid length. [ 126.845207][ T5432] team0: Device vxcan1 is of different type [ 127.177949][ T5438] netlink: 'syz.1.423': attribute type 3 has an invalid length. [ 127.230917][ T5438] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.423'. [ 128.088323][ T5453] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 128.163753][ T5453] team0: Device vxcan1 is of different type [ 128.389942][ T5462] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.591456][ T47] wlan1: Trigger new scan to find an IBSS to join [ 128.605609][ T5468] netlink: 'syz.1.431': attribute type 10 has an invalid length. [ 128.666991][ T5470] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 128.675058][ T57] wlan1: Trigger new scan to find an IBSS to join [ 128.712763][ T5470] team0: Device vxcan1 is of different type [ 128.813361][ T5473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.432'. [ 129.546307][ T5487] validate_nla: 2 callbacks suppressed [ 129.546342][ T5487] netlink: 'syz.0.436': attribute type 10 has an invalid length. [ 130.184580][ T5498] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.591029][ T32] wlan1: Creating new IBSS network, BSSID 8e:52:70:a7:25:ff [ 130.679254][ T32] wlan1: Trigger new scan to find an IBSS to join [ 131.045431][ T5511] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 131.261850][ T5515] netlink: 'syz.2.447': attribute type 10 has an invalid length. [ 131.305488][ T5515] team0: Device vxcan1 is of different type [ 131.502175][ T5521] netlink: 'syz.3.448': attribute type 2 has an invalid length. [ 131.514941][ T5521] netlink: 'syz.3.448': attribute type 8 has an invalid length. [ 131.537093][ T5521] netlink: 132 bytes leftover after parsing attributes in process `syz.3.448'. [ 132.565915][ T5537] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 132.622776][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.629266][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.672033][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 132.678617][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 133.451862][ T5559] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 133.559056][ T5559] team0: Device vxcan1 is of different type [ 133.660245][ T32] wlan1: Trigger new scan to find an IBSS to join [ 134.163515][ T5563] netlink: 'syz.1.464': attribute type 10 has an invalid length. [ 134.334913][ T5571] netlink: 'syz.4.466': attribute type 2 has an invalid length. [ 134.430790][ T5571] netlink: 'syz.4.466': attribute type 8 has an invalid length. [ 134.438488][ T5571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.466'. [ 134.537860][ T5572] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 134.645921][ T5575] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 134.670376][ T4326] wlan1: Creating new IBSS network, BSSID 7e:a5:9b:26:d4:21 [ 134.670502][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 134.900362][ T5578] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 135.301913][ T5584] netlink: 'syz.1.472': attribute type 10 has an invalid length. [ 135.630959][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 135.779184][ T5599] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 135.951591][ T5599] team0: Device vxcan1 is of different type [ 136.445945][ T5605] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 136.591282][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 136.757932][ T5609] netlink: 'syz.4.482': attribute type 10 has an invalid length. [ 136.825068][ T5611] netlink: 'syz.3.483': attribute type 10 has an invalid length. [ 137.023893][ T5622] netlink: 'syz.4.485': attribute type 2 has an invalid length. [ 137.039910][ T5622] netlink: 'syz.4.485': attribute type 8 has an invalid length. [ 137.073062][ T5622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.485'. [ 137.098581][ T5623] netlink: 'syz.3.487': attribute type 2 has an invalid length. [ 137.114790][ T5623] netlink: 164 bytes leftover after parsing attributes in process `syz.3.487'. [ 137.273547][ T5625] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.488'. [ 138.414480][ T5658] netlink: 164 bytes leftover after parsing attributes in process `syz.0.501'. [ 138.590752][ T5334] wlan1: Trigger new scan to find an IBSS to join [ 138.649405][ T5661] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.502'. [ 138.670381][ T5334] wlan1: Trigger new scan to find an IBSS to join [ 138.690672][ T5334] wlan1: Creating new IBSS network, BSSID ea:e6:b5:7b:f3:7c [ 139.021395][ T5682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.510'. [ 139.915275][ T5709] validate_nla: 15 callbacks suppressed [ 139.915362][ T5709] netlink: 'syz.4.523': attribute type 10 has an invalid length. [ 139.956670][ T5703] netlink: 'syz.2.522': attribute type 3 has an invalid length. [ 139.990544][ T5703] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.522'. [ 140.241839][ T5720] netlink: 'syz.4.526': attribute type 10 has an invalid length. [ 140.387544][ T5724] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 140.670919][ T4342] wlan1: Creating new IBSS network, BSSID c6:ba:92:0f:c9:fd [ 140.691586][ T5737] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 141.283410][ T5753] netlink: 'syz.3.537': attribute type 2 has an invalid length. [ 141.343963][ T5753] netlink: 'syz.3.537': attribute type 8 has an invalid length. [ 141.403492][ T5753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.537'. [ 142.671119][ T32] wlan1: Trigger new scan to find an IBSS to join [ 142.825470][ T5775] netlink: 'syz.4.547': attribute type 10 has an invalid length. [ 143.156354][ T5778] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 143.177163][ T5781] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 143.273914][ T5785] netlink: 'syz.2.552': attribute type 10 has an invalid length. [ 143.330497][ T5786] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 144.590431][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 145.028667][ T5847] validate_nla: 16 callbacks suppressed [ 145.028757][ T5847] netlink: 'syz.1.579': attribute type 10 has an invalid length. [ 145.073651][ T5849] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 145.202549][ T5853] netlink: 'syz.4.586': attribute type 10 has an invalid length. [ 145.290365][ T5857] netlink: 'syz.0.583': attribute type 10 has an invalid length. [ 145.319933][ T5858] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 145.648332][ T5868] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 145.729014][ T5873] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 145.745339][ T5874] netlink: 'syz.2.592': attribute type 10 has an invalid length. [ 146.600064][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 146.642954][ T5907] netlink: 'syz.3.606': attribute type 10 has an invalid length. [ 146.702563][ T5911] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 146.893961][ T5915] team0: Device vxcan1 is of different type [ 147.058718][ T5927] netlink: 164 bytes leftover after parsing attributes in process `syz.3.614'. [ 147.506846][ T5939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.620'. [ 148.600106][ T57] wlan1: Creating new IBSS network, BSSID 22:31:76:86:0c:20 [ 148.670442][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 148.725962][ T47] wlan1: Creating new IBSS network, BSSID 82:43:f6:2a:b3:d5 [ 148.932684][ T5962] team0: Device vxcan1 is of different type [ 149.024624][ T5965] netlink: 164 bytes leftover after parsing attributes in process `syz.3.631'. [ 149.074196][ T5968] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.138598][ T5971] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.397889][ T5980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.636'. [ 150.465370][ T5997] validate_nla: 9 callbacks suppressed [ 150.465385][ T5997] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 150.495528][ T5997] netlink: 164 bytes leftover after parsing attributes in process `syz.2.643'. [ 150.530037][ T6000] netlink: 'syz.3.645': attribute type 10 has an invalid length. [ 150.550857][ T6000] team0: Device vxcan1 is of different type [ 150.975258][ T6005] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.999149][ T6010] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.017102][ T6009] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.156156][ T6014] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 151.201582][ T6014] team0: Device vxcan1 is of different type [ 151.241032][ T6016] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.377802][ T6024] netlink: 'syz.3.652': attribute type 2 has an invalid length. [ 151.418857][ T6024] netlink: 'syz.3.652': attribute type 8 has an invalid length. [ 151.486574][ T6024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.652'. [ 151.630373][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 151.913973][ T6042] netlink: 'syz.2.658': attribute type 2 has an invalid length. [ 151.940677][ T6042] netlink: 164 bytes leftover after parsing attributes in process `syz.2.658'. [ 152.493582][ T6054] netlink: 'syz.2.660': attribute type 2 has an invalid length. [ 152.539618][ T6054] netlink: 'syz.2.660': attribute type 8 has an invalid length. [ 152.547857][ T6054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.660'. [ 152.711000][ T6057] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 152.767735][ T6059] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 152.862295][ T6061] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 152.881463][ T6061] team0: Device vxcan1 is of different type [ 153.216293][ T6074] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 153.267934][ T6074] team0: Device vxcan1 is of different type [ 153.514283][ T6086] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.630859][ T57] wlan1: Trigger new scan to find an IBSS to join [ 153.768148][ T6095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.678'. [ 153.960375][ T6100] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 154.041557][ T6097] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.679'. [ 154.250664][ T6102] team0: Device vxcan1 is of different type [ 154.311575][ T6107] team0: Device vxcan1 is of different type [ 154.623777][ T6120] team0: Device vxcan1 is of different type [ 154.705548][ T6116] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.687'. [ 154.877322][ T6128] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.124664][ T6137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.695'. [ 155.200424][ T6130] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.694'. [ 155.630721][ T4326] wlan1: Trigger new scan to find an IBSS to join [ 155.827444][ T6146] validate_nla: 10 callbacks suppressed [ 155.827562][ T6146] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 155.914232][ T6143] netlink: 14 bytes leftover after parsing attributes in process `syz.2.697'. [ 156.201047][ T6144] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 156.220007][ T6144] team0: Device vxcan1 is of different type [ 156.258494][ T6146] netlink: 'syz.2.697': attribute type 21 has an invalid length. [ 156.277788][ T6146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.697'. [ 156.428193][ T6165] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 156.436024][ T6167] netlink: 'syz.1.703': attribute type 29 has an invalid length. [ 156.500646][ T6167] netlink: 'syz.1.703': attribute type 29 has an invalid length. [ 156.698343][ T6169] netlink: 'syz.1.703': attribute type 29 has an invalid length. [ 156.738829][ T6204] netlink: 'syz.1.703': attribute type 29 has an invalid length. [ 156.779131][ T6223] netlink: 'syz.1.703': attribute type 29 has an invalid length. [ 157.189607][ T6242] wlan1: Trigger new scan to find an IBSS to join [ 157.189650][ T6240] wlan1: Trigger new scan to find an IBSS to join [ 157.196234][ T6245] wlan1: Trigger new scan to find an IBSS to join [ 157.491096][ T6243] netlink: 'syz.3.707': attribute type 2 has an invalid length. [ 157.498824][ T6243] netlink: 'syz.3.707': attribute type 8 has an invalid length. [ 157.631440][ T6215] wlan1: Trigger new scan to find an IBSS to join [ 157.660128][ T6243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.707'. [ 157.683869][ T6255] team0: Device vxcan1 is of different type [ 157.780076][ T6256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.708'. [ 157.791316][ T6260] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.710'. [ 158.188833][ T6273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.722'. [ 158.440624][ T6280] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 158.670185][ T6198] wlan1: Trigger new scan to find an IBSS to join [ 159.278949][ T6304] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.724'. [ 159.304966][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.315463][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.400734][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.408485][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.417961][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.425540][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.529621][ T6299] team0: Port device bridge0 added [ 159.544917][ T6225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.589139][ T6309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.730'. [ 159.630325][ T6309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.730'. [ 159.639346][ T6198] wlan1: Trigger new scan to find an IBSS to join [ 159.646395][ T6215] wlan1: Trigger new scan to find an IBSS to join [ 159.672104][ T6315] netlink: 60 bytes leftover after parsing attributes in process `syz.4.730'. [ 159.712722][ T6312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.729'. [ 159.753745][ T6317] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.771032][ T6309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.730'. [ 160.479282][ T6326] syz.0.737 (6326) used greatest stack depth: 17408 bytes left [ 160.670495][ T6230] wlan1: Trigger new scan to find an IBSS to join [ 160.914555][ T6345] validate_nla: 13 callbacks suppressed [ 160.914762][ T6345] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 160.944576][ T6349] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.014247][ T6346] FAULT_INJECTION: forcing a failure. [ 161.014247][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.052302][ T6346] CPU: 1 PID: 6346 Comm: syz.0.743 Not tainted syzkaller #0 [ 161.059617][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.069672][ T6346] Call Trace: [ 161.072941][ T6346] [ 161.075864][ T6346] dump_stack_lvl+0x188/0x24e [ 161.080552][ T6346] ? asm_sysvec_irq_work+0x16/0x20 [ 161.085659][ T6346] ? show_regs_print_info+0x12/0x12 [ 161.090857][ T6346] ? asm_sysvec_irq_work+0x16/0x20 [ 161.095977][ T6346] should_fail_ex+0x390/0x4c0 [ 161.100654][ T6346] copy_fpstate_to_sigframe+0xaae/0xd70 [ 161.106199][ T6346] ? copy_fpstate_to_sigframe+0x26a/0xd70 [ 161.111912][ T6346] ? fpregs_set+0x5f0/0x5f0 [ 161.116410][ T6346] ? ct_irq_exit_irqson+0x113/0x170 [ 161.121602][ T6346] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.127577][ T6346] ? lock_chain_count+0x20/0x20 [ 161.132418][ T6346] ? kfree+0x30/0x1a0 [ 161.136403][ T6346] ? arch_do_signal_or_restart+0x23b/0x1310 [ 161.142289][ T6346] ? fpu__alloc_mathframe+0xa3/0x120 [ 161.147571][ T6346] arch_do_signal_or_restart+0x67a/0x1310 [ 161.153289][ T6346] ? cpu_online+0xa0/0xa0 [ 161.157612][ T6346] ? bpf_prog_test_run+0x332/0x390 [ 161.162734][ T6346] ? get_sigframe_size+0x10/0x10 [ 161.167675][ T6346] ? __sys_bpf+0x62b/0x780 [ 161.172102][ T6346] ? exit_to_user_mode_loop+0x3b/0x110 [ 161.177562][ T6346] exit_to_user_mode_loop+0x70/0x110 [ 161.182843][ T6346] exit_to_user_mode_prepare+0xee/0x180 [ 161.188388][ T6346] syscall_exit_to_user_mode+0x16/0x40 [ 161.193847][ T6346] do_syscall_64+0x58/0xa0 [ 161.198258][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 161.202930][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 161.207603][ T6346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.213505][ T6346] RIP: 0033:0x7f256c99e159 [ 161.217919][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.237518][ T6346] RSP: 002b:00007f256d93c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.245934][ T6346] RAX: fffffffffffffffc RBX: 00007f256cc25fa0 RCX: 00007f256c99e159 [ 161.253898][ T6346] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a [ 161.261862][ T6346] RBP: 00007f256d93c090 R08: 0000000000000000 R09: 0000000000000000 [ 161.269823][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.277786][ T6346] R13: 00007f256cc26038 R14: 00007f256cc25fa0 R15: 00007ffd4a0de3f8 [ 161.285764][ T6346] [ 161.630009][ T6233] wlan1: Trigger new scan to find an IBSS to join [ 161.962886][ T6380] netlink: 'syz.4.757': attribute type 2 has an invalid length. [ 161.988163][ T6380] netlink: 'syz.4.757': attribute type 8 has an invalid length. [ 162.064906][ T6384] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 162.084207][ T6379] netlink: 'syz.2.758': attribute type 3 has an invalid length. [ 162.597439][ T6233] wlan1: Trigger new scan to find an IBSS to join [ 162.787148][ T6407] netlink: 'syz.2.767': attribute type 2 has an invalid length. [ 162.820414][ T6407] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 162.828099][ T6407] __nla_validate_parse: 5 callbacks suppressed [ 162.828112][ T6407] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.767'. [ 162.908563][ T6412] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.770'. [ 163.438662][ T6424] netlink: 'syz.0.773': attribute type 3 has an invalid length. [ 163.449697][ T6424] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.773'. [ 163.597103][ T6421] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.630322][ T6230] wlan1: Trigger new scan to find an IBSS to join [ 163.637982][ T6198] wlan1: Trigger new scan to find an IBSS to join [ 164.107983][ T6445] netlink: 'syz.3.779': attribute type 2 has an invalid length. [ 164.128884][ T6445] netlink: 'syz.3.779': attribute type 8 has an invalid length. [ 164.137263][ T6445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.779'. [ 164.310095][ T6233] tipc: Subscription rejected, illegal request [ 164.357014][ T6454] netlink: 'syz.4.783': attribute type 10 has an invalid length. [ 164.512782][ T6454] device veth0_vlan left promiscuous mode [ 164.527324][ T6454] device veth0_vlan entered promiscuous mode [ 164.554458][ T6454] team0: Device veth0_vlan failed to register rx_handler [ 164.600531][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 164.748154][ T6215] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 164.763820][ T6215] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 164.833702][ T6463] FAULT_INJECTION: forcing a failure. [ 164.833702][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 164.856563][ T6463] CPU: 0 PID: 6463 Comm: syz.1.786 Not tainted syzkaller #0 [ 164.863895][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.873966][ T6463] Call Trace: [ 164.877246][ T6463] [ 164.880180][ T6463] dump_stack_lvl+0x188/0x24e [ 164.884874][ T6463] ? show_regs_print_info+0x12/0x12 [ 164.890083][ T6463] ? load_image+0x410/0x410 [ 164.894597][ T6463] ? __lock_acquire+0x7c40/0x7c40 [ 164.899629][ T6463] ? mark_lock+0x94/0x320 [ 164.903979][ T6463] should_fail_ex+0x390/0x4c0 [ 164.908682][ T6463] should_failslab+0x5/0x20 [ 164.913362][ T6463] slab_pre_alloc_hook+0x59/0x300 [ 164.918389][ T6463] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.924551][ T6463] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 164.930455][ T6463] __kmem_cache_alloc_node+0x4f/0x270 [ 164.935848][ T6463] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.942031][ T6463] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 164.947945][ T6463] kmalloc_trace+0x26/0xe0 [ 164.952383][ T6463] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 164.958113][ T6463] ? sctp_stream_interleave_init+0x54/0x90 [ 164.963937][ T6463] sctp_association_new+0x15d4/0x2520 [ 164.969332][ T6463] sctp_connect_new_asoc+0x2da/0x6a0 [ 164.974649][ T6463] ? __sctp_connect+0xd80/0xd80 [ 164.979510][ T6463] ? __local_bh_enable_ip+0x136/0x1c0 [ 164.984904][ T6463] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 164.990455][ T6463] ? security_sctp_bind_connect+0x85/0xb0 [ 164.996195][ T6463] sctp_sendmsg+0x1686/0x2940 [ 165.000904][ T6463] ? sctp_getsockopt+0x8a0/0x8a0 [ 165.005856][ T6463] ? __might_fault+0xa6/0x120 [ 165.010540][ T6463] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 165.016966][ T6463] ? aa_sock_msg_perm+0x94/0x150 [ 165.021923][ T6463] ? inet_sendmsg+0xca/0x2a0 [ 165.026513][ T6463] ? inet_send_prepare+0x250/0x250 [ 165.031633][ T6463] ____sys_sendmsg+0x5ed/0x9a0 [ 165.036425][ T6463] ? __sys_sendmsg_sock+0x30/0x30 [ 165.041452][ T6463] ? __import_iovec+0x306/0x510 [ 165.046326][ T6463] ? import_iovec+0x6f/0xa0 [ 165.050845][ T6463] ___sys_sendmsg+0x2a2/0x360 [ 165.055541][ T6463] ? __sys_sendmsg+0x2a0/0x2a0 [ 165.060364][ T6463] ? __lock_acquire+0x7c40/0x7c40 [ 165.065451][ T6463] __se_sys_sendmsg+0x1c3/0x2b0 [ 165.070314][ T6463] ? ct_nmi_exit+0x145/0x1c0 [ 165.074914][ T6463] ? __x64_sys_sendmsg+0x80/0x80 [ 165.079901][ T6463] ? lockdep_hardirqs_on+0x94/0x140 [ 165.085115][ T6463] do_syscall_64+0x4c/0xa0 [ 165.089536][ T6463] ? clear_bhb_loop+0x60/0xb0 [ 165.094218][ T6463] ? clear_bhb_loop+0x60/0xb0 [ 165.098903][ T6463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.104804][ T6463] RIP: 0033:0x7fe4cf99e159 [ 165.109221][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.128845][ T6463] RSP: 002b:00007fe4d0821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.137271][ T6463] RAX: ffffffffffffffda RBX: 00007fe4cfc25fa0 RCX: 00007fe4cf99e159 [ 165.145247][ T6463] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 165.153220][ T6463] RBP: 00007fe4d0821090 R08: 0000000000000000 R09: 0000000000000000 [ 165.161193][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.169165][ T6463] R13: 00007fe4cfc26038 R14: 00007fe4cfc25fa0 R15: 00007ffc8e17dea8 [ 165.177170][ T6463] [ 165.361827][ T6467] FAULT_INJECTION: forcing a failure. [ 165.361827][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 165.374744][ T6467] CPU: 0 PID: 6467 Comm: syz.4.788 Not tainted syzkaller #0 [ 165.382050][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.392112][ T6467] Call Trace: [ 165.395388][ T6467] [ 165.398310][ T6467] dump_stack_lvl+0x188/0x24e [ 165.402992][ T6467] ? show_regs_print_info+0x12/0x12 [ 165.408186][ T6467] ? load_image+0x410/0x410 [ 165.412688][ T6467] ? __might_sleep+0xd0/0xd0 [ 165.417269][ T6467] ? __lock_acquire+0x7c40/0x7c40 [ 165.422295][ T6467] should_fail_ex+0x390/0x4c0 [ 165.426972][ T6467] should_failslab+0x5/0x20 [ 165.431465][ T6467] slab_pre_alloc_hook+0x59/0x300 [ 165.436484][ T6467] ? __lock_acquire+0x138a/0x7c40 [ 165.441513][ T6467] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 165.447226][ T6467] __kmem_cache_alloc_node+0x4f/0x270 [ 165.452593][ T6467] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 165.458303][ T6467] __kmalloc+0xa3/0x240 [ 165.462464][ T6467] tomoyo_realpath_from_path+0xe2/0x5c0 [ 165.468009][ T6467] ? tomoyo_domain+0xd2/0x120 [ 165.472687][ T6467] ? tomoyo_path_number_perm+0x205/0x650 [ 165.478315][ T6467] tomoyo_path_number_perm+0x22f/0x650 [ 165.483768][ T6467] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 165.489226][ T6467] ? ksys_write+0x1ce/0x260 [ 165.493727][ T6467] ? common_file_perm+0x171/0x1c0 [ 165.498769][ T6467] ? __fget_files+0x28/0x460 [ 165.503362][ T6467] security_file_ioctl+0x6c/0xa0 [ 165.508293][ T6467] __se_sys_ioctl+0x48/0x170 [ 165.512880][ T6467] do_syscall_64+0x4c/0xa0 [ 165.517292][ T6467] ? clear_bhb_loop+0x60/0xb0 [ 165.521963][ T6467] ? clear_bhb_loop+0x60/0xb0 [ 165.526637][ T6467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.532524][ T6467] RIP: 0033:0x7fe33739e159 [ 165.536939][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.556536][ T6467] RSP: 002b:00007fe3381b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.564940][ T6467] RAX: ffffffffffffffda RBX: 00007fe337625fa0 RCX: 00007fe33739e159 [ 165.572904][ T6467] RDX: 0000200000000040 RSI: 00000000000089f2 RDI: 0000000000000003 [ 165.580877][ T6467] RBP: 00007fe3381b8090 R08: 0000000000000000 R09: 0000000000000000 [ 165.588845][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.596813][ T6467] R13: 00007fe337626038 R14: 00007fe337625fa0 R15: 00007ffea185bf18 [ 165.604792][ T6467] [ 165.629885][ T6230] wlan1: Trigger new scan to find an IBSS to join [ 165.659953][ T6467] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.919071][ T6468] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.787'. [ 166.440407][ T6493] validate_nla: 1 callbacks suppressed [ 166.441021][ T6493] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 166.478705][ T6493] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.797'. [ 166.500825][ T6501] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.797'. [ 166.590328][ T6215] wlan1: Trigger new scan to find an IBSS to join [ 166.700917][ T6504] netlink: 'syz.0.800': attribute type 2 has an invalid length. [ 166.708624][ T6504] netlink: 'syz.0.800': attribute type 8 has an invalid length. [ 166.783234][ T6504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.800'. [ 166.970359][ T6507] Illegal XDP return value 5 on prog (id 491) dev N/A, expect packet loss! [ 167.630011][ T6215] wlan1: Trigger new scan to find an IBSS to join [ 167.726010][ T6522] netlink: 'syz.2.804': attribute type 3 has an invalid length. [ 167.736846][ T6522] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.804'. [ 168.600069][ T6198] wlan1: Creating new IBSS network, BSSID 7e:27:23:f8:d6:48 [ 168.607522][ T6233] wlan1: Trigger new scan to find an IBSS to join [ 170.136467][ T6215] wlan1: Creating new IBSS network, BSSID 7a:9c:1b:f8:3b:e3 [ 170.656796][ T6545] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.714873][ T6548] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 170.741498][ T6548] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.813'. [ 170.805272][ T6548] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.813'. [ 171.486176][ T6563] netlink: 'syz.1.817': attribute type 2 has an invalid length. [ 171.552217][ T6563] netlink: 'syz.1.817': attribute type 8 has an invalid length. [ 171.594171][ T6563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.817'. [ 171.711435][ T6568] netlink: 'syz.3.819': attribute type 3 has an invalid length. [ 171.780977][ T6568] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.819'. [ 172.531498][ T6583] device syzkaller0 entered promiscuous mode [ 172.707681][ T6225] wlan1: Trigger new scan to find an IBSS to join [ 172.808246][ T6225] wlan1: Creating new IBSS network, BSSID fa:da:88:8a:76:93 [ 173.413946][ T6609] netlink: 'syz.3.832': attribute type 3 has an invalid length. [ 173.427295][ T6609] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.832'. [ 174.817763][ T6597] netlink: 'syz.0.827': attribute type 10 has an invalid length. [ 174.841377][ T6597] team0: Port device macvlan0 added [ 174.862135][ T6617] tap0: tun_chr_ioctl cmd 1074812118 [ 175.183022][ T6627] netlink: 'syz.2.837': attribute type 2 has an invalid length. [ 175.223706][ T6627] netlink: 'syz.2.837': attribute type 8 has an invalid length. [ 175.231646][ T6627] netlink: 132 bytes leftover after parsing attributes in process `syz.2.837'. [ 175.477223][ T6636] netlink: 'syz.4.840': attribute type 3 has an invalid length. [ 175.500034][ T6636] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.840'. [ 175.571600][ T6640] netlink: 'syz.1.842': attribute type 10 has an invalid length. [ 175.594194][ T6640] team0: Device vxcan1 is of different type [ 175.619815][ T6636] netlink: 'syz.4.840': attribute type 21 has an invalid length. [ 175.892005][ T6647] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.845'. [ 176.028610][ T6654] netlink: 10 bytes leftover after parsing attributes in process `syz.1.847'. [ 176.198209][ T6658] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.849'. [ 176.549546][ T6676] validate_nla: 3 callbacks suppressed [ 176.549584][ T6676] netlink: 'syz.2.855': attribute type 2 has an invalid length. [ 176.709457][ T6680] netlink: 'syz.0.856': attribute type 3 has an invalid length. [ 176.759098][ T6680] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.856'. [ 177.651163][ T4287] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 177.725703][ T6676] device 0 entered promiscuous mode [ 177.747797][ T6681] netlink: 'syz.2.855': attribute type 5 has an invalid length. [ 177.758429][ T6682] netlink: 'syz.0.856': attribute type 21 has an invalid length. [ 177.783689][ T6695] netlink: 'syz.3.858': attribute type 2 has an invalid length. [ 177.813860][ T6695] netlink: 'syz.3.858': attribute type 8 has an invalid length. [ 177.865779][ T6695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.858'. [ 178.026026][ T6704] sctp: [Deprecated]: syz.2.862 (pid 6704) Use of int in max_burst socket option deprecated. [ 178.026026][ T6704] Use struct sctp_assoc_value instead [ 178.090310][ T6701] netlink: 'syz.0.860': attribute type 10 has an invalid length. [ 178.186647][ T6701] team0: Device vxcan1 is of different type [ 178.418084][ T6707] netlink: 'syz.2.864': attribute type 3 has an invalid length. [ 178.498388][ T6707] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.864'. [ 178.785942][ T6721] netlink: 'syz.4.867': attribute type 10 has an invalid length. [ 178.865260][ T6721] team0: Port device macvlan0 added [ 178.973130][ T6729] netlink: 'syz.3.871': attribute type 3 has an invalid length. [ 179.016061][ T6729] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.871'. [ 179.276442][ T6737] device 0 entered promiscuous mode [ 179.921094][ T6738] team0: Port device macvlan0 added [ 180.097200][ T6740] device syzkaller0 entered promiscuous mode [ 180.235371][ T6756] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.888'. [ 181.902425][ T6757] validate_nla: 6 callbacks suppressed [ 181.902440][ T6757] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 181.917473][ T6757] team0: Device vxcan1 is of different type [ 181.929080][ T6763] netlink: 'syz.1.888': attribute type 21 has an invalid length. [ 181.951764][ T6769] netlink: 'syz.3.880': attribute type 2 has an invalid length. [ 181.979929][ T6769] netlink: 'syz.3.880': attribute type 8 has an invalid length. [ 181.987641][ T6769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.880'. [ 182.121804][ T6771] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 182.174370][ T6771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.882'. [ 182.213475][ T6771] device ipvlan1 entered promiscuous mode [ 182.253528][ T6774] netlink: 'syz.4.883': attribute type 3 has an invalid length. [ 182.262559][ T6780] FAULT_INJECTION: forcing a failure. [ 182.262559][ T6780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.268562][ T6771] bridge0: port 3(ipvlan1) entered blocking state [ 182.283586][ T6774] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.883'. [ 182.310061][ T6780] CPU: 1 PID: 6780 Comm: syz.3.885 Not tainted syzkaller #0 [ 182.317387][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.320314][ T6771] bridge0: port 3(ipvlan1) entered disabled state [ 182.327458][ T6780] Call Trace: [ 182.327467][ T6780] [ 182.327475][ T6780] dump_stack_lvl+0x188/0x24e [ 182.327508][ T6780] ? show_regs_print_info+0x12/0x12 [ 182.327533][ T6780] ? load_image+0x410/0x410 [ 182.345646][ T6771] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 182.349986][ T6780] ? __lock_acquire+0x7c40/0x7c40 [ 182.350022][ T6780] should_fail_ex+0x390/0x4c0 [ 182.350050][ T6780] _copy_from_user+0x2c/0x170 [ 182.350073][ T6780] iovec_from_user+0x143/0x360 [ 182.350101][ T6780] __import_iovec+0x6c/0x510 [ 182.350133][ T6780] import_iovec+0x6f/0xa0 [ 182.350159][ T6780] ___sys_sendmsg+0x252/0x360 [ 182.350191][ T6780] ? __sys_sendmsg+0x2a0/0x2a0 [ 182.350230][ T6780] ? ktime_get+0x7b/0x270 [ 182.411973][ T6780] __se_sys_sendmsg+0x1c3/0x2b0 [ 182.416828][ T6780] ? perf_trace_preemptirq_template+0x268/0x320 [ 182.423086][ T6780] ? __x64_sys_sendmsg+0x80/0x80 [ 182.428039][ T6780] ? lockdep_hardirqs_on+0x94/0x140 [ 182.433235][ T6780] do_syscall_64+0x4c/0xa0 [ 182.437649][ T6780] ? clear_bhb_loop+0x60/0xb0 [ 182.442325][ T6780] ? clear_bhb_loop+0x60/0xb0 [ 182.447002][ T6780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.452893][ T6780] RIP: 0033:0x7fb113b9e159 [ 182.457300][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.476989][ T6780] RSP: 002b:00007fb114b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.485397][ T6780] RAX: ffffffffffffffda RBX: 00007fb113e25fa0 RCX: 00007fb113b9e159 [ 182.493373][ T6780] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 182.501345][ T6780] RBP: 00007fb114b37090 R08: 0000000000000000 R09: 0000000000000000 [ 182.509313][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.517306][ T6780] R13: 00007fb113e26038 R14: 00007fb113e25fa0 R15: 00007ffd57553e18 [ 182.525282][ T6780] [ 182.617925][ T6787] netlink: 'syz.1.887': attribute type 10 has an invalid length. [ 182.646224][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.887'. [ 182.658511][ T6789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.889'. [ 182.680668][ T6787] device ipvlan1 entered promiscuous mode [ 182.708813][ T6787] bridge0: port 3(ipvlan1) entered blocking state [ 182.729489][ T6787] bridge0: port 3(ipvlan1) entered disabled state [ 182.751714][ T6787] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 182.887729][ T6804] netlink: 'syz.4.891': attribute type 2 has an invalid length. [ 183.387148][ T6804] device 0 entered promiscuous mode [ 183.434414][ T6816] netlink: 60 bytes leftover after parsing attributes in process `syz.2.897'. [ 183.460111][ T6807] netlink: 'syz.4.891': attribute type 5 has an invalid length. [ 183.784200][ T6816] device syzkaller0 entered promiscuous mode [ 183.825592][ T6824] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.832199][ T6227] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 183.846766][ T6826] netlink: 'syz.1.896': attribute type 2 has an invalid length. [ 183.852191][ T6227] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 183.861593][ T6826] netlink: 132 bytes leftover after parsing attributes in process `syz.1.896'. [ 183.922300][ T6834] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.901'. [ 185.404146][ T6832] device syzkaller0 entered promiscuous mode [ 187.100793][ T6871] validate_nla: 2 callbacks suppressed [ 187.100808][ T6871] netlink: 'syz.1.912': attribute type 2 has an invalid length. [ 187.163585][ T6874] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 187.193124][ T6874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.916'. [ 187.202335][ T6871] netlink: 'syz.1.912': attribute type 8 has an invalid length. [ 187.220334][ T6871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.912'. [ 187.285393][ T6877] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.405141][ T6881] netlink: 'syz.4.917': attribute type 3 has an invalid length. [ 187.419188][ T6881] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.917'. [ 187.622471][ T6891] netlink: 'syz.2.920': attribute type 12 has an invalid length. [ 187.680462][ T6891] netlink: 120 bytes leftover after parsing attributes in process `syz.2.920'. [ 188.021951][ T6895] device syzkaller0 entered promiscuous mode [ 189.630411][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 190.094093][ T6906] device syzkaller0 entered promiscuous mode [ 190.185918][ T6938] FAULT_INJECTION: forcing a failure. [ 190.185918][ T6938] name failslab, interval 1, probability 0, space 0, times 0 [ 190.199833][ T6938] CPU: 1 PID: 6938 Comm: syz.4.932 Not tainted syzkaller #0 [ 190.207150][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.217205][ T6938] Call Trace: [ 190.220477][ T6938] [ 190.223392][ T6938] dump_stack_lvl+0x188/0x24e [ 190.228062][ T6938] ? show_regs_print_info+0x12/0x12 [ 190.233259][ T6938] ? load_image+0x410/0x410 [ 190.237767][ T6938] ? __lock_acquire+0x7c40/0x7c40 [ 190.242788][ T6938] should_fail_ex+0x390/0x4c0 [ 190.247474][ T6938] should_failslab+0x5/0x20 [ 190.251972][ T6938] slab_pre_alloc_hook+0x59/0x300 [ 190.257002][ T6938] ? security_sk_alloc+0x47/0x130 [ 190.262038][ T6938] __kmem_cache_alloc_node+0x4f/0x270 [ 190.267398][ T6938] ? security_sk_alloc+0x47/0x130 [ 190.272425][ T6938] __kmalloc+0xa3/0x240 [ 190.276589][ T6938] ? sk_prot_alloc+0xe7/0x210 [ 190.281271][ T6938] security_sk_alloc+0x47/0x130 [ 190.286123][ T6938] sk_prot_alloc+0x101/0x210 [ 190.290712][ T6938] ? sk_alloc+0x20/0x330 [ 190.294953][ T6938] sk_alloc+0x36/0x330 [ 190.299013][ T6938] ? bpf_ctx_init+0x154/0x190 [ 190.303688][ T6938] bpf_prog_test_run_skb+0x36d/0x18e0 [ 190.309057][ T6938] ? __fget_files+0x28/0x460 [ 190.313647][ T6938] ? __fget_files+0x3fc/0x460 [ 190.318324][ T6938] ? cpu_online+0xa0/0xa0 [ 190.322647][ T6938] bpf_prog_test_run+0x31c/0x390 [ 190.327582][ T6938] __sys_bpf+0x62b/0x780 [ 190.331823][ T6938] ? bpf_link_show_fdinfo+0x380/0x380 [ 190.337197][ T6938] ? lock_chain_count+0x20/0x20 [ 190.342050][ T6938] __x64_sys_bpf+0x78/0x90 [ 190.346465][ T6938] do_syscall_64+0x4c/0xa0 [ 190.350875][ T6938] ? clear_bhb_loop+0x60/0xb0 [ 190.355549][ T6938] ? clear_bhb_loop+0x60/0xb0 [ 190.360307][ T6938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.366192][ T6938] RIP: 0033:0x7fe33739e159 [ 190.370601][ T6938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.390197][ T6938] RSP: 002b:00007fe3381b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.398602][ T6938] RAX: ffffffffffffffda RBX: 00007fe337625fa0 RCX: 00007fe33739e159 [ 190.406565][ T6938] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 190.414527][ T6938] RBP: 00007fe3381b8090 R08: 0000000000000000 R09: 0000000000000000 [ 190.422484][ T6938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.430444][ T6938] R13: 00007fe337626038 R14: 00007fe337625fa0 R15: 00007ffea185bf18 [ 190.438418][ T6938] [ 190.999997][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 191.006698][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 191.006717][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 191.012823][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 191.018998][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 191.607230][ T6930] netlink: 'syz.3.931': attribute type 13 has an invalid length. [ 191.615351][ T6928] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.630270][ T6931] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.929'. [ 191.780768][ T6948] netlink: 'syz.3.935': attribute type 2 has an invalid length. [ 191.858162][ T6948] netlink: 'syz.3.935': attribute type 8 has an invalid length. [ 191.906660][ T6948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.935'. [ 192.314161][ T6969] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.499540][ T6238] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 192.499551][ T6974] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.512714][ T6238] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 192.703010][ T6982] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.949'. [ 192.954995][ T6991] FAULT_INJECTION: forcing a failure. [ 192.954995][ T6991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.011638][ T6991] CPU: 1 PID: 6991 Comm: syz.2.953 Not tainted syzkaller #0 [ 193.018970][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.029036][ T6991] Call Trace: [ 193.032328][ T6991] [ 193.035271][ T6991] dump_stack_lvl+0x188/0x24e [ 193.039980][ T6991] ? show_regs_print_info+0x12/0x12 [ 193.045190][ T6991] ? load_image+0x410/0x410 [ 193.049690][ T6991] ? __lock_acquire+0x7c40/0x7c40 [ 193.054719][ T6991] ? snprintf+0xe5/0x140 [ 193.058961][ T6991] should_fail_ex+0x390/0x4c0 [ 193.063638][ T6991] _copy_to_user+0x2c/0x130 [ 193.068139][ T6991] simple_read_from_buffer+0xe3/0x150 [ 193.073511][ T6991] proc_fail_nth_read+0x1a6/0x220 [ 193.078531][ T6991] ? proc_fault_inject_write+0x310/0x310 [ 193.084159][ T6991] ? fsnotify_perm+0x248/0x550 [ 193.088918][ T6991] ? proc_fault_inject_write+0x310/0x310 [ 193.094541][ T6991] vfs_read+0x2db/0x960 [ 193.098700][ T6991] ? kernel_read+0x1e0/0x1e0 [ 193.103286][ T6991] ? __fget_files+0x28/0x460 [ 193.107874][ T6991] ? __fget_files+0x3fc/0x460 [ 193.112551][ T6991] ? __fdget_pos+0x2ae/0x360 [ 193.117132][ T6991] ? ksys_read+0x70/0x260 [ 193.121458][ T6991] ksys_read+0x14d/0x260 [ 193.125701][ T6991] ? vfs_write+0x9a0/0x9a0 [ 193.130115][ T6991] ? syscall_enter_from_user_mode+0x2a/0x80 [ 193.136003][ T6991] do_syscall_64+0x4c/0xa0 [ 193.140427][ T6991] ? clear_bhb_loop+0x60/0xb0 [ 193.145097][ T6991] ? clear_bhb_loop+0x60/0xb0 [ 193.149771][ T6991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.155660][ T6991] RIP: 0033:0x7efea415e98e [ 193.160066][ T6991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.179660][ T6991] RSP: 002b:00007efea501efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.188068][ T6991] RAX: ffffffffffffffda RBX: 00007efea501f6c0 RCX: 00007efea415e98e [ 193.196030][ T6991] RDX: 000000000000000f RSI: 00007efea501f0a0 RDI: 0000000000000007 [ 193.203991][ T6991] RBP: 00007efea501f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.211952][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.219928][ T6991] R13: 00007efea4426038 R14: 00007efea4425fa0 R15: 00007ffc81bf13f8 [ 193.227913][ T6991] [ 193.255180][ T4287] Bluetooth: hci1: ISO packet for unknown connection handle 62 [ 193.630236][ T6230] wlan1: Trigger new scan to find an IBSS to join [ 193.807578][ T7011] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.957'. [ 194.070057][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.076399][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.630686][ T7015] netlink: 'syz.0.959': attribute type 2 has an invalid length. [ 194.659965][ T7015] netlink: 'syz.0.959': attribute type 8 has an invalid length. [ 194.667673][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.959'. [ 194.737068][ T7020] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.006251][ T7035] netlink: 192 bytes leftover after parsing attributes in process `syz.3.964'. [ 195.334767][ T7042] netlink: 'syz.0.967': attribute type 10 has an invalid length. [ 195.352026][ T7047] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.970'. [ 195.408263][ T7042] team0: Device vxcan1 is of different type [ 195.521921][ T7052] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.971'. [ 195.623857][ T7054] netlink: 128 bytes leftover after parsing attributes in process `syz.4.972'. [ 195.703510][ T7054] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 195.748981][ T7054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.862514][ T7064] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.975'. [ 196.274971][ T7066] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.619919][ T7078] netlink: 'syz.3.977': attribute type 2 has an invalid length. [ 196.627609][ T7078] netlink: 'syz.3.977': attribute type 8 has an invalid length. [ 196.670202][ T6227] wlan1: Trigger new scan to find an IBSS to join [ 196.725556][ T7078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.977'. [ 196.768681][ T7085] netlink: 192 bytes leftover after parsing attributes in process `syz.0.981'. [ 196.776951][ T7075] netlink: 'syz.1.979': attribute type 3 has an invalid length. [ 197.854572][ T7103] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.590721][ T6227] wlan1: Trigger new scan to find an IBSS to join [ 198.671122][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 198.879591][ T7116] __nla_validate_parse: 1 callbacks suppressed [ 198.879606][ T7116] netlink: 192 bytes leftover after parsing attributes in process `syz.0.995'. [ 199.003309][ T7120] netlink: 'syz.3.998': attribute type 10 has an invalid length. [ 199.015615][ T7120] team0: Device vxcan1 is of different type [ 199.068257][ T7126] netlink: 'syz.4.996': attribute type 2 has an invalid length. [ 199.088231][ T7126] netlink: 'syz.4.996': attribute type 8 has an invalid length. [ 199.140090][ T7126] netlink: 132 bytes leftover after parsing attributes in process `syz.4.996'. [ 199.254012][ T7124] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.999'. [ 199.711313][ T7144] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1006'. [ 199.764473][ T7144] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1006'. [ 199.810967][ T7144] bond0: (slave bond_slave_0): Releasing backup interface [ 200.052079][ T7144] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 200.059880][ T7150] netlink: 105 bytes leftover after parsing attributes in process `syz.2.1006'. [ 200.107786][ T7150] netlink: 105 bytes leftover after parsing attributes in process `syz.2.1006'. [ 200.182546][ T7152] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.192346][ T6225] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 200.212527][ T6225] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 200.226943][ T7158] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1010'. [ 200.603213][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 201.396911][ T7174] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 201.412624][ T7174] team0: Device vxcan1 is of different type [ 201.705396][ T7197] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 201.764955][ T7196] netlink: 'syz.3.1020': attribute type 2 has an invalid length. [ 201.785472][ T7196] netlink: 'syz.3.1020': attribute type 8 has an invalid length. [ 201.811366][ T7196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1020'. [ 201.852325][ T7195] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1024'. [ 202.633890][ T7222] FAULT_INJECTION: forcing a failure. [ 202.633890][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.659910][ T7222] CPU: 1 PID: 7222 Comm: syz.3.1033 Not tainted syzkaller #0 [ 202.667340][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.670382][ T6238] wlan1: Trigger new scan to find an IBSS to join [ 202.677393][ T7222] Call Trace: [ 202.677402][ T7222] [ 202.677410][ T7222] dump_stack_lvl+0x188/0x24e [ 202.687744][ T7215] device syzkaller0 entered promiscuous mode [ 202.690031][ T7222] ? show_regs_print_info+0x12/0x12 [ 202.690062][ T7222] ? load_image+0x410/0x410 [ 202.690084][ T7222] ? __lock_acquire+0x7c40/0x7c40 [ 202.690113][ T7222] should_fail_ex+0x390/0x4c0 [ 202.690142][ T7222] _copy_from_user+0x2c/0x170 [ 202.690164][ T7222] ___sys_sendmsg+0x1c3/0x360 [ 202.690195][ T7222] ? __sys_sendmsg+0x2a0/0x2a0 [ 202.690234][ T7222] ? __lock_acquire+0x7c40/0x7c40 [ 202.690279][ T7222] __se_sys_sendmsg+0x1c3/0x2b0 [ 202.690307][ T7222] ? __x64_sys_sendmsg+0x80/0x80 [ 202.690346][ T7222] ? lockdep_hardirqs_on+0x94/0x140 [ 202.690370][ T7222] do_syscall_64+0x4c/0xa0 [ 202.690393][ T7222] ? clear_bhb_loop+0x60/0xb0 [ 202.690424][ T7222] ? clear_bhb_loop+0x60/0xb0 [ 202.690449][ T7222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.690471][ T7222] RIP: 0033:0x7fb113b9e159 [ 202.690489][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.690504][ T7222] RSP: 002b:00007fb114b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.690526][ T7222] RAX: ffffffffffffffda RBX: 00007fb113e25fa0 RCX: 00007fb113b9e159 [ 202.690540][ T7222] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 202.690552][ T7222] RBP: 00007fb114b37090 R08: 0000000000000000 R09: 0000000000000000 [ 202.690563][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.690575][ T7222] R13: 00007fb113e26038 R14: 00007fb113e25fa0 R15: 00007ffd57553e18 [ 202.690602][ T7222] [ 202.691124][ T6215] wlan1: Trigger new scan to find an IBSS to join [ 202.789045][ T7226] netlink: 'syz.1.1032': attribute type 29 has an invalid length. [ 202.837242][ T7209] device syzkaller0 entered promiscuous mode [ 203.030335][ T7217] netlink: 'syz.0.1030': attribute type 21 has an invalid length. [ 203.038205][ T7217] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.047406][ T6238] wlan1: Creating new IBSS network, BSSID e6:6a:59:81:8f:75 [ 203.056578][ T7217] IPv6: Can't replace route, no match found [ 203.070529][ T7224] netlink: 'syz.1.1032': attribute type 41 has an invalid length. [ 203.079913][ T7226] netlink: 'syz.1.1032': attribute type 29 has an invalid length. [ 203.144653][ T7225] netlink: 'syz.1.1032': attribute type 29 has an invalid length. [ 203.264870][ T4372] syzkaller0: tun_net_xmit 48 [ 205.630299][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 205.643180][ T6230] wlan1: Trigger new scan to find an IBSS to join [ 205.656089][ T7241] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 205.665378][ T7233] netlink: 'syz.1.1032': attribute type 29 has an invalid length. [ 205.700747][ T6227] wlan1: Creating new IBSS network, BSSID 5a:c0:44:ed:f8:8a [ 207.004804][ T7235] netlink: 'syz.1.1032': attribute type 29 has an invalid length. [ 207.014913][ T7250] __nla_validate_parse: 1 callbacks suppressed [ 207.014927][ T7250] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1039'. [ 207.339882][ T7261] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 207.423886][ T7261] netlink: 'syz.0.1043': attribute type 8 has an invalid length. [ 207.478082][ T7261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1043'. [ 207.529101][ T7266] FAULT_INJECTION: forcing a failure. [ 207.529101][ T7266] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 207.595860][ T7266] CPU: 0 PID: 7266 Comm: syz.4.1045 Not tainted syzkaller #0 [ 207.603284][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.613354][ T7266] Call Trace: [ 207.616641][ T7266] [ 207.619577][ T7266] dump_stack_lvl+0x188/0x24e [ 207.624285][ T7266] ? show_regs_print_info+0x12/0x12 [ 207.629506][ T7266] ? load_image+0x410/0x410 [ 207.634036][ T7266] ? __lock_acquire+0x7c40/0x7c40 [ 207.639084][ T7266] should_fail_ex+0x390/0x4c0 [ 207.643787][ T7266] prepare_alloc_pages+0x1e1/0x5b0 [ 207.648928][ T7266] __alloc_pages+0x130/0x4f0 [ 207.653538][ T7266] ? __kasan_kmalloc_large+0x8b/0xd0 [ 207.658841][ T7266] ? zone_statistics+0x170/0x170 [ 207.663802][ T7266] ? alloc_skb_with_frags+0xa7/0x710 [ 207.669102][ T7266] ? trace_kmalloc+0x22/0xa0 [ 207.673718][ T7266] ? alloc_pages+0x4dd/0x740 [ 207.678334][ T7266] alloc_skb_with_frags+0x20b/0x710 [ 207.683570][ T7266] sock_alloc_send_pskb+0x87f/0x9a0 [ 207.688810][ T7266] ? sock_kzfree_s+0x50/0x50 [ 207.693416][ T7266] ? mark_lock+0x94/0x320 [ 207.697777][ T7266] ? __lock_acquire+0x1465/0x7c40 [ 207.702819][ T7266] ? dev_get_by_index+0x1e/0x2d0 [ 207.707770][ T7266] ? dev_get_by_index+0x1e/0x2d0 [ 207.708640][ T6230] wlan1: Trigger new scan to find an IBSS to join [ 207.712712][ T7266] packet_sendmsg+0x31b9/0x4c30 [ 207.712756][ T7266] ? __might_sleep+0xd0/0xd0 [ 207.728586][ T7266] ? perf_trace_lock+0xf8/0x390 [ 207.733467][ T7266] ? trace_event_raw_event_lock+0x230/0x230 [ 207.739379][ T7266] ? aa_sk_perm+0x81f/0x950 [ 207.743907][ T7266] ? aa_af_perm+0x340/0x340 [ 207.748422][ T7266] ? packet_getsockopt+0x980/0x980 [ 207.753561][ T7266] ? apparmor_socket_sendmsg+0x8a/0x330 [ 207.759123][ T7266] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 207.764420][ T7266] ? security_socket_sendmsg+0x7c/0xa0 [ 207.769900][ T7266] ? packet_getsockopt+0x980/0x980 [ 207.775028][ T7266] ____sys_sendmsg+0x5ed/0x9a0 [ 207.779825][ T7266] ? __sys_sendmsg_sock+0x30/0x30 [ 207.784871][ T7266] ? __import_iovec+0x306/0x510 [ 207.789751][ T7266] ? import_iovec+0x6f/0xa0 [ 207.794283][ T7266] ___sys_sendmsg+0x2a2/0x360 [ 207.798988][ T7266] ? __sys_sendmsg+0x2a0/0x2a0 [ 207.803794][ T7266] ? __lock_acquire+0x7c40/0x7c40 [ 207.808867][ T7266] __se_sys_sendmsg+0x1c3/0x2b0 [ 207.813745][ T7266] ? __x64_sys_sendmsg+0x80/0x80 [ 207.818726][ T7266] ? lockdep_hardirqs_on+0x94/0x140 [ 207.823947][ T7266] do_syscall_64+0x4c/0xa0 [ 207.828386][ T7266] ? clear_bhb_loop+0x60/0xb0 [ 207.833088][ T7266] ? clear_bhb_loop+0x60/0xb0 [ 207.837788][ T7266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.843699][ T7266] RIP: 0033:0x7fe33739e159 [ 207.848127][ T7266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.867747][ T7266] RSP: 002b:00007fe3381b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.876181][ T7266] RAX: ffffffffffffffda RBX: 00007fe337625fa0 RCX: 00007fe33739e159 [ 207.884167][ T7266] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 207.892151][ T7266] RBP: 00007fe3381b8090 R08: 0000000000000000 R09: 0000000000000000 [ 207.900138][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.908122][ T7266] R13: 00007fe337626038 R14: 00007fe337625fa0 R15: 00007ffea185bf18 [ 207.916124][ T7266] [ 208.009670][ T7273] netlink: 'syz.3.1047': attribute type 29 has an invalid length. [ 208.031134][ T7273] netlink: 'syz.3.1047': attribute type 29 has an invalid length. [ 208.094030][ T7273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1047'. [ 209.042832][ T7276] netlink: 'syz.4.1048': attribute type 21 has an invalid length. [ 209.066170][ T7276] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.094287][ T7276] IPv6: Can't replace route, no match found [ 209.142996][ T7287] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.158996][ T6230] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 209.186567][ T6230] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 209.454213][ T7295] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1053'. [ 209.629893][ T6227] wlan1: Trigger new scan to find an IBSS to join [ 209.672461][ T6215] wlan1: Creating new IBSS network, BSSID 26:88:31:7f:85:59 [ 209.974175][ T7306] netlink: 'syz.2.1058': attribute type 19 has an invalid length. [ 210.010606][ T7306] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1058'. [ 210.210880][ T7317] netlink: 'syz.0.1060': attribute type 2 has an invalid length. [ 210.218654][ T7317] netlink: 'syz.0.1060': attribute type 8 has an invalid length. [ 210.320455][ T7317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1060'. [ 210.339263][ T7321] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 210.644082][ T7326] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1067'. [ 211.640330][ T6238] wlan1: Trigger new scan to find an IBSS to join [ 213.631960][ T6198] wlan1: Creating new IBSS network, BSSID 4a:46:c0:c5:ac:7e [ 213.846348][ T7360] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.856038][ T7370] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1079'. [ 214.154509][ T7380] netlink: 'syz.3.1081': attribute type 2 has an invalid length. [ 214.169145][ T7376] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1082'. [ 214.198227][ T7376] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1082'. [ 214.234816][ T7380] netlink: 'syz.3.1081': attribute type 8 has an invalid length. [ 214.276499][ T7380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1081'. [ 215.144555][ T7409] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 216.063929][ T7434] netlink: 'syz.3.1103': attribute type 2 has an invalid length. [ 216.106214][ T7434] netlink: 'syz.3.1103': attribute type 8 has an invalid length. [ 216.143746][ T7434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1103'. [ 216.195243][ T7438] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 216.321598][ T7439] netlink: 'syz.4.1104': attribute type 3 has an invalid length. [ 216.329522][ T7439] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1104'. [ 217.906735][ T7472] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.358055][ T7479] netlink: 'syz.4.1119': attribute type 3 has an invalid length. [ 218.413715][ T7479] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1119'. [ 218.556188][ T7488] netlink: 'syz.1.1122': attribute type 2 has an invalid length. [ 218.618204][ T7488] netlink: 'syz.1.1122': attribute type 8 has an invalid length. [ 218.669976][ T7488] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1122'. [ 218.688676][ T6215] wlan1: Trigger new scan to find an IBSS to join [ 219.287778][ T7514] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1132'. [ 219.621252][ T6215] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 219.649379][ T6215] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 219.984455][ T7530] FAULT_INJECTION: forcing a failure. [ 219.984455][ T7530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.059878][ T7530] CPU: 0 PID: 7530 Comm: syz.3.1135 Not tainted syzkaller #0 [ 220.067303][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.077366][ T7530] Call Trace: [ 220.080653][ T7530] [ 220.083594][ T7530] dump_stack_lvl+0x188/0x24e [ 220.088303][ T7530] ? show_regs_print_info+0x12/0x12 [ 220.093524][ T7530] ? load_image+0x410/0x410 [ 220.098054][ T7530] ? __lock_acquire+0x7c40/0x7c40 [ 220.103102][ T7530] should_fail_ex+0x390/0x4c0 [ 220.107806][ T7530] _copy_from_user+0x2c/0x170 [ 220.112501][ T7530] __copy_msghdr+0x384/0x560 [ 220.117119][ T7530] ___sys_sendmsg+0x210/0x360 [ 220.121826][ T7530] ? __sys_sendmsg+0x2a0/0x2a0 [ 220.126624][ T7530] ? __lock_acquire+0x7c40/0x7c40 [ 220.131671][ T7530] __se_sys_sendmsg+0x1c3/0x2b0 [ 220.136523][ T7530] ? __x64_sys_sendmsg+0x80/0x80 [ 220.141469][ T7530] ? lockdep_hardirqs_on+0x94/0x140 [ 220.146667][ T7530] do_syscall_64+0x4c/0xa0 [ 220.151082][ T7530] ? clear_bhb_loop+0x60/0xb0 [ 220.155762][ T7530] ? clear_bhb_loop+0x60/0xb0 [ 220.160443][ T7530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.166346][ T7530] RIP: 0033:0x7fb113b9e159 [ 220.170762][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.190369][ T7530] RSP: 002b:00007fb114b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.198788][ T7530] RAX: ffffffffffffffda RBX: 00007fb113e25fa0 RCX: 00007fb113b9e159 [ 220.206767][ T7530] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000007 [ 220.214744][ T7530] RBP: 00007fb114b37090 R08: 0000000000000000 R09: 0000000000000000 [ 220.222710][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.230672][ T7530] R13: 00007fb113e26038 R14: 00007fb113e25fa0 R15: 00007ffd57553e18 [ 220.238647][ T7530] [ 220.309127][ T7539] device syzkaller0 entered promiscuous mode [ 220.400733][ T7540] netlink: 'syz.4.1138': attribute type 10 has an invalid length. [ 220.418954][ T7543] netlink: 'syz.0.1137': attribute type 3 has an invalid length. [ 220.437966][ T7543] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1137'. [ 220.449448][ T7540] device syz_tun entered promiscuous mode [ 220.590160][ T6225] wlan1: Trigger new scan to find an IBSS to join [ 221.365817][ T7564] netlink: 'syz.3.1143': attribute type 2 has an invalid length. [ 221.400349][ T7564] netlink: 'syz.3.1143': attribute type 8 has an invalid length. [ 221.408109][ T7564] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1143'. [ 222.670091][ T6227] wlan1: Trigger new scan to find an IBSS to join [ 222.677523][ T6215] wlan1: Trigger new scan to find an IBSS to join [ 222.740105][ T7594] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 222.802058][ T7600] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1155'. [ 222.892771][ T7598] netlink: 'syz.0.1152': attribute type 3 has an invalid length. [ 222.926704][ T7598] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1152'. [ 223.960752][ T7619] netlink: 'syz.0.1160': attribute type 10 has an invalid length. [ 223.980359][ T7619] team0: Device vxcan1 is of different type [ 224.670161][ T6225] wlan1: Creating new IBSS network, BSSID 1a:99:eb:e9:4f:2c [ 224.807017][ T7624] netlink: 'syz.2.1161': attribute type 2 has an invalid length. [ 224.825346][ T7624] netlink: 'syz.2.1161': attribute type 8 has an invalid length. [ 224.859837][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1161'. [ 224.871438][ T7626] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 224.947609][ T7626] team0: Port device geneve1 added [ 225.329171][ T7642] netlink: 'syz.1.1170': attribute type 3 has an invalid length. [ 225.337498][ T7642] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1170'. [ 225.489586][ T7649] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1168'. [ 225.651489][ T7651] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.699497][ T7646] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1168'. [ 225.951417][ T7669] netlink: 'syz.1.1177': attribute type 2 has an invalid length. [ 225.997471][ T7669] netlink: 'syz.1.1177': attribute type 8 has an invalid length. [ 226.056326][ T7669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1177'. [ 226.670790][ T6215] wlan1: Trigger new scan to find an IBSS to join [ 226.670848][ T6230] wlan1: Trigger new scan to find an IBSS to join [ 226.805485][ T6230] wlan1: Creating new IBSS network, BSSID 12:16:08:28:82:c4 [ 226.846721][ T7682] netlink: 'syz.4.1180': attribute type 10 has an invalid length. [ 226.884375][ T7682] team0: Device vxcan1 is of different type [ 227.379762][ T7692] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 227.428402][ T7692] netlink: 'syz.1.1193': attribute type 8 has an invalid length. [ 227.479822][ T7692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1193'. [ 227.546507][ T7691] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 227.805479][ T7691] team0: Port device geneve1 added [ 228.113621][ T7699] netlink: 'syz.3.1185': attribute type 3 has an invalid length. [ 228.154694][ T7699] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1185'. [ 228.647116][ T7713] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.843823][ T7725] netlink: 'syz.3.1192': attribute type 10 has an invalid length. [ 229.003548][ T7725] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1192'. [ 229.087422][ T7710] netlink: 'syz.1.1190': attribute type 2 has an invalid length. [ 229.123729][ T7710] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1190'. [ 229.451187][ T7737] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 229.485587][ T7737] team0: Device vxcan1 is of different type [ 229.630308][ T6198] wlan1: Trigger new scan to find an IBSS to join [ 230.024663][ T7748] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1203'. [ 230.260727][ T7749] team0: Port device geneve1 added [ 230.329882][ T7744] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1201'. [ 230.591113][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 230.653905][ T7761] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1205'. [ 230.670576][ T6215] wlan1: Creating new IBSS network, BSSID 5a:bd:0c:2c:df:7b [ 230.782339][ T7766] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1205'. [ 231.206839][ T7785] validate_nla: 9 callbacks suppressed [ 231.206855][ T7785] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 231.256871][ T7785] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1214'. [ 231.477114][ T7795] netlink: 'syz.0.1216': attribute type 3 has an invalid length. [ 231.500219][ T7776] device bridge_slave_1 left promiscuous mode [ 231.506766][ T7795] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1216'. [ 231.533930][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.683169][ T7776] device bridge_slave_0 left promiscuous mode [ 231.706421][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.914455][ T7805] FAULT_INJECTION: forcing a failure. [ 231.914455][ T7805] name failslab, interval 1, probability 0, space 0, times 0 [ 231.937787][ T7805] CPU: 0 PID: 7805 Comm: syz.2.1219 Not tainted syzkaller #0 [ 231.945199][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.955266][ T7805] Call Trace: [ 231.958567][ T7805] [ 231.961515][ T7805] dump_stack_lvl+0x188/0x24e [ 231.966223][ T7805] ? show_regs_print_info+0x12/0x12 [ 231.971447][ T7805] ? load_image+0x410/0x410 [ 231.975984][ T7805] ? __might_sleep+0xd0/0xd0 [ 231.980610][ T7805] ? __lock_acquire+0x7c40/0x7c40 [ 231.985673][ T7805] ? memset+0x1e/0x40 [ 231.989674][ T7805] should_fail_ex+0x390/0x4c0 [ 231.994383][ T7805] should_failslab+0x5/0x20 [ 231.998903][ T7805] slab_pre_alloc_hook+0x59/0x300 [ 232.003953][ T7805] kmem_cache_alloc+0x56/0x2f0 [ 232.008730][ T7805] ? security_inode_alloc+0x30/0x110 [ 232.014040][ T7805] security_inode_alloc+0x30/0x110 [ 232.019177][ T7805] inode_init_always+0x910/0xc90 [ 232.024142][ T7805] new_inode_pseudo+0x91/0x1c0 [ 232.028929][ T7805] __sock_create+0x129/0x940 [ 232.033544][ T7805] ? memset+0x1e/0x40 [ 232.037549][ T7805] udp_sock_create4+0xc2/0x480 [ 232.042337][ T7805] ? free_zapped_rcu+0x1f0/0x1f0 [ 232.047292][ T7805] ? erspan_exit_batch_net+0x20/0x20 [ 232.052593][ T7805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 232.058522][ T7805] ? rcu_is_watching+0x11/0xa0 [ 232.063321][ T7805] rxrpc_lookup_local+0xe00/0x1600 [ 232.068480][ T7805] ? rxrpc_process_local_events+0xa40/0xa40 [ 232.074407][ T7805] ? lockdep_hardirqs_on+0x94/0x140 [ 232.079633][ T7805] ? _local_bh_enable+0xa0/0xa0 [ 232.084517][ T7805] rxrpc_sendmsg+0x3e7/0x890 [ 232.089134][ T7805] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 232.094435][ T7805] ? rxrpc_getsockopt+0x150/0x150 [ 232.099485][ T7805] ____sys_sendmsg+0x5ed/0x9a0 [ 232.104285][ T7805] ? __sys_sendmsg_sock+0x30/0x30 [ 232.109342][ T7805] ? __import_iovec+0x306/0x510 [ 232.114224][ T7805] ? import_iovec+0x6f/0xa0 [ 232.118758][ T7805] ___sys_sendmsg+0x2a2/0x360 [ 232.123462][ T7805] ? __sys_sendmsg+0x2a0/0x2a0 [ 232.128326][ T7805] ? __lock_acquire+0x7c40/0x7c40 [ 232.133492][ T7805] __se_sys_sendmsg+0x1c3/0x2b0 [ 232.138368][ T7805] ? __x64_sys_sendmsg+0x80/0x80 [ 232.143345][ T7805] ? lockdep_hardirqs_on+0x94/0x140 [ 232.148571][ T7805] do_syscall_64+0x4c/0xa0 [ 232.153020][ T7805] ? clear_bhb_loop+0x60/0xb0 [ 232.157724][ T7805] ? clear_bhb_loop+0x60/0xb0 [ 232.162428][ T7805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.168349][ T7805] RIP: 0033:0x7efea419e159 [ 232.172784][ T7805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.192416][ T7805] RSP: 002b:00007efea501f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.200848][ T7805] RAX: ffffffffffffffda RBX: 00007efea4425fa0 RCX: 00007efea419e159 [ 232.208839][ T7805] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000004 [ 232.216824][ T7805] RBP: 00007efea501f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.224807][ T7805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.232790][ T7805] R13: 00007efea4426038 R14: 00007efea4425fa0 R15: 00007ffc81bf13f8 [ 232.240797][ T7805] [ 232.380153][ T7805] socket: no more sockets [ 232.399102][ T7782] netlink: 'syz.1.1212': attribute type 17 has an invalid length. [ 232.414930][ T7782] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1212'. [ 232.450382][ T7782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.764548][ T7817] netlink: 'syz.0.1221': attribute type 2 has an invalid length. [ 232.818143][ T7817] netlink: 'syz.0.1221': attribute type 8 has an invalid length. [ 232.833898][ T7819] netlink: 'syz.2.1223': attribute type 3 has an invalid length. [ 232.851045][ T7817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1221'. [ 232.880577][ T7819] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1223'. [ 233.249397][ T7834] netlink: 'syz.3.1226': attribute type 10 has an invalid length. [ 233.277607][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1226'. [ 233.311748][ T7834] device team0 entered promiscuous mode [ 233.351352][ T7834] device team_slave_0 entered promiscuous mode [ 233.430136][ T7834] device team_slave_1 entered promiscuous mode [ 233.500251][ T7834] device batadv0 entered promiscuous mode [ 233.531092][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.613751][ T7834] bridge0: port 3(team0) entered blocking state [ 233.631068][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 233.652377][ T7834] bridge0: port 3(team0) entered disabled state [ 233.734365][ T6211] wlan1: Creating new IBSS network, BSSID 1a:71:3a:20:95:cd [ 233.789130][ T7834] bridge0: port 3(team0) entered blocking state [ 233.795665][ T7834] bridge0: port 3(team0) entered forwarding state [ 233.844993][ T6233] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 233.854727][ T6233] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 234.039082][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.245137][ T7842] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 234.259358][ T7850] netlink: 'syz.2.1231': attribute type 3 has an invalid length. [ 234.267631][ T7842] syzkaller1: linktype set to 825 [ 235.013430][ T7875] netlink: 'syz.0.1240': attribute type 2 has an invalid length. [ 235.073462][ T7875] netlink: 'syz.0.1240': attribute type 8 has an invalid length. [ 235.189802][ T7875] __nla_validate_parse: 2 callbacks suppressed [ 235.189819][ T7875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1240'. [ 235.967940][ T7903] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1248'. [ 236.432359][ T7915] FAULT_INJECTION: forcing a failure. [ 236.432359][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 236.445329][ T7915] CPU: 0 PID: 7915 Comm: syz.4.1251 Not tainted syzkaller #0 [ 236.452722][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.462793][ T7915] Call Trace: [ 236.466087][ T7915] [ 236.469030][ T7915] dump_stack_lvl+0x188/0x24e [ 236.473735][ T7915] ? verify_lock_unused+0x140/0x140 [ 236.478956][ T7915] ? show_regs_print_info+0x12/0x12 [ 236.484218][ T7915] ? load_image+0x410/0x410 [ 236.488756][ T7915] should_fail_ex+0x390/0x4c0 [ 236.493461][ T7915] should_failslab+0x5/0x20 [ 236.497990][ T7915] slab_pre_alloc_hook+0x59/0x300 [ 236.503041][ T7915] kmem_cache_alloc+0x56/0x2f0 [ 236.507825][ T7915] ? __nf_conntrack_alloc+0x93/0x370 [ 236.513134][ T7915] __nf_conntrack_alloc+0x93/0x370 [ 236.518270][ T7915] init_conntrack+0x23b/0x1210 [ 236.523063][ T7915] ? early_drop+0x870/0x870 [ 236.527587][ T7915] ? nf_conntrack_find_get+0x640/0x640 [ 236.533063][ T7915] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.539065][ T7915] ? __siphash_unaligned+0x289/0x3d0 [ 236.544374][ T7915] nf_conntrack_in+0xd76/0x1830 [ 236.549242][ T7915] ? lockdep_hardirqs_on+0x94/0x140 [ 236.554484][ T7915] ? nf_ct_pernet+0x270/0x270 [ 236.559201][ T7915] ? ipt_do_table+0x2c1/0x1580 [ 236.563993][ T7915] ? read_lock_is_recursive+0x10/0x10 [ 236.569381][ T7915] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 236.574860][ T7915] ? ipv4_conntrack_local+0x11f/0x200 [ 236.580251][ T7915] ? ipv4_conntrack_in+0x20/0x20 [ 236.585207][ T7915] nf_hook_slow+0xb9/0x200 [ 236.589644][ T7915] ? nf_hook+0x390/0x390 [ 236.593906][ T7915] nf_hook+0x224/0x390 [ 236.598000][ T7915] ? nf_hook+0x9e/0x390 [ 236.602189][ T7915] ? __ip_local_out+0x5d0/0x5d0 [ 236.607061][ T7915] ? __ip6_rt_update_pmtu+0x2de/0xd30 [ 236.612457][ T7915] ? nf_hook+0x390/0x390 [ 236.616730][ T7915] ? ip_fast_csum+0x1ea/0x2b0 [ 236.621432][ T7915] __ip_local_out+0x49c/0x5d0 [ 236.626136][ T7915] ? nf_hook+0x390/0x390 [ 236.630411][ T7915] ip_local_out+0x26/0x120 [ 236.634859][ T7915] iptunnel_xmit+0x4a1/0x880 [ 236.639489][ T7915] ip_tunnel_xmit+0x1d6a/0x25d0 [ 236.644387][ T7915] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 236.649440][ T7915] ? skb_push+0x8a/0xd0 [ 236.653610][ T7915] ? gre_build_header+0x251/0x9a0 [ 236.658657][ T7915] ipgre_xmit+0x7e4/0xb60 [ 236.663012][ T7915] dev_hard_start_xmit+0x292/0x8b0 [ 236.668148][ T7915] ? validate_xmit_skb_list+0x120/0x120 [ 236.673735][ T7915] __dev_queue_xmit+0x1b4b/0x3810 [ 236.678786][ T7915] ? __dev_queue_xmit+0x281/0x3810 [ 236.683923][ T7915] ? netdev_core_pick_tx+0x360/0x360 [ 236.689249][ T7915] ? skb_release_data+0x1d3/0x7e0 [ 236.694312][ T7915] __bpf_redirect+0x8c7/0x1110 [ 236.699109][ T7915] bpf_clone_redirect+0x311/0x4a0 [ 236.704187][ T7915] bpf_prog_208b094576c80b22+0x56/0x5b [ 236.709672][ T7915] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.715676][ T7915] ? __lock_acquire+0x7c40/0x7c40 [ 236.720727][ T7915] ? lock_chain_count+0x20/0x20 [ 236.725602][ T7915] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 236.731888][ T7915] ? lockdep_hardirqs_on+0x94/0x140 [ 236.737111][ T7915] ? ktime_get+0x7b/0x270 [ 236.741466][ T7915] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 236.747728][ T7915] ? ktime_get_real_ts64+0x440/0x440 [ 236.753045][ T7915] ? read_lock_is_recursive+0x10/0x10 [ 236.758451][ T7915] ? __cant_sleep+0x220/0x220 [ 236.763167][ T7915] ? ktime_get+0x247/0x270 [ 236.767620][ T7915] bpf_test_run+0x2b6/0x830 [ 236.772175][ T7915] ? dst_hold+0xb0/0xb0 [ 236.776353][ T7915] ? eth_get_headlen+0x200/0x200 [ 236.781309][ T7915] ? __build_skb+0x24b/0x3b0 [ 236.785922][ T7915] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 236.791322][ T7915] ? cpu_online+0xa0/0xa0 [ 236.795656][ T7915] bpf_prog_test_run+0x31c/0x390 [ 236.800610][ T7915] __sys_bpf+0x62b/0x780 [ 236.804856][ T7915] ? bpf_link_show_fdinfo+0x380/0x380 [ 236.810239][ T7915] ? lock_chain_count+0x20/0x20 [ 236.815096][ T7915] __x64_sys_bpf+0x78/0x90 [ 236.819507][ T7915] do_syscall_64+0x4c/0xa0 [ 236.823927][ T7915] ? clear_bhb_loop+0x60/0xb0 [ 236.828602][ T7915] ? clear_bhb_loop+0x60/0xb0 [ 236.833279][ T7915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.839170][ T7915] RIP: 0033:0x7fe33739e159 [ 236.843585][ T7915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.863182][ T7915] RSP: 002b:00007fe3381b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.871588][ T7915] RAX: ffffffffffffffda RBX: 00007fe337625fa0 RCX: 00007fe33739e159 [ 236.879549][ T7915] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 236.887510][ T7915] RBP: 00007fe3381b8090 R08: 0000000000000000 R09: 0000000000000000 [ 236.895475][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.903439][ T7915] R13: 00007fe337626038 R14: 00007fe337625fa0 R15: 00007ffea185bf18 [ 236.911417][ T7915] [ 237.383949][ T7927] validate_nla: 1 callbacks suppressed [ 237.383982][ T7927] netlink: 'syz.1.1255': attribute type 2 has an invalid length. [ 237.476026][ T7927] netlink: 'syz.1.1255': attribute type 8 has an invalid length. [ 237.500050][ T7927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1255'. [ 237.587877][ T7932] netlink: 'syz.1.1255': attribute type 2 has an invalid length. [ 237.656396][ T7941] FAULT_INJECTION: forcing a failure. [ 237.656396][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 237.665885][ T7932] netlink: 'syz.1.1255': attribute type 8 has an invalid length. [ 237.706126][ T7941] CPU: 1 PID: 7941 Comm: syz.0.1260 Not tainted syzkaller #0 [ 237.713547][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.715595][ T7932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1255'. [ 237.723609][ T7941] Call Trace: [ 237.723619][ T7941] [ 237.723627][ T7941] dump_stack_lvl+0x188/0x24e [ 237.723663][ T7941] ? show_regs_print_info+0x12/0x12 [ 237.723689][ T7941] ? load_image+0x410/0x410 [ 237.723711][ T7941] ? __lock_acquire+0x7c40/0x7c40 [ 237.723741][ T7941] should_fail_ex+0x390/0x4c0 [ 237.723769][ T7941] should_failslab+0x5/0x20 [ 237.767420][ T7941] slab_pre_alloc_hook+0x59/0x300 [ 237.772445][ T7941] ? do_syscall_64+0x4c/0xa0 [ 237.777034][ T7941] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.783111][ T7941] kmem_cache_alloc_node+0x5a/0x310 [ 237.788304][ T7941] ? alloc_vmap_area+0x18e/0x18d0 [ 237.793326][ T7941] alloc_vmap_area+0x18e/0x18d0 [ 237.798183][ T7941] ? vm_map_ram+0xab0/0xab0 [ 237.802679][ T7941] ? rcu_is_watching+0x11/0xa0 [ 237.807442][ T7941] __get_vm_area_node+0x158/0x330 [ 237.812463][ T7941] __vmalloc_node_range+0x357/0x1380 [ 237.817745][ T7941] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 237.823304][ T7941] ? aa_get_newest_label+0xf9/0x5b0 [ 237.828496][ T7941] ? free_vm_area+0x50/0x50 [ 237.832994][ T7941] ? end_current_label_crit_section+0x170/0x170 [ 237.839229][ T7941] ? __lock_acquire+0x7c40/0x7c40 [ 237.844253][ T7941] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 237.849801][ T7941] __vmalloc+0x76/0x80 [ 237.853864][ T7941] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 237.859404][ T7941] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 237.864772][ T7941] ? bpf_prog_alloc+0x13/0x1b0 [ 237.869535][ T7941] bpf_prog_alloc+0x1c/0x1b0 [ 237.874127][ T7941] bpf_prog_load+0x7d4/0x1530 [ 237.878809][ T7941] ? map_freeze+0x390/0x390 [ 237.883306][ T7941] ? __might_fault+0xa6/0x120 [ 237.887981][ T7941] ? __might_fault+0xa6/0x120 [ 237.892655][ T7941] ? __might_fault+0xc2/0x120 [ 237.897321][ T7941] ? __might_fault+0xa6/0x120 [ 237.901989][ T7941] ? bpf_lsm_bpf+0x5/0x10 [ 237.906313][ T7941] ? security_bpf+0x7a/0xa0 [ 237.910814][ T7941] __sys_bpf+0x5b8/0x780 [ 237.915059][ T7941] ? bpf_link_show_fdinfo+0x380/0x380 [ 237.920435][ T7941] ? lock_chain_count+0x20/0x20 [ 237.925289][ T7941] __x64_sys_bpf+0x78/0x90 [ 237.929700][ T7941] do_syscall_64+0x4c/0xa0 [ 237.934123][ T7941] ? clear_bhb_loop+0x60/0xb0 [ 237.938793][ T7941] ? clear_bhb_loop+0x60/0xb0 [ 237.943467][ T7941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.949356][ T7941] RIP: 0033:0x7f256c99e159 [ 237.953763][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.973360][ T7941] RSP: 002b:00007f256d93c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.981765][ T7941] RAX: ffffffffffffffda RBX: 00007f256cc25fa0 RCX: 00007f256c99e159 [ 237.989732][ T7941] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 237.997694][ T7941] RBP: 00007f256d93c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.005656][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.013619][ T7941] R13: 00007f256cc26038 R14: 00007f256cc25fa0 R15: 00007ffd4a0de3f8 [ 238.021593][ T7941] [ 238.055478][ T7943] FAULT_INJECTION: forcing a failure. [ 238.055478][ T7943] name failslab, interval 1, probability 0, space 0, times 0 [ 238.089958][ T7943] CPU: 1 PID: 7943 Comm: syz.4.1262 Not tainted syzkaller #0 [ 238.097382][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.107454][ T7943] Call Trace: [ 238.110747][ T7943] [ 238.113687][ T7943] dump_stack_lvl+0x188/0x24e [ 238.118393][ T7943] ? show_regs_print_info+0x12/0x12 [ 238.123618][ T7943] ? load_image+0x410/0x410 [ 238.128145][ T7943] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 238.128765][ T7940] netlink: 'syz.3.1261': attribute type 3 has an invalid length. [ 238.134316][ T7943] should_fail_ex+0x390/0x4c0 [ 238.134350][ T7943] should_failslab+0x5/0x20 [ 238.134367][ T7943] slab_pre_alloc_hook+0x59/0x300 [ 238.134393][ T7943] kmem_cache_alloc+0x56/0x2f0 [ 238.134412][ T7943] ? __build_skb+0x27/0x3b0 [ 238.134444][ T7943] __build_skb+0x27/0x3b0 [ 238.134466][ T7943] ? build_skb+0x14/0x230 [ 238.134490][ T7943] build_skb+0x1e/0x230 [ 238.134515][ T7943] bpf_prog_test_run_skb+0x38d/0x18e0 [ 238.134542][ T7943] ? __fget_files+0x28/0x460 [ 238.134567][ T7943] ? __fget_files+0x3fc/0x460 [ 238.134602][ T7943] ? cpu_online+0xa0/0xa0 [ 238.134625][ T7943] bpf_prog_test_run+0x31c/0x390 [ 238.134654][ T7943] __sys_bpf+0x62b/0x780 [ 238.134679][ T7943] ? bpf_link_show_fdinfo+0x380/0x380 [ 238.134715][ T7943] ? lock_chain_count+0x20/0x20 [ 238.216732][ T7943] __x64_sys_bpf+0x78/0x90 [ 238.221158][ T7943] do_syscall_64+0x4c/0xa0 [ 238.225576][ T7943] ? clear_bhb_loop+0x60/0xb0 [ 238.230254][ T7943] ? clear_bhb_loop+0x60/0xb0 [ 238.234927][ T7943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.240820][ T7943] RIP: 0033:0x7fe33739e159 [ 238.245229][ T7943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.264828][ T7943] RSP: 002b:00007fe3381b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.273243][ T7943] RAX: ffffffffffffffda RBX: 00007fe337625fa0 RCX: 00007fe33739e159 [ 238.281208][ T7943] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 238.289173][ T7943] RBP: 00007fe3381b8090 R08: 0000000000000000 R09: 0000000000000000 [ 238.297135][ T7943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.305099][ T7943] R13: 00007fe337626038 R14: 00007fe337625fa0 R15: 00007ffea185bf18 [ 238.313086][ T7943] [ 238.325190][ T7940] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1261'. [ 238.358048][ T7947] netlink: 'syz.2.1259': attribute type 2 has an invalid length. [ 238.366560][ T7947] netlink: 'syz.2.1259': attribute type 8 has an invalid length. [ 238.374868][ T7947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1259'. [ 238.384493][ T7941] syz.0.1260: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 238.402829][ T7941] CPU: 0 PID: 7941 Comm: syz.0.1260 Not tainted syzkaller #0 [ 238.410228][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.420293][ T7941] Call Trace: [ 238.423583][ T7941] [ 238.426527][ T7941] dump_stack_lvl+0x188/0x24e [ 238.431241][ T7941] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 238.437676][ T7941] ? show_regs_print_info+0x12/0x12 [ 238.442897][ T7941] ? load_image+0x410/0x410 [ 238.447420][ T7941] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 238.453852][ T7941] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 238.460371][ T7941] warn_alloc+0x242/0x330 [ 238.464737][ T7941] ? slab_free_freelist_hook+0x133/0x1b0 [ 238.470390][ T7941] ? zone_watermark_ok_safe+0x270/0x270 [ 238.475961][ T7941] ? __get_vm_area_node+0x16d/0x330 [ 238.481188][ T7941] ? __get_vm_area_node+0x16d/0x330 [ 238.486523][ T7941] __vmalloc_node_range+0x37c/0x1380 [ 238.491891][ T7941] ? aa_get_newest_label+0xf9/0x5b0 [ 238.497117][ T7941] ? free_vm_area+0x50/0x50 [ 238.501638][ T7941] ? end_current_label_crit_section+0x170/0x170 [ 238.507898][ T7941] ? __lock_acquire+0x7c40/0x7c40 [ 238.512950][ T7941] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 238.518518][ T7941] __vmalloc+0x76/0x80 [ 238.522608][ T7941] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 238.528174][ T7941] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 238.533571][ T7941] ? bpf_prog_alloc+0x13/0x1b0 [ 238.538361][ T7941] bpf_prog_alloc+0x1c/0x1b0 [ 238.542976][ T7941] bpf_prog_load+0x7d4/0x1530 [ 238.547681][ T7941] ? map_freeze+0x390/0x390 [ 238.552202][ T7941] ? __might_fault+0xa6/0x120 [ 238.556908][ T7941] ? __might_fault+0xa6/0x120 [ 238.561608][ T7941] ? __might_fault+0xc2/0x120 [ 238.566299][ T7941] ? __might_fault+0xa6/0x120 [ 238.570993][ T7941] ? bpf_lsm_bpf+0x5/0x10 [ 238.575337][ T7941] ? security_bpf+0x7a/0xa0 [ 238.579865][ T7941] __sys_bpf+0x5b8/0x780 [ 238.584135][ T7941] ? bpf_link_show_fdinfo+0x380/0x380 [ 238.589548][ T7941] ? lock_chain_count+0x20/0x20 [ 238.594425][ T7941] __x64_sys_bpf+0x78/0x90 [ 238.598863][ T7941] do_syscall_64+0x4c/0xa0 [ 238.603299][ T7941] ? clear_bhb_loop+0x60/0xb0 [ 238.607995][ T7941] ? clear_bhb_loop+0x60/0xb0 [ 238.612699][ T7941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.618613][ T7941] RIP: 0033:0x7f256c99e159 [ 238.623041][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.642664][ T7941] RSP: 002b:00007f256d93c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.651094][ T7941] RAX: ffffffffffffffda RBX: 00007f256cc25fa0 RCX: 00007f256c99e159 [ 238.659081][ T7941] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 238.667063][ T7941] RBP: 00007f256d93c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.675052][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.683042][ T7941] R13: 00007f256cc26038 R14: 00007f256cc25fa0 R15: 00007ffd4a0de3f8 [ 238.691043][ T7941] [ 238.718947][ T7941] Mem-Info: [ 238.722236][ T7941] active_anon:21385 inactive_anon:0 isolated_anon:0 [ 238.722236][ T7941] active_file:18554 inactive_file:40025 isolated_file:0 [ 238.722236][ T7941] unevictable:768 dirty:336 writeback:0 [ 238.722236][ T7941] slab_reclaimable:21199 slab_unreclaimable:95017 [ 238.722236][ T7941] mapped:38288 shmem:16897 pagetables:694 [ 238.722236][ T7941] sec_pagetables:0 bounce:0 [ 238.722236][ T7941] kernel_misc_reclaimable:0 [ 238.722236][ T7941] free:1306440 free_pcp:6396 free_cma:0 [ 238.847624][ T7941] Node 0 active_anon:90440kB inactive_anon:0kB active_file:74216kB inactive_file:159896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154552kB dirty:1344kB writeback:0kB shmem:70852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2676kB sec_pagetables:0kB all_unreclaimable? no [ 238.902507][ T7941] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 238.936630][ T7941] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.971216][ T7941] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 239.031405][ T7941] Node 0 DMA32 free:1290492kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:97040kB inactive_anon:0kB active_file:74216kB inactive_file:159896kB unevictable:1536kB writepending:1344kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:14140kB local_pcp:5204kB free_cma:0kB [ 239.160302][ T7941] lowmem_reserve[]: 0 0 1 1 1 [ 239.165083][ T7941] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.290297][ T7941] lowmem_reserve[]: 0 0 0 0 0 [ 239.295076][ T7941] Node 1 Normal free:3901624kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14752kB local_pcp:8256kB free_cma:0kB [ 239.405372][ T7959] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 239.463410][ T7941] lowmem_reserve[]: 0 0 0 0 0 [ 239.468189][ T7941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.547141][ T7941] Node 0 DMA32: 1*4kB (M) 668*8kB (UM) 1294*16kB (UME) 1222*32kB (UM) 701*64kB (UME) 300*128kB (UME) 138*256kB (UM) 58*512kB (ME) 15*1024kB (UME) 7*2048kB (UME) 253*4096kB (M) = 1279428kB [ 239.621583][ T7941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 239.679012][ T7941] Node 1 Normal: 256*4kB (UME) 43*8kB (UME) 36*16kB (UE) 67*32kB (UME) 25*64kB (UME) 11*128kB (UME) 7*256kB (UM) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3901624kB [ 239.747204][ T7941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.805093][ T7941] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.838536][ T7941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.874462][ T7941] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.907070][ T7941] 83395 total pagecache pages [ 239.920857][ T7941] 0 pages in swap cache [ 239.925041][ T7941] Free swap = 124996kB [ 239.927788][ T7980] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1276'. [ 239.949058][ T7941] Total swap = 124996kB [ 239.959526][ T7941] 2097051 pages RAM [ 239.993038][ T7977] netlink: 'syz.3.1275': attribute type 3 has an invalid length. [ 240.012423][ T7941] 0 pages HighMem/MovableOnly [ 240.017129][ T7941] 415223 pages reserved [ 240.023932][ T7941] 0 pages cma reserved [ 240.034332][ T7977] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1275'. [ 240.523700][ T8006] netlink: 'syz.1.1279': attribute type 2 has an invalid length. [ 240.568112][ T8006] netlink: 'syz.1.1279': attribute type 8 has an invalid length. [ 240.623804][ T8006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1279'. [ 240.886458][ T8014] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 240.908000][ T6225] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 240.932378][ T6225] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 240.950835][ T6227] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 240.969908][ T6227] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 240.978116][ T6233] ------------[ cut here ]------------ [ 240.983959][ T6233] WARNING: CPU: 1 PID: 6233 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 240.994411][ T6233] Modules linked in: [ 240.998331][ T6233] CPU: 1 PID: 6233 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 241.006025][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.018036][ T6233] Workqueue: cfg80211 cfg80211_event_work [ 241.023879][ T6233] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 241.030167][ T6233] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 d0 e9 f7 0f 0b eb bf e8 07 d0 e9 f7 <0f> 0b eb b6 e8 fe cf e9 f7 0f 0b e9 82 fd ff ff e8 f2 cf e9 f7 0f [ 241.049981][ T6233] RSP: 0018:ffffc90004677ac0 EFLAGS: 00010293 [ 241.056076][ T6233] RAX: ffffffff89987189 RBX: 1ffff920008cef5c RCX: ffff88807a538000 [ 241.064383][ T6233] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6420 [ 241.072411][ T6233] RBP: ffffc90004677b70 R08: ffffffff90b132af R09: 1ffffffff2162655 [ 241.080432][ T6233] R10: dffffc0000000000 R11: fffffbfff2162656 R12: ffff88807833b5b8 [ 241.088444][ T6233] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88807a1f0c90 [ 241.096471][ T6233] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 241.105448][ T6233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.112074][ T6233] CR2: 00007fe338196ff8 CR3: 000000005cb8f000 CR4: 00000000003506e0 [ 241.120092][ T6233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.128080][ T6233] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 241.136103][ T6233] Call Trace: [ 241.139396][ T6233] [ 241.142378][ T6233] ? trace_rdev_return_void+0x240/0x240 [ 241.147959][ T6233] cfg80211_process_wdev_events+0x359/0x4d0 [ 241.153936][ T6233] ? process_one_work+0x7b4/0x1160 [ 241.159083][ T6233] cfg80211_process_rdev_events+0x9d/0x110 [ 241.164938][ T6233] cfg80211_event_work+0x2b/0x40 [ 241.169931][ T6233] process_one_work+0x8ab/0x1160 [ 241.174908][ T6233] ? worker_detach_from_pool+0x240/0x240 [ 241.180582][ T6233] ? _raw_spin_lock_irq+0x86/0xf0 [ 241.185635][ T6233] ? _raw_spin_lock_irq+0xb7/0xf0 [ 241.190712][ T6233] ? _raw_spin_lock_irqsave+0x100/0x100 [ 241.196284][ T6233] ? wq_worker_running+0x97/0x190 [ 241.201393][ T6233] worker_thread+0xaf5/0x12a0 [ 241.206124][ T6233] kthread+0x29d/0x330 [ 241.210244][ T6233] ? worker_clr_flags+0x1a0/0x1a0 [ 241.215290][ T6233] ? kthread_blkcg+0xd0/0xd0 [ 241.219933][ T6233] ret_from_fork+0x1f/0x30 [ 241.224389][ T6233] [ 241.227435][ T6233] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.234712][ T6233] CPU: 1 PID: 6233 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 241.242332][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.252376][ T6233] Workqueue: cfg80211 cfg80211_event_work [ 241.258100][ T6233] Call Trace: [ 241.261369][ T6233] [ 241.264296][ T6233] dump_stack_lvl+0x188/0x24e [ 241.268976][ T6233] ? memcpy+0x3c/0x60 [ 241.272952][ T6233] ? show_regs_print_info+0x12/0x12 [ 241.278145][ T6233] ? load_image+0x410/0x410 [ 241.282651][ T6233] panic+0x2d3/0x710 [ 241.286543][ T6233] ? bpf_jit_dump+0xd0/0xd0 [ 241.291044][ T6233] ? ret_from_fork+0x1f/0x30 [ 241.295633][ T6233] __warn+0x2f8/0x4f0 [ 241.299604][ T6233] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 241.305143][ T6233] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 241.310677][ T6233] report_bug+0x2ba/0x4f0 [ 241.315002][ T6233] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 241.320539][ T6233] handle_bug+0x3a/0x70 [ 241.324691][ T6233] exc_invalid_op+0x16/0x40 [ 241.329195][ T6233] asm_exc_invalid_op+0x16/0x20 [ 241.334042][ T6233] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 241.340186][ T6233] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 d0 e9 f7 0f 0b eb bf e8 07 d0 e9 f7 <0f> 0b eb b6 e8 fe cf e9 f7 0f 0b e9 82 fd ff ff e8 f2 cf e9 f7 0f [ 241.359789][ T6233] RSP: 0018:ffffc90004677ac0 EFLAGS: 00010293 [ 241.365858][ T6233] RAX: ffffffff89987189 RBX: 1ffff920008cef5c RCX: ffff88807a538000 [ 241.373832][ T6233] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6420 [ 241.381887][ T6233] RBP: ffffc90004677b70 R08: ffffffff90b132af R09: 1ffffffff2162655 [ 241.389867][ T6233] R10: dffffc0000000000 R11: fffffbfff2162656 R12: ffff88807833b5b8 [ 241.397836][ T6233] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88807a1f0c90 [ 241.405810][ T6233] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 241.411369][ T6233] ? trace_rdev_return_void+0x240/0x240 [ 241.416922][ T6233] cfg80211_process_wdev_events+0x359/0x4d0 [ 241.422816][ T6233] ? process_one_work+0x7b4/0x1160 [ 241.427931][ T6233] cfg80211_process_rdev_events+0x9d/0x110 [ 241.433732][ T6233] cfg80211_event_work+0x2b/0x40 [ 241.438677][ T6233] process_one_work+0x8ab/0x1160 [ 241.443619][ T6233] ? worker_detach_from_pool+0x240/0x240 [ 241.449242][ T6233] ? _raw_spin_lock_irq+0x86/0xf0 [ 241.454275][ T6233] ? _raw_spin_lock_irq+0xb7/0xf0 [ 241.459296][ T6233] ? _raw_spin_lock_irqsave+0x100/0x100 [ 241.464835][ T6233] ? wq_worker_running+0x97/0x190 [ 241.469876][ T6233] worker_thread+0xaf5/0x12a0 [ 241.474589][ T6233] kthread+0x29d/0x330 [ 241.478674][ T6233] ? worker_clr_flags+0x1a0/0x1a0 [ 241.483722][ T6233] ? kthread_blkcg+0xd0/0xd0 [ 241.488343][ T6233] ret_from_fork+0x1f/0x30 [ 241.492800][ T6233] [ 241.496118][ T6233] Kernel Offset: disabled [ 241.500492][ T6233] Rebooting in 86400 seconds..