last executing test programs: 6.547344296s ago: executing program 2 (id=3413): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x988, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9c50f985ba27fb8a, 0x3, 0x40000000, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x1, r3, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x408c050) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) close(0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000800), 0x4) 6.254846941s ago: executing program 2 (id=3415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x633ed79a1ee0bcd1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x100}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x80007, 0x10001, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f0000000140)}, 0x20) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0000000d000000cc00020006000000762faf0c7665f9516eb989f12c3fbfbe05000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000b4b8be957edb7f5fe1e623ad00000000e4160000f6b0000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)='D', &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x2, r5}, 0x38) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) 5.987020634s ago: executing program 1 (id=3416): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10049, 0x400000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe6c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000040)="b90703600000f007", 0x0, 0x104, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/12], 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008f000000000000000500", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000001850000009a000000bf0900000000000055090100000700009500000000000000bf91000000000000b6020000010000008500000085000000b7000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_bp={0x0, 0x5}, 0x104002, 0x6c16, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(r4, 0x29, 0x3b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.879474729s ago: executing program 2 (id=3418): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000faffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000850000000000000018190000bf7089abaa59033416cc186f52eb9003509c07d943fd92bea1515f0e6aa4afbc5d3558c148d64c1c35e8e6449bc59226a84f70c2ed95ce314fcf93d7e39d143d9c602d7ab13e09c5b68c7af28da709a4a826d9", @ANYRES32, @ANYBLOB="0000000000000000186800000a000000000000000101000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000185700000100000000000000000000008500000009000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xca, 0xf2, &(0x7f0000000300)=""/242, 0x41100, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xd, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x5, 0x0, 0x1}, {0x0, 0x5, 0xe, 0x6}, {0x3, 0x4, 0xd, 0x1}, {0x3, 0x4, 0x1, 0x1}, {0x1, 0x4, 0xa, 0x2}, {0x2, 0x5, 0xa, 0xe}, {0x0, 0x3, 0xa, 0x2}], 0x10, 0x120}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="048b147fff7c47249c47741f0000000000000000000000000004000000000000000000a816d4e324a2c5c5247c2071c8aaf37a1610923d5e97cc5ed78408e536b4a4403b04af610d8fb24d97a9174ae3bbd00916d690e5676b85aedba66aa9827f4c1e336ae4661d88913722e56adfd7ad05473f2fefbe1f832798806405c4a804e63d3d10bc917536ed10e545d96fdad711860954515abf3c9a988753869d240de42aabc0f11644cb2c3fc0436d09", 0xaf}], 0x1}, 0x20040d4) close(r2) 5.614109493s ago: executing program 1 (id=3419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x5, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x5}, @const={0xc, 0x0, 0x0, 0xa, 0x4}, @enum={0xd, 0x5, 0x0, 0x6, 0x4, [{0xb, 0x1}, {0x2, 0x9}, {0x4, 0x3}, {0x9, 0x7}, {0x10, 0x1000}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x3}, @restrict={0x5}]}, {0x0, [0x5f, 0x61, 0x0, 0x61, 0x7f]}}, &(0x7f0000000080)=""/1, 0x87, 0x1, 0x0, 0x1}, 0x28) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800fab703000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r6 = syz_clone(0x4346000, &(0x7f0000000c40)="6e290ec36a13aec693d53c1a56e416a2a574e24b97f6e29d4baa7822c4c54de40641394536e5524379808c37390f715ff5eb57f47892307a30fef9b453a7", 0x3e, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000dc0)="a16519dc5c6e9b446e63c1ce4b8601d9e2f61b025af46581051d0f12042f7e2ec2decf7dd8a4d79aee37d244da0fab2af955c6269289e5ba09d235db65bea19d3444552c1b7ffe2a13552d9ca9df2348a861f64f6f85138f924c30d3527dafe66ed16a35a51dab9a17e8a33d45062900be7dc2bfc130971171273e51ce1f03d8542dcc415c804ec89b63f764e9e0c185663178ab55d94880d18861168cae0a6e5856df119b3f1f2d2e5eec7a") perf_event_open(&(0x7f0000000bc0)={0x5, 0x80, 0xff, 0xa, 0x3, 0x80, 0x0, 0x5, 0x40022, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000b80), 0xa}, 0x14029, 0x7, 0x8000, 0x3, 0x100000000, 0x4, 0x2f, 0x0, 0xac0c, 0x0, 0xab}, r6, 0xd, r2, 0x1) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, &(0x7f00000014c0), 0x0}, 0x20) ioctl$TUNSETLINK(r5, 0x400454cd, 0x325) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r3, @ANYBLOB="f8bb18caa09662ee2deec6ed0240f304802acc09e3293448b71f9e86f7168bb3b28fbad41e27ac1b3c9ab9b4bed15aad493b68bc9d361bdf9a0b71833ffcc8ed3f99279df1421730a4384b21558200f714f0d019a6bd18b31d2ff24215d1a6276ef2d31d851d2ff29e0abf4aac1c821ff378a426216536f1722a194b1a634ca22892ecbd6a60eaa5a23afa81290732105ef5e5b0295d23ee945012d61dce63a865baf2202f2995be7095c5f73fae2e5cfd77b81b637eb9a5722150c22cda959f9e186503033bad3bda3464dc084b0fc037cbdc34d06177796e6c414c895e4f7ba2b159a2d2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x6, 0x0, 0x0, 0x7, 0x4}, 0x6a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x29, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x800}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0x9, 0x3, 0xb, 0x20}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, r1, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x5, 0x9, 0x6}, 0x10, 0xffffffffffffffff, r8, 0x5, &(0x7f0000000600)=[r0, r9], &(0x7f0000000640)=[{0x3, 0x4, 0x3, 0xa}, {0x1, 0x3, 0x9, 0xc}, {0x5, 0x5, 0xe, 0x9}, {0x2, 0x1, 0xb, 0x1}, {0x4, 0x1, 0x6}], 0x10, 0x6}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r11, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r10}, 0xc) 5.613134303s ago: executing program 2 (id=3420): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xd, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x3e, &(0x7f0000000200)=""/62, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x8, 0x5, 0x10}, 0x10, 0x19d6f, r2, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2f02}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1600000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000c0fbe5677ca7595fea7c5b49718106650d59c30f354259a68317aa7112dec2b62dbb250fe163c4193b85573b8bf8bc0bcea71d825bb2276a0be6f801a7c06b48df9cd7d3cb4d4b102e801f1e010e2025b75f76a49a844d080277d0f5c6808a39c4a1cdc7bb113ce654144e32b2afdf630a2fbef69566876b69018364ce47cb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r5, &(0x7f0000000180), 0x0}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r6, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r5, &(0x7f00000008c0)="b6", &(0x7f0000000900)=""/48}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xe, 0x1000, 0x4, 0x3, 0x100, 0xffffffffffffffff, 0x9d, '\x00', 0x0, r8, 0x3, 0x4, 0x2}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r7, 0x1, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x8, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffb953, 0x0, 0x0, 0x0, 0x4303}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000b40)='syzkaller\x00', 0xfffff801, 0x49, &(0x7f0000000bc0)=""/73, 0x40f00, 0x8, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000c40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x1, 0x2, 0xfffffff7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[r10], &(0x7f0000000d00)=[{0x1, 0x4, 0x10, 0xb}], 0x10, 0x5}, 0x94) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0x691}], 0x1}, 0x4000080) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r9, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 4.092331728s ago: executing program 3 (id=3424): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) sendmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x20000840) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x6, 0xa4, 0x5, 0x3, 0x0, 0x7, 0x20, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbe71, 0x1, @perf_config_ext={0x8000000000000000, 0xe}, 0x101404, 0x3, 0x8, 0x3, 0xfd, 0xffff, 0x53, 0x0, 0xb, 0x0, 0x9}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.088199138s ago: executing program 1 (id=3425): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000000000000756d07009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xb7, &(0x7f00000001c0)=""/183, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xe, 0x59, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x10, 0xd}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x10, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup, 0x1, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback=r0, r1, 0x21, 0x2031, r4, @void, @void, @value, @void, r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31, @ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r7, @ANYRES8=r1, @ANYRESHEX=r4, @ANYRES16=r7], 0x0, 0x26, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 3.894429487s ago: executing program 0 (id=3426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x633ed79a1ee0bcd1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x100}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x80007, 0x10001, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f0000000140)}, 0x20) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0000000d000000cc00020006000000762faf0c7665f9516eb989f12c3fbfbe05000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000b4b8be957edb7f5fe1e623ad00000000e4160000f6b0000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)='D', &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x2, r5}, 0x38) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) 3.686645158s ago: executing program 3 (id=3427): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @local, 0xc}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES8=r0], 0xfe33) 1.174564282s ago: executing program 0 (id=3428): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10049, 0x400000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe6c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000040)="b90703600000f007", 0x0, 0x104, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/12], 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008f000000000000000500", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000001850000009a000000bf0900000000000055090100000700009500000000000000bf91000000000000b6020000010000008500000085000000b7000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_bp={0x0, 0x5}, 0x104002, 0x6c16, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(r4, 0x29, 0x3b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.174102292s ago: executing program 1 (id=3429): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x400000c0) 1.116058625s ago: executing program 3 (id=3430): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x105181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x10000000001, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x0, 0x2010e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0}, 0x806, 0xc8, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x49, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) (fail_nth: 3) 1.045173279s ago: executing program 2 (id=3431): r0 = socket$kcm(0x2, 0x3, 0x106) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000740)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/79, 0x4f}], 0x3, &(0x7f0000000940)=""/228, 0xe4}, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0xa, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000300000000000000", @ANYBLOB="0000dd00000045471660ff2469da3a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0xffff0000, 0x10, 0x0, &(0x7f0000000000)="2b206d0748010097737ea49da2aae9f8", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x1e, &(0x7f0000000500), 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r11 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x34, &(0x7f0000000040)=r10, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000250000000000000000000000c60001002500000095000000000000001840000002000000000000000000000095000000000000009500000500000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 981.756942ms ago: executing program 1 (id=3432): r0 = socket$kcm(0x2, 0x3, 0x106) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000740)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/79, 0x4f}], 0x3, &(0x7f0000000940)=""/228, 0xe4}, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0xa, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000300000000000000", @ANYRES32, @ANYBLOB="0000dd00000045471660ff2469da3a00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0xffff0000, 0x10, 0x0, &(0x7f0000000000)="2b206d0748010097737ea49da2aae9f8", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x1e, &(0x7f0000000500), 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r11 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x34, &(0x7f0000000040)=r10, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000250000000000000000000000c60001002500000095000000000000001840000002000000000000000000000095000000000000009500000500000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 890.683466ms ago: executing program 3 (id=3433): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x105181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x10000000001, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x0, 0x2010e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0}, 0x806, 0xc8, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000640)='%pK \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f00000000c0)="2a061502007af912d5f11d35023ceb6d270047c1da8009b13794b2bc8e452f6731543c", &(0x7f0000000400)=""/220, &(0x7f0000000500)="db618f6923b1a415b75cc395531ae1bb131007c2e4842880116901406efb1f84cf20138cd78577d80ceb5b44710f600f55dc97dd461021d43c5023295f78ade8e19111cf58b3a62afe3c460d3a00436cafa2a11665905be5d0e29883ca3df67939447649865bf943644cb0c472d344eb4ede7e47626b478ff339027d68e9dd4338d4401f4822fef05c96aa6098f8edd036fa844a41f47807f9e8e50c06acca5941b5d6910a21ff43da555e7ada53bdb8ec7d40d5d2a1953fd8b8", &(0x7f00000005c0)="7acf141ff5ef9dba3da632b002ad0edc365fff7a12664129f5062e2bba33012bbd4ac558241e590abdbd0d450a8b8fe19a62e99986ac95cbdfb5b7179349251bb2eef5febfa300ccfaccd24d84a78c44b1976e69617fd5f9df72bf58e5", 0xd, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 769.023672ms ago: executing program 0 (id=3434): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000ffffffffffffffe3", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="050000000500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=@raw=[@snprintf], 0x0, 0xffff, 0x0, 0x0, 0xc9c4ed9d17207862, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000b400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000001f40)=ANY=[@ANYBLOB="0015000061114c0000000000850000001c0000009500000000000100baff9317ffac4a1195cbd968667bcceea2e8a5e534a771aa23feff63047094111b2d443dadda240ee3a5f4ce36ca9041107ab000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xa6d}, 0x200, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x8e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x30, &(0x7f0000001a40)=ANY=[@ANYBLOB="1872da002492ffff000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001834000005000000000000000000000085000000bd000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186500000e00000000000000040000001800000002000000000000000000c000bd060c00fcffffff180000008700000000000000040000008cbbfcffffffffff180100002020782500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)={0xffffffffffffffff, 0x0, &(0x7f0000001a00)=[{&(0x7f0000002080)=""/1, 0x1}, {&(0x7f0000001cc0)=""/134, 0x86}, {&(0x7f0000001d80)=""/217, 0xd9}], 0x3, &(0x7f0000001e80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x1) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 504.409385ms ago: executing program 3 (id=3435): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x828, 0x7fff, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="720ac4ff00000000691016000000000095000000000000003844dfbf6a7c8254bd10f6dd94bc23b2b18290afddc5f6a0d92874b00cb9acdd878b3712b7cb7de89642973a209bed3ccf51d6619d7b4f62c9ec393cffb647137099f9f0d79e62175897f831d978"], &(0x7f0000000480)='GPL\x00'}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x38}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 276.927906ms ago: executing program 0 (id=3436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x633ed79a1ee0bcd1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x100}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x80007, 0x10001, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f0000000140)}, 0x20) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0000000d000000cc00020006000000762faf0c7665f9516eb989f12c3fbfbe05000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000b4b8be957edb7f5fe1e623ad00000000e4160000f6b0000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)='D', &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x2, r5}, 0x38) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) 217.138409ms ago: executing program 0 (id=3437): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400000024000b94f0184528828c3d153136af46", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="38c57207ed7e7e6b53549d187ac9ed264962092578abd8ec7500562bced8bbf08460c39db6cffde3f34adc5d715d947959ce58366b7e50e3f12f67ef8f7665d2da88e113f159b82392e7a883984bee11d1a1c785e92be32da3", 0x59}, {&(0x7f0000000400)="fc2182c9233a462415e8bea360bbf9ea6d03ab5569fa4af1544e3c95fa3eadac5f10a4c454c1ddf36ab44138f51303337c341d45785e134ce190abae3bc98c6599431d75e15be9b9287d8f3755bf8a810e1ee76d355bd233a9135d281fd714043de6a642509959289c8da1e0638c7b2b", 0x70}], 0x2, &(0x7f0000001180)=[{0xb0, 0x1, 0x1, "d4df7f30aac7e9f65b8e012bc7532a5ca2f0b1a445b8564e5953330892177469ca297eeeea2dd4170a117f9ba8ada13b390805eefb35d8956f58ec5f8f578d21c79ac377a068c2dd1e92747c76da691e57510afbd9c51ae6f90058f6614d1c90713e5b50311e4a61e0814fd7c8344968c76a198445cfd56f11e7e249f84cb1716f622d6a31201727a6ad08f5a6bc43ecfa418ce9891a61bf9b556f99c5e5"}, {0x88, 0x3a, 0x6, "59a95aa24ed3a77f5223d3b233bc843f29b1610994a747ac4dd42b99d7c7f57b4f11c710c70453ba335c2da9a5145ee8707c477e9fca501659cdf513d2ed5e19a215b6c0458685ba3bd70fad7b2eb276f783904078d0e78726a78e3400eac36dd009e0ffe75dc067d4a2bfb8437962886931418a"}, {0xf8, 0x119, 0xd, "8eb95c911c4e85925f7353a5d897b117644df6ce3a9a1dbe51e995217a7490274861245ecf3ed1d9f0da2074f3bb8d87cfbac122afc4d42067736fac3ad96951cc2e0031c2b2ba96951f082452d773c59c93023cb0af296c5187fc9e089be218d560c8649f060f88ddf758586a7a30cc26b3cd93314442260f65a57a9ec182380c3f96a8d83dd14688074547d7851a20dfd7f93e947e3b970ec989a68dbc9e9730836a859c7b50ca4598c23c6b788f7a657bf5f4b431bfc3b655def6cddf5b82fe593aebde5ac43b835c784a7dcd384f6ef0524bba833431194b7cd4023c0ca6e0acc4c836"}, {0x110, 0x3a, 0x2, "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"}, {0x38, 0x88, 0x1, "ef2ff49c9ba2db4c2116717d938e6a1e822ec16549f887d498f8655f43300053b5"}, {0x20, 0x10c, 0x8001, "36ae9e60dff394c4a8e7e8"}], 0x398}, 0x20000001) r1 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x6, 0x6, 0x3b, 0x7, 0x0, 0x3, 0xc0000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp, 0x108a81, 0x98, 0x100, 0x766abf70d759db0b, 0x7, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xfffffffffffffffd, r1, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000001b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xffffffffffffffff}, 0x80) (async) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xe2ea, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 147.495953ms ago: executing program 0 (id=3438): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000000000000756d07009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xb7, &(0x7f00000001c0)=""/183, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xe, 0x59, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x10, 0xd}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x10, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup, 0x1, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback=r0, r1, 0x21, 0x2031, r4, @void, @void, @value, @void, r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31, @ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r7, @ANYRES8=r1, @ANYRESHEX=r4, @ANYRES16=r7], 0x0, 0x26, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 75.815037ms ago: executing program 2 (id=3439): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x105181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x10000000001, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x0, 0x2010e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0}, 0x806, 0xc8, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x49, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 74.642107ms ago: executing program 3 (id=3440): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xd, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x3e, &(0x7f0000000200)=""/62, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x8, 0x5, 0x10}, 0x10, 0x19d6f, r2, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2f02}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1600000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000c0fbe5677ca7595fea7c5b49718106650d59c30f354259a68317aa7112dec2b62dbb250fe163c4193b85573b8bf8bc0bcea71d825bb2276a0be6f801a7c06b48df9cd7d3cb4d4b102e801f1e010e2025b75f76a49a844d080277d0f5c6808a39c4a1cdc7bb113ce654144e32b2afdf630a2fbef69566876b69018364ce47cb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r5, &(0x7f0000000180), 0x0}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r6, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r5, &(0x7f00000008c0)="b6", &(0x7f0000000900)=""/48}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xe, 0x1000, 0x4, 0x3, 0x100, 0xffffffffffffffff, 0x9d, '\x00', 0x0, r8, 0x3, 0x4, 0x2}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r7, 0x1, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x8, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffb953, 0x0, 0x0, 0x0, 0x4303}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000b40)='syzkaller\x00', 0xfffff801, 0x49, &(0x7f0000000bc0)=""/73, 0x40f00, 0x8, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000c40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x1, 0x2, 0xfffffff7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[r10], &(0x7f0000000d00)=[{0x1, 0x4, 0x10, 0xb}], 0x10, 0x5}, 0x94) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0x691}], 0x1}, 0x4000080) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r9, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 0s ago: executing program 1 (id=3441): close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8955, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0xd24}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb02800007", 0x13}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.777783][T11980] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.784950][T11980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.829030][T11980] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.836225][T11980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.885524][ T5773] Bluetooth: hci3: command tx timeout [ 524.280894][T13012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.386947][T13012] veth0_vlan: entered promiscuous mode [ 524.408236][T13012] veth1_vlan: entered promiscuous mode [ 524.488914][T13012] veth0_macvtap: entered promiscuous mode [ 524.525849][T13012] veth1_macvtap: entered promiscuous mode [ 524.570435][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.581952][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.598796][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.609642][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.619812][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.634696][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.644841][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.660211][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.673001][T13012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.701252][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.720083][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.731546][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.748028][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.760749][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.771940][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.788332][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.803396][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.823849][T13012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.871862][T13012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.890964][T13012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.902227][T13012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.915324][T13012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.125195][T12427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.140845][T12427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.229920][T12427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.244008][T12427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.952187][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 525.962107][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 525.974028][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 525.984940][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 525.997355][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 526.005393][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.304532][T13204] chnl_net:caif_netlink_parms(): no params data found [ 526.451058][T13204] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.462495][T13204] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.474829][T13204] bridge_slave_0: entered allmulticast mode [ 526.483050][T13204] bridge_slave_0: entered promiscuous mode [ 526.499795][T13204] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.513314][T13204] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.524677][T13204] bridge_slave_1: entered allmulticast mode [ 526.542321][T13204] bridge_slave_1: entered promiscuous mode [ 526.601888][T13204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.628883][T13204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.686456][T13204] team0: Port device team_slave_0 added [ 526.705646][T13204] team0: Port device team_slave_1 added [ 526.751752][T13204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.766178][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.802383][T13204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.823162][T13204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.831386][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.865625][T13204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.401289][ T5773] Bluetooth: hci4: command tx timeout [ 528.405210][T13204] hsr_slave_0: entered promiscuous mode [ 528.416255][T13204] hsr_slave_1: entered promiscuous mode [ 528.434343][T13204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.459975][T13204] Cannot create hsr debugfs directory [ 528.615123][T13218] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2434'. [ 528.711259][T13213] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.121381][T13204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.204931][T13204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.261733][T13228] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.298962][ T1075] vlan0: left allmulticast mode [ 529.310329][ T1075] veth0_vlan: left allmulticast mode [ 529.329327][ T1075] vlan0: left promiscuous mode [ 529.335907][ T1075] À: port 1(vlan0) entered disabled state [ 529.343547][T13230] netlink: 'syz.3.2432': attribute type 4 has an invalid length. [ 529.351787][T13230] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2432'. [ 529.440968][ T1075] hsr_slave_0: left promiscuous mode [ 529.450616][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 529.516061][ T1075] hsr_slave_1: left promiscuous mode [ 529.529932][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.540703][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.554280][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.575326][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.598586][ T1075] bridge_slave_1: left allmulticast mode [ 529.604423][ T1075] bridge_slave_1: left promiscuous mode [ 529.621119][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.638357][ T1075] bridge_slave_0: left allmulticast mode [ 529.648262][ T1075] bridge_slave_0: left promiscuous mode [ 529.654080][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.700862][ T1075] veth1_macvtap: left promiscuous mode [ 529.708639][ T1075] veth0_macvtap: left promiscuous mode [ 529.714427][ T1075] veth1_vlan: left promiscuous mode [ 529.737832][ T1075] veth0_vlan: left promiscuous mode [ 530.455449][ T5773] Bluetooth: hci4: command tx timeout [ 530.833813][ T1075] team0 (unregistering): Port device team_slave_1 removed [ 530.905413][ T1075] team0 (unregistering): Port device team_slave_0 removed [ 530.988143][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.045318][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.170662][ T12] wlan1: Trigger new scan to find an IBSS to join [ 531.508598][ T1075] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 531.519411][ T1075] bond0 (unregistering): Released all slaves [ 531.639335][T13204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.654468][T13234] macvlan1: entered allmulticast mode [ 531.695520][T13241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2438'. [ 531.710665][T13249] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 531.863342][T13204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.349880][T13204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.410760][T13259] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.439721][T13204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 532.465941][T13204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 532.486065][T13204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 532.505656][T13263] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2445'. [ 532.526200][ T5773] Bluetooth: hci4: command tx timeout [ 532.932680][T13204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.042380][T13204] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.137856][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.145158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.156240][T13271] netlink: 'syz.1.2443': attribute type 4 has an invalid length. [ 533.171640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.178878][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.204193][T13271] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2443'. [ 533.500001][ T5773] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 534.211515][T13204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.227741][T13290] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 534.351444][T13204] veth0_vlan: entered promiscuous mode [ 534.430587][T13204] veth1_vlan: entered promiscuous mode [ 534.615775][ T5773] Bluetooth: hci4: command tx timeout [ 534.765887][T13288] netlink: 'syz.1.2457': attribute type 4 has an invalid length. [ 534.773712][T13288] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2457'. [ 534.975404][T13204] veth0_macvtap: entered promiscuous mode [ 535.001112][T13204] veth1_macvtap: entered promiscuous mode [ 535.026358][T13297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2451'. [ 535.131618][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.156263][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.191256][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.224652][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.244586][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.265745][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.286004][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.297260][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.309717][T13204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.341401][T13307] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 535.393261][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.415407][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.477193][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.528740][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.596766][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.607470][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.617428][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.627986][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.640663][T13204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.711801][T13204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.842754][T13204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.903828][T13204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.941473][T13204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.040599][T13308] netlink: 'syz.1.2463': attribute type 4 has an invalid length. [ 536.071901][T13308] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2463'. [ 536.365761][T13323] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2456'. [ 536.683037][T11980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.722800][T11980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.041097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.082833][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.344370][T13336] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 538.055261][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 538.268728][T12427] wlan1: Trigger new scan to find an IBSS to join [ 539.360569][T13347] netlink: 'syz.2.2469': attribute type 4 has an invalid length. [ 539.394096][T13347] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2469'. [ 539.475772][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.495972][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.514789][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.538149][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.554408][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 539.585148][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.911011][T13368] netlink: 'syz.2.2476': attribute type 27 has an invalid length. [ 539.922895][T13368] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2476'. [ 540.059955][ T5773] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 540.623254][T13381] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 540.820780][T13386] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 540.950564][T13356] chnl_net:caif_netlink_parms(): no params data found [ 541.046757][T13389] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 541.392524][T13405] FAULT_INJECTION: forcing a failure. [ 541.392524][T13405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.409534][T13356] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.419637][T13405] CPU: 1 PID: 13405 Comm: syz.3.2488 Not tainted syzkaller #0 [ 541.427134][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.437204][T13405] Call Trace: [ 541.440500][T13405] [ 541.443435][T13405] dump_stack_lvl+0x18c/0x250 [ 541.448125][T13405] ? show_regs_print_info+0x20/0x20 [ 541.453321][T13405] ? load_image+0x400/0x400 [ 541.457817][T13405] ? __might_fault+0xaa/0x120 [ 541.462484][T13405] ? __lock_acquire+0x7d40/0x7d40 [ 541.467504][T13405] should_fail_ex+0x39d/0x4d0 [ 541.472177][T13405] _copy_from_user+0x2f/0xe0 [ 541.476763][T13405] ___sys_sendmsg+0x1c7/0x360 [ 541.481438][T13405] ? get_pid_task+0x20/0x1e0 [ 541.486030][T13405] ? __sys_sendmsg+0x2a0/0x2a0 [ 541.490795][T13405] ? __lock_acquire+0x7d40/0x7d40 [ 541.495826][T13405] __se_sys_sendmsg+0x1c2/0x2b0 [ 541.500670][T13405] ? __x64_sys_sendmsg+0x80/0x80 [ 541.505604][T13405] ? lockdep_hardirqs_on+0x98/0x150 [ 541.510797][T13405] do_syscall_64+0x55/0xa0 [ 541.515218][T13405] ? clear_bhb_loop+0x40/0x90 [ 541.519890][T13405] ? clear_bhb_loop+0x40/0x90 [ 541.524558][T13405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.530439][T13405] RIP: 0033:0x7f4955b9c799 [ 541.534844][T13405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.554437][T13405] RSP: 002b:00007f4956b4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.562840][T13405] RAX: ffffffffffffffda RBX: 00007f4955e15fa0 RCX: 00007f4955b9c799 [ 541.570809][T13405] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 541.578766][T13405] RBP: 00007f4956b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 541.586724][T13405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.594681][T13405] R13: 00007f4955e16038 R14: 00007f4955e15fa0 R15: 00007ffff8335758 [ 541.602651][T13405] [ 541.605796][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.614637][T13356] bridge_slave_0: entered allmulticast mode [ 541.622429][T13356] bridge_slave_0: entered promiscuous mode [ 541.626585][ T5773] Bluetooth: hci4: ISO packet for unknown connection handle 1854 [ 541.631329][T13356] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.645236][ T5773] Bluetooth: hci0: command tx timeout [ 541.696490][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.703750][T13356] bridge_slave_1: entered allmulticast mode [ 541.746671][T13356] bridge_slave_1: entered promiscuous mode [ 541.810633][T13403] macvlan1: entered allmulticast mode [ 542.013745][T13356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.053207][T13356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.140978][T13417] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2491'. [ 542.176170][T13417] bridge_slave_1: default FDB implementation only supports local addresses [ 542.195866][T13419] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2491'. [ 542.238913][T13419] bridge_slave_1: default FDB implementation only supports local addresses [ 542.272457][T13416] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 542.329806][T13356] team0: Port device team_slave_0 added [ 542.389318][T13356] team0: Port device team_slave_1 added [ 542.499706][T13356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.515136][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.573105][T13356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.612647][T13425] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 542.638853][T13356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.654922][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.683093][T13356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.977698][T13356] hsr_slave_0: entered promiscuous mode [ 543.029322][T13356] hsr_slave_1: entered promiscuous mode [ 543.046090][T13356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.063760][T13356] Cannot create hsr debugfs directory [ 543.173070][T12427] wlan1: Trigger new scan to find an IBSS to join [ 543.431687][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 543.640922][T13356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.735052][ T5773] Bluetooth: hci0: command tx timeout [ 543.928753][T13356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.099587][T13356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.317927][T13356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.346880][T13456] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 544.430626][T12425] hsr_slave_0: left promiscuous mode [ 544.443787][T12425] hsr_slave_1: left promiscuous mode [ 544.456296][T12425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.463973][T12425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.486303][T12425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.493748][T12425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.530613][T12425] bridge_slave_1: left allmulticast mode [ 544.536764][T12425] bridge_slave_1: left promiscuous mode [ 544.543676][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.554103][T12425] bridge_slave_0: left allmulticast mode [ 544.559983][T12425] bridge_slave_0: left promiscuous mode [ 544.572429][T12425] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.652486][T12425] veth1_macvtap: left promiscuous mode [ 544.665964][T12425] veth0_macvtap: left promiscuous mode [ 544.671818][T12425] veth1_vlan: left promiscuous mode [ 544.708874][T12425] veth0_vlan: left promiscuous mode [ 544.739203][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 545.548540][T12425] team0 (unregistering): Port device team_slave_1 removed [ 545.604876][T12425] team0 (unregistering): Port device team_slave_0 removed [ 545.659030][T12425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.712842][T12425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.805357][ T5773] Bluetooth: hci0: command tx timeout [ 546.050684][T12425] bond0 (unregistering): Released all slaves [ 546.214521][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 546.375120][T13476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2511'. [ 546.401464][T13356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.439846][T13356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.468030][T13356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.510696][T13356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.656309][T13484] netlink: 'syz.3.2514': attribute type 10 has an invalid length. [ 546.672121][T13487] FAULT_INJECTION: forcing a failure. [ 546.672121][T13487] name failslab, interval 1, probability 0, space 0, times 0 [ 546.686143][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2514'. [ 546.690754][T13487] CPU: 1 PID: 13487 Comm: syz.0.2515 Not tainted syzkaller #0 [ 546.702632][T13487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.712707][T13487] Call Trace: [ 546.715657][T13484] batman_adv: batadv0: Adding interface: veth0_vlan [ 546.715983][T13487] [ 546.715993][T13487] dump_stack_lvl+0x18c/0x250 [ 546.722597][T13484] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.725503][T13487] ? show_regs_print_info+0x20/0x20 [ 546.725539][T13487] ? load_image+0x400/0x400 [ 546.725562][T13487] ? __might_sleep+0xe0/0xe0 [ 546.725582][T13487] ? __lock_acquire+0x7d40/0x7d40 [ 546.725606][T13487] should_fail_ex+0x39d/0x4d0 [ 546.743424][T13484] batman_adv: batadv0: Interface activated: veth0_vlan [ 546.755771][T13487] should_failslab+0x9/0x20 [ 546.755803][T13487] slab_pre_alloc_hook+0x59/0x310 [ 546.755824][T13487] ? __lock_acquire+0x7d40/0x7d40 [ 546.755844][T13487] kmem_cache_alloc_node+0x60/0x320 [ 546.755864][T13487] ? __alloc_skb+0x103/0x2c0 [ 546.755891][T13487] __alloc_skb+0x103/0x2c0 [ 546.755914][T13487] netlink_sendmsg+0x66a/0xbf0 [ 546.755941][T13487] ? netlink_getsockopt+0x590/0x590 [ 546.755963][T13487] ? aa_sock_msg_perm+0x94/0x150 [ 546.755982][T13487] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 546.756001][T13487] ? security_socket_sendmsg+0x80/0xa0 [ 546.756017][T13487] ? netlink_getsockopt+0x590/0x590 [ 546.756041][T13487] ____sys_sendmsg+0x5ba/0x960 [ 546.756064][T13487] ? __asan_memset+0x22/0x40 [ 546.855458][T13487] ? __sys_sendmsg_sock+0x30/0x30 [ 546.860476][T13487] ? __import_iovec+0x5f2/0x850 [ 546.865331][T13487] ? import_iovec+0x73/0xa0 [ 546.869823][T13487] ___sys_sendmsg+0x2a6/0x360 [ 546.874488][T13487] ? get_pid_task+0x20/0x1e0 [ 546.879078][T13487] ? __sys_sendmsg+0x2a0/0x2a0 [ 546.883843][T13487] ? __lock_acquire+0x7d40/0x7d40 [ 546.888879][T13487] __se_sys_sendmsg+0x1c2/0x2b0 [ 546.893722][T13487] ? __x64_sys_sendmsg+0x80/0x80 [ 546.898662][T13487] ? lockdep_hardirqs_on+0x98/0x150 [ 546.903853][T13487] do_syscall_64+0x55/0xa0 [ 546.908262][T13487] ? clear_bhb_loop+0x40/0x90 [ 546.912927][T13487] ? clear_bhb_loop+0x40/0x90 [ 546.917595][T13487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.923477][T13487] RIP: 0033:0x7fcd0e19c799 [ 546.927888][T13487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.947491][T13487] RSP: 002b:00007fcd0ef9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.955900][T13487] RAX: ffffffffffffffda RBX: 00007fcd0e415fa0 RCX: 00007fcd0e19c799 [ 546.963862][T13487] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 546.971820][T13487] RBP: 00007fcd0ef9b090 R08: 0000000000000000 R09: 0000000000000000 [ 546.979779][T13487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.987738][T13487] R13: 00007fcd0e416038 R14: 00007fcd0e415fa0 R15: 00007ffd686d5ae8 [ 546.995721][T13487] [ 547.114359][T13356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.238346][T13356] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.288652][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 547.322049][T11980] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.329245][T11980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.343884][T11980] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.351090][T11980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.397880][T12425] tipc: Left network mode [ 547.611910][T13505] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2521'. [ 547.624954][T13505] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 547.960978][T13512] FAULT_INJECTION: forcing a failure. [ 547.960978][T13512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.008834][ T5773] Bluetooth: hci0: command tx timeout [ 548.038183][T13512] CPU: 1 PID: 13512 Comm: syz.3.2522 Not tainted syzkaller #0 [ 548.045728][T13512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.055855][T13512] Call Trace: [ 548.059179][T13512] [ 548.062150][T13512] dump_stack_lvl+0x18c/0x250 [ 548.066888][T13512] ? show_regs_print_info+0x20/0x20 [ 548.072137][T13512] ? load_image+0x400/0x400 [ 548.076695][T13512] ? __lock_acquire+0x7d40/0x7d40 [ 548.081766][T13512] ? snprintf+0xe9/0x140 [ 548.086065][T13512] should_fail_ex+0x39d/0x4d0 [ 548.090807][T13512] _copy_to_user+0x2f/0xa0 [ 548.095272][T13512] simple_read_from_buffer+0xe7/0x150 [ 548.100694][T13512] proc_fail_nth_read+0x1e8/0x260 [ 548.105747][T13512] ? proc_fault_inject_write+0x360/0x360 [ 548.111405][T13512] ? fsnotify_perm+0x271/0x5e0 [ 548.116182][T13512] ? proc_fault_inject_write+0x360/0x360 [ 548.121831][T13512] vfs_read+0x28b/0x970 [ 548.126011][T13512] ? kernel_read+0x1e0/0x1e0 [ 548.130616][T13512] ? __fget_files+0x28/0x4b0 [ 548.135218][T13512] ? __fget_files+0x28/0x4b0 [ 548.139820][T13512] ? __fget_files+0x43d/0x4b0 [ 548.144527][T13512] ? __fdget_pos+0x2a3/0x330 [ 548.149126][T13512] ? ksys_read+0x75/0x260 [ 548.153492][T13512] ksys_read+0x150/0x260 [ 548.157754][T13512] ? vfs_write+0x990/0x990 [ 548.162189][T13512] ? lockdep_hardirqs_on+0x98/0x150 [ 548.167410][T13512] do_syscall_64+0x55/0xa0 [ 548.171834][T13512] ? clear_bhb_loop+0x40/0x90 [ 548.176525][T13512] ? clear_bhb_loop+0x40/0x90 [ 548.181214][T13512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.187114][T13512] RIP: 0033:0x7f4955b5cfce [ 548.191537][T13512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 548.211166][T13512] RSP: 002b:00007f4956b49fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 548.219598][T13512] RAX: ffffffffffffffda RBX: 00007f4956b4a6c0 RCX: 00007f4955b5cfce [ 548.227578][T13512] RDX: 000000000000000f RSI: 00007f4956b4a0a0 RDI: 0000000000000007 [ 548.235554][T13512] RBP: 00007f4956b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 548.243531][T13512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.251600][T13512] R13: 00007f4955e16038 R14: 00007f4955e15fa0 R15: 00007ffff8335758 [ 548.259616][T13512] [ 548.264119][T11980] wlan1: Trigger new scan to find an IBSS to join [ 548.923049][T13356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.231437][ T5773] Bluetooth: hci4: ISO packet for unknown connection handle 1854 [ 549.407233][T13356] veth0_vlan: entered promiscuous mode [ 549.591152][T13356] veth1_vlan: entered promiscuous mode [ 549.918621][T13537] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2528'. [ 549.934520][T13537] openvswitch: netlink: Message has 20476 unknown bytes. [ 549.938927][T13356] veth0_macvtap: entered promiscuous mode [ 550.011265][T13356] veth1_macvtap: entered promiscuous mode [ 550.193434][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.216398][T12434] wlan1: Trigger new scan to find an IBSS to join [ 550.227994][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.240426][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.256933][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.268370][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.295155][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.325370][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.349962][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.363977][T13356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.383868][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.401107][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.411664][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.431162][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.447287][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.461663][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.472017][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.483394][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.503053][T13356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.955614][T13356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.982539][T13356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.008626][T13356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.017765][T13356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.182721][T12434] wlan1: Creating new IBSS network, BSSID 56:55:6f:31:8a:09 [ 551.300582][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 551.401190][T12438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.431102][T12438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.542662][T13571] FAULT_INJECTION: forcing a failure. [ 551.542662][T13571] name failslab, interval 1, probability 0, space 0, times 0 [ 551.558221][T13571] CPU: 0 PID: 13571 Comm: syz.3.2540 Not tainted syzkaller #0 [ 551.565728][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.575808][T13571] Call Trace: [ 551.579122][T13571] [ 551.582079][T13571] dump_stack_lvl+0x18c/0x250 [ 551.586798][T13571] ? show_regs_print_info+0x20/0x20 [ 551.592027][T13571] ? load_image+0x400/0x400 [ 551.596573][T13571] ? __might_sleep+0xe0/0xe0 [ 551.601192][T13571] ? __lock_acquire+0x7d40/0x7d40 [ 551.606258][T13571] should_fail_ex+0x39d/0x4d0 [ 551.610973][T13571] should_failslab+0x9/0x20 [ 551.615500][T13571] slab_pre_alloc_hook+0x59/0x310 [ 551.620562][T13571] kmem_cache_alloc_node+0x60/0x320 [ 551.625789][T13571] ? __alloc_skb+0x103/0x2c0 [ 551.630417][T13571] __alloc_skb+0x103/0x2c0 [ 551.634871][T13571] tcp_stream_alloc_skb+0x3d/0x330 [ 551.640020][T13571] tcp_sendmsg_locked+0xea4/0x4bd0 [ 551.645170][T13571] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 551.651004][T13571] ? tcp_set_state+0x680/0x680 [ 551.655834][T13571] tcp_sendmsg+0x2f/0x50 [ 551.660102][T13571] ? inet_send_prepare+0x260/0x260 [ 551.665243][T13571] ____sys_sendmsg+0x5ba/0x960 [ 551.670044][T13571] ? __asan_memset+0x22/0x40 [ 551.674660][T13571] ? __sys_sendmsg_sock+0x30/0x30 [ 551.679701][T13571] ? __import_iovec+0x5f2/0x850 [ 551.684604][T13571] ? import_iovec+0x73/0xa0 [ 551.689139][T13571] ___sys_sendmsg+0x2a6/0x360 [ 551.693849][T13571] ? __sys_sendmsg+0x2a0/0x2a0 [ 551.698684][T13571] ? __lock_acquire+0x7d40/0x7d40 [ 551.703785][T13571] __se_sys_sendmsg+0x1c2/0x2b0 [ 551.708668][T13571] ? __x64_sys_sendmsg+0x80/0x80 [ 551.713661][T13571] ? lockdep_hardirqs_on+0x98/0x150 [ 551.718895][T13571] do_syscall_64+0x55/0xa0 [ 551.723343][T13571] ? clear_bhb_loop+0x40/0x90 [ 551.728046][T13571] ? clear_bhb_loop+0x40/0x90 [ 551.732751][T13571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.738669][T13571] RIP: 0033:0x7f4955b9c799 [ 551.743109][T13571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.762743][T13571] RSP: 002b:00007f4956b4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.771189][T13571] RAX: ffffffffffffffda RBX: 00007f4955e15fa0 RCX: 00007f4955b9c799 [ 551.779191][T13571] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000004 [ 551.787186][T13571] RBP: 00007f4956b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 551.795174][T13571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.803165][T13571] R13: 00007f4955e16038 R14: 00007f4955e15fa0 R15: 00007ffff8335758 [ 551.811189][T13571] [ 551.858638][T11980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.867062][T11980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.086267][T13602] netlink: 'syz.1.2546': attribute type 27 has an invalid length. [ 553.094141][T13602] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2546'. [ 553.166261][T11980] wlan1: Trigger new scan to find an IBSS to join [ 553.212442][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.254214][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.264191][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.296103][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.308412][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 553.320920][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.535274][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 1854 [ 555.405740][ T51] Bluetooth: hci2: command tx timeout [ 556.297652][T13614] macvlan1: entered allmulticast mode [ 556.313804][T12438] wlan1: Creating new IBSS network, BSSID 4a:a7:82:9c:06:7c [ 556.931748][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 557.019460][T13636] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2552'. [ 557.092512][T13636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.123812][T13636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.194296][T13636] bond0 (unregistering): Released all slaves [ 557.275905][T13641] FAULT_INJECTION: forcing a failure. [ 557.275905][T13641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.308343][T13605] chnl_net:caif_netlink_parms(): no params data found [ 557.316587][T13641] CPU: 1 PID: 13641 Comm: syz.0.2555 Not tainted syzkaller #0 [ 557.324100][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.334192][T13641] Call Trace: [ 557.337504][T13641] [ 557.340467][T13641] dump_stack_lvl+0x18c/0x250 [ 557.345195][T13641] ? show_regs_print_info+0x20/0x20 [ 557.350436][T13641] ? load_image+0x400/0x400 [ 557.354980][T13641] ? __might_fault+0xaa/0x120 [ 557.359700][T13641] ? __lock_acquire+0x7d40/0x7d40 [ 557.364786][T13641] should_fail_ex+0x39d/0x4d0 [ 557.369532][T13641] _copy_from_user+0x2f/0xe0 [ 557.374173][T13641] ___sys_sendmsg+0x1c7/0x360 [ 557.378917][T13641] ? __sys_sendmsg+0x2a0/0x2a0 [ 557.383787][T13641] ? trace_call_bpf+0xc3/0x6c0 [ 557.388687][T13641] __se_sys_sendmsg+0x1c2/0x2b0 [ 557.393580][T13641] ? __x64_sys_sendmsg+0x80/0x80 [ 557.398616][T13641] ? lockdep_hardirqs_on+0x98/0x150 [ 557.403874][T13641] do_syscall_64+0x55/0xa0 [ 557.408337][T13641] ? clear_bhb_loop+0x40/0x90 [ 557.413055][T13641] ? clear_bhb_loop+0x40/0x90 [ 557.417783][T13641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.423716][T13641] RIP: 0033:0x7fcd0e19c799 [ 557.428157][T13641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.447774][T13641] RSP: 002b:00007fcd0ef9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.456201][T13641] RAX: ffffffffffffffda RBX: 00007fcd0e415fa0 RCX: 00007fcd0e19c799 [ 557.464178][T13641] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 557.472150][T13641] RBP: 00007fcd0ef9b090 R08: 0000000000000000 R09: 0000000000000000 [ 557.480124][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.488096][T13641] R13: 00007fcd0e416038 R14: 00007fcd0e415fa0 R15: 00007ffd686d5ae8 [ 557.496108][T13641] [ 557.542718][ T51] Bluetooth: hci2: command tx timeout [ 557.974953][T13605] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.982478][T13605] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.989896][T13605] bridge_slave_0: entered allmulticast mode [ 557.997390][T13605] bridge_slave_0: entered promiscuous mode [ 558.007055][T13605] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.014264][T13605] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.021750][T13605] bridge_slave_1: entered allmulticast mode [ 558.029166][T13605] bridge_slave_1: entered promiscuous mode [ 558.036328][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 558.069233][T13605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.092076][T13605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.143700][T13605] team0: Port device team_slave_0 added [ 558.159078][T13605] team0: Port device team_slave_1 added [ 558.211544][T13605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.220811][T13605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.256722][T13605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.277727][T13605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.284708][T13605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.320162][T13605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.566034][ T51] Bluetooth: hci2: command tx timeout [ 560.886847][T13605] hsr_slave_0: entered promiscuous mode [ 560.901591][T13605] hsr_slave_1: entered promiscuous mode [ 560.925110][T13605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.932716][T13605] Cannot create hsr debugfs directory [ 561.645468][ T51] Bluetooth: hci2: command tx timeout [ 562.366450][T13656] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 562.749964][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 1854 [ 563.188919][T13605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.254360][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.261195][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.129039][T13688] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 566.216228][T12438] wlan1: Trigger new scan to find an IBSS to join [ 566.252861][T13691] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2575'. [ 566.270301][T13691] openvswitch: netlink: Message has 20476 unknown bytes. [ 566.319143][T13605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.434009][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 566.471588][T13605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.594613][T13605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.187217][T13605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 567.384458][T13605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 567.432152][T13605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 568.205789][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 570.552236][T13605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 570.669004][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 570.924770][T13734] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.970327][T13730] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 571.061333][T13605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.257247][ T12] wlan1: Trigger new scan to find an IBSS to join [ 571.340686][T13605] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.378257][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.385462][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.487016][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.494185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.166438][T12416] wlan1: Trigger new scan to find an IBSS to join [ 574.743611][ T12] wlan1: Creating new IBSS network, BSSID ee:b2:ed:8c:c6:25 [ 574.887918][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 1854 [ 575.277143][T12425] hsr_slave_0: left promiscuous mode [ 575.334129][T12425] hsr_slave_1: left promiscuous mode [ 575.361477][T12425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.384371][T12425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.406198][T12425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.433539][T12425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.514725][T12425] bridge_slave_1: left allmulticast mode [ 575.521070][T12425] bridge_slave_1: left promiscuous mode [ 575.527758][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.556087][T12425] bridge_slave_0: left allmulticast mode [ 575.561777][T12425] bridge_slave_0: left promiscuous mode [ 575.585409][T12425] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.626244][T12425] veth1_macvtap: left promiscuous mode [ 575.632905][T12425] veth0_macvtap: left promiscuous mode [ 575.638603][T12425] veth1_vlan: left promiscuous mode [ 575.645214][T12425] veth0_vlan: left promiscuous mode [ 576.310535][T12425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.362114][T12425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.649828][T12425] bond0 (unregistering): Released all slaves [ 576.752840][T13784] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 576.826231][T13605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.938051][T13605] veth0_vlan: entered promiscuous mode [ 576.971750][T13605] veth1_vlan: entered promiscuous mode [ 577.140432][T13605] veth0_macvtap: entered promiscuous mode [ 577.167877][T11980] wlan1: Trigger new scan to find an IBSS to join [ 577.191659][T13605] veth1_macvtap: entered promiscuous mode [ 577.303227][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.355102][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.385613][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.415294][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.448729][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.495367][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.525049][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.545055][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.563983][T13605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.592164][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.614735][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.632001][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.642887][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.662670][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.681989][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.693200][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.710282][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.731706][T13605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.934590][T13605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.023657][T13605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.067553][T13605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.104021][T13605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.169131][T12434] wlan1: Trigger new scan to find an IBSS to join [ 580.475870][ T12] wlan1: Creating new IBSS network, BSSID a6:5a:74:e9:44:40 [ 581.283493][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.297740][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 581.321387][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.389438][T13816] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2611'. [ 581.424575][T12434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.446920][T12434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.068000][T13848] netlink: 'syz.0.2621': attribute type 10 has an invalid length. [ 583.173366][T13848] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2621'. [ 583.245412][ T1027] wlan1: Trigger new scan to find an IBSS to join [ 583.254246][T13848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 584.042788][T13876] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2628'. [ 584.298982][T12425] wlan1: Creating new IBSS network, BSSID b6:79:ca:ab:2e:c3 [ 584.373806][T13881] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2632'. [ 584.388492][T13881] openvswitch: netlink: Message has 20476 unknown bytes. [ 584.415364][T13886] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2634'. [ 585.330883][T13911] macvlan1: entered allmulticast mode [ 585.644560][T13916] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2644'. [ 585.755556][T13916] openvswitch: netlink: Message has 20476 unknown bytes. [ 586.224367][T13930] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2647'. [ 587.337781][T13959] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2659'. [ 588.317805][T13979] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2664'. [ 588.664346][T13986] netlink: 'syz.2.2666': attribute type 10 has an invalid length. [ 589.852228][T14011] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2677'. [ 590.089193][T14021] netlink: 'syz.0.2680': attribute type 10 has an invalid length. [ 590.338910][T14029] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2678'. [ 591.553050][T14048] C: renamed from team_slave_0 (while UP) [ 591.569116][T14048] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 591.582603][T14048] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2687'. [ 591.611908][T14048] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 592.178778][T14067] netlink: 'syz.1.2694': attribute type 10 has an invalid length. [ 592.403456][T14075] netlink: 'syz.3.2697': attribute type 3 has an invalid length. [ 592.411652][T14075] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2697'. [ 592.491059][T14076] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2695'. [ 593.917763][T14104] netlink: 'syz.2.2704': attribute type 10 has an invalid length. [ 593.997326][T14104] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2704'. [ 594.021815][T14104] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 594.626822][T14112] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 594.634661][T14112] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 594.736468][T14112] netlink: 'syz.3.2708': attribute type 10 has an invalid length. [ 595.224114][T14112] team0: Port device dummy0 added [ 596.761608][T14151] netlink: 'syz.1.2719': attribute type 10 has an invalid length. [ 596.881081][T14151] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2719'. [ 596.965578][T14151] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 598.504533][T14184] netlink: 'syz.1.2732': attribute type 10 has an invalid length. [ 598.721611][T14189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2734'. [ 598.762429][T14189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2734'. [ 598.824424][T14187] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 598.842003][T14191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2734'. [ 598.920360][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 598.930828][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 598.941134][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 598.950652][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 598.960036][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 598.969995][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 598.979601][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 598.989707][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 598.999779][T14193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 599.887999][T14211] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2747'. [ 599.919467][T14211] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2747'. [ 599.972961][T14217] netlink: 'syz.0.2742': attribute type 10 has an invalid length. [ 600.630268][T14225] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 601.582917][T14247] FAULT_INJECTION: forcing a failure. [ 601.582917][T14247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.608452][T14247] CPU: 0 PID: 14247 Comm: syz.3.2753 Not tainted syzkaller #0 [ 601.615958][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.626031][T14247] Call Trace: [ 601.629306][T14247] [ 601.632227][T14247] dump_stack_lvl+0x18c/0x250 [ 601.636908][T14247] ? show_regs_print_info+0x20/0x20 [ 601.642100][T14247] ? load_image+0x400/0x400 [ 601.646603][T14247] ? __might_fault+0xaa/0x120 [ 601.651273][T14247] ? __lock_acquire+0x7d40/0x7d40 [ 601.656297][T14247] should_fail_ex+0x39d/0x4d0 [ 601.660977][T14247] _copy_from_user+0x2f/0xe0 [ 601.665562][T14247] csum_and_copy_from_iter+0x662/0x14a0 [ 601.671114][T14247] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 601.676752][T14247] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 601.682725][T14247] ? lock_chain_count+0x20/0x20 [ 601.687570][T14247] ip_generic_getfrag+0x163/0x2f0 [ 601.692585][T14247] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 601.697426][T14247] ? skb_put+0x11b/0x210 [ 601.701664][T14247] __ip_append_data+0x2f11/0x3d40 [ 601.706696][T14247] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 601.711543][T14247] ? ip_setup_cork+0x860/0x860 [ 601.716305][T14247] ip_append_data+0x10d/0x180 [ 601.720976][T14247] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 601.725818][T14247] udp_sendmsg+0x5d0/0x23b0 [ 601.730324][T14247] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 601.735178][T14247] ? udp_cmsg_send+0x350/0x350 [ 601.739954][T14247] ? __lock_acquire+0x1273/0x7d40 [ 601.745009][T14247] ? aa_sk_perm+0x83c/0x970 [ 601.749550][T14247] ? aa_af_perm+0x330/0x330 [ 601.754074][T14247] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 601.760504][T14247] ? sock_rps_record_flow+0x19/0x3f0 [ 601.765820][T14247] ? inet_sendmsg+0x7c/0x2f0 [ 601.770416][T14247] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 601.775700][T14247] ? security_socket_sendmsg+0x80/0xa0 [ 601.781162][T14247] ? inet_send_prepare+0x260/0x260 [ 601.786270][T14247] ____sys_sendmsg+0x5ba/0x960 [ 601.791038][T14247] ? __asan_memset+0x22/0x40 [ 601.795630][T14247] ? __sys_sendmsg_sock+0x30/0x30 [ 601.800652][T14247] ? __import_iovec+0x3fa/0x850 [ 601.805507][T14247] ? import_iovec+0x73/0xa0 [ 601.810000][T14247] ___sys_sendmsg+0x2a6/0x360 [ 601.814666][T14247] ? get_pid_task+0x20/0x1e0 [ 601.819279][T14247] ? __sys_sendmsg+0x2a0/0x2a0 [ 601.824051][T14247] ? __lock_acquire+0x7d40/0x7d40 [ 601.829086][T14247] __se_sys_sendmsg+0x1c2/0x2b0 [ 601.833930][T14247] ? __x64_sys_sendmsg+0x80/0x80 [ 601.838871][T14247] ? lockdep_hardirqs_on+0x98/0x150 [ 601.844071][T14247] do_syscall_64+0x55/0xa0 [ 601.848481][T14247] ? clear_bhb_loop+0x40/0x90 [ 601.853148][T14247] ? clear_bhb_loop+0x40/0x90 [ 601.857818][T14247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.863706][T14247] RIP: 0033:0x7f4955b9c799 [ 601.868114][T14247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.887715][T14247] RSP: 002b:00007f4956b4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.896123][T14247] RAX: ffffffffffffffda RBX: 00007f4955e15fa0 RCX: 00007f4955b9c799 [ 601.904082][T14247] RDX: 00000000040e4804 RSI: 0000200000000300 RDI: 0000000000000005 [ 601.912043][T14247] RBP: 00007f4956b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 601.920005][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.927963][T14247] R13: 00007f4955e16038 R14: 00007f4955e15fa0 R15: 00007ffff8335758 [ 601.935935][T14247] [ 602.329590][T14251] netlink: 'syz.3.2754': attribute type 10 has an invalid length. [ 602.829696][T14257] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 603.167029][ T1027] wlan1: Trigger new scan to find an IBSS to join [ 603.343892][T14274] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2762'. [ 603.392115][T14274] net_ratelimit: 3320 callbacks suppressed [ 603.392149][T14274] openvswitch: netlink: Message has 20476 unknown bytes. [ 603.952291][T14290] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2767'. [ 604.018470][T14286] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.671740][T14305] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.735652][T14308] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2774'. [ 604.755160][T14308] openvswitch: netlink: Message has 20476 unknown bytes. [ 605.125417][T14322] €Â0: renamed from batadv_slave_1 (while UP) [ 605.256760][ T1027] wlan1: Trigger new scan to find an IBSS to join [ 605.690032][T14330] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 606.070312][T14338] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 606.207484][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 606.243855][T14343] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2786'. [ 606.265157][T14343] openvswitch: netlink: Message has 20476 unknown bytes. [ 606.439124][T14351] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2790'. [ 607.265168][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 607.390074][T14368] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2796'. [ 607.400066][T14368] openvswitch: netlink: Message has 20476 unknown bytes. [ 608.205255][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 608.212142][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 609.632387][T14372] netlink: 'syz.1.2798': attribute type 10 has an invalid length. [ 609.649590][T14375] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 610.074183][T14385] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 610.370764][T14393] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2802'. [ 610.624725][T14392] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2803'. [ 610.659602][T14399] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2805'. [ 610.688823][T14399] openvswitch: netlink: Message has 20476 unknown bytes. [ 612.205263][T11980] wlan1: Trigger new scan to find an IBSS to join [ 612.211843][T11980] wlan1: Trigger new scan to find an IBSS to join [ 612.218720][T12425] wlan1: Trigger new scan to find an IBSS to join [ 612.227941][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 613.804922][T11980] wlan1: Creating new IBSS network, BSSID de:00:16:8b:47:84 [ 613.808922][ T1122] wlan1: Creating new IBSS network, BSSID fa:bb:4b:e1:fa:68 [ 613.827487][ T1075] wlan1: Creating new IBSS network, BSSID 66:4a:23:af:c4:02 [ 613.835506][T14407] netlink: 'syz.2.2809': attribute type 10 has an invalid length. [ 614.302411][T14414] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 614.447370][T14419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.213218][T14424] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2815'. [ 615.250751][T14424] openvswitch: netlink: Message has 20476 unknown bytes. [ 615.364460][T14426] netlink: 'syz.0.2816': attribute type 10 has an invalid length. [ 615.609863][T14431] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2817'. [ 615.676960][T14433] netlink: 'syz.1.2819': attribute type 10 has an invalid length. [ 616.100049][T14442] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 616.159596][T14446] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2825'. [ 616.204748][T14446] openvswitch: netlink: Message has 20476 unknown bytes. [ 616.603174][T14461] netlink: 'syz.3.2830': attribute type 10 has an invalid length. [ 616.869584][T14462] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2831'. [ 616.912753][T14471] FAULT_INJECTION: forcing a failure. [ 616.912753][T14471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.048816][T14471] CPU: 1 PID: 14471 Comm: syz.2.2834 Not tainted syzkaller #0 [ 617.056361][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.066472][T14471] Call Trace: [ 617.069784][T14471] [ 617.072746][T14471] dump_stack_lvl+0x18c/0x250 [ 617.077482][T14471] ? show_regs_print_info+0x20/0x20 [ 617.082721][T14471] ? load_image+0x400/0x400 [ 617.087271][T14471] ? __might_fault+0xaa/0x120 [ 617.091984][T14471] ? __lock_acquire+0x7d40/0x7d40 [ 617.097065][T14471] should_fail_ex+0x39d/0x4d0 [ 617.101795][T14471] _copy_from_user+0x2f/0xe0 [ 617.106428][T14471] ___sys_sendmsg+0x1c7/0x360 [ 617.111139][T14471] ? get_pid_task+0x20/0x1e0 [ 617.115780][T14471] ? __sys_sendmsg+0x2a0/0x2a0 [ 617.120646][T14471] ? __lock_acquire+0x7d40/0x7d40 [ 617.125783][T14471] __se_sys_sendmsg+0x1c2/0x2b0 [ 617.130678][T14471] ? __x64_sys_sendmsg+0x80/0x80 [ 617.135698][T14471] ? lockdep_hardirqs_on+0x98/0x150 [ 617.140943][T14471] do_syscall_64+0x55/0xa0 [ 617.145397][T14471] ? clear_bhb_loop+0x40/0x90 [ 617.150104][T14471] ? clear_bhb_loop+0x40/0x90 [ 617.154819][T14471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.160744][T14471] RIP: 0033:0x7ff11419c799 [ 617.165195][T14471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.184833][T14471] RSP: 002b:00007ff1150f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.193409][T14471] RAX: ffffffffffffffda RBX: 00007ff114415fa0 RCX: 00007ff11419c799 [ 617.201430][T14471] RDX: 0000000004040000 RSI: 0000200000004440 RDI: 0000000000000009 [ 617.209455][T14471] RBP: 00007ff1150f5090 R08: 0000000000000000 R09: 0000000000000000 [ 617.217479][T14471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.225490][T14471] R13: 00007ff114416038 R14: 00007ff114415fa0 R15: 00007fffb09847f8 [ 617.233556][T14471] [ 617.635673][T14476] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 617.686518][T14479] delete_channel: no stack [ 618.096220][T14486] netlink: 'syz.3.2840': attribute type 10 has an invalid length. [ 618.216523][T12416] wlan1: Trigger new scan to find an IBSS to join [ 619.459843][T14514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2849'. [ 619.496364][T14514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2849'. [ 619.532452][T14510] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2848'. [ 619.566465][T14515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2849'. [ 619.598777][T14514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2849'. [ 619.720614][T14521] netlink: 'syz.3.2851': attribute type 10 has an invalid length. [ 619.795716][T14517] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 619.868439][T14525] sock: sock_timestamping_bind_phc: sock not bind to device [ 620.054439][T14528] FAULT_INJECTION: forcing a failure. [ 620.054439][T14528] name failslab, interval 1, probability 0, space 0, times 0 [ 620.082486][T14528] CPU: 0 PID: 14528 Comm: syz.1.2854 Not tainted syzkaller #0 [ 620.089985][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.100044][T14528] Call Trace: [ 620.103322][T14528] [ 620.106254][T14528] dump_stack_lvl+0x18c/0x250 [ 620.110942][T14528] ? show_regs_print_info+0x20/0x20 [ 620.116144][T14528] ? load_image+0x400/0x400 [ 620.120644][T14528] ? __might_sleep+0xe0/0xe0 [ 620.125228][T14528] ? __lock_acquire+0x7d40/0x7d40 [ 620.130256][T14528] should_fail_ex+0x39d/0x4d0 [ 620.134940][T14528] should_failslab+0x9/0x20 [ 620.139447][T14528] slab_pre_alloc_hook+0x59/0x310 [ 620.144472][T14528] kmem_cache_alloc+0x5a/0x2d0 [ 620.149233][T14528] ? radix_tree_node_alloc+0x7e/0x3a0 [ 620.154603][T14528] radix_tree_node_alloc+0x7e/0x3a0 [ 620.159801][T14528] idr_get_free+0x2b3/0xa60 [ 620.164306][T14528] idr_alloc+0x1ac/0x2f0 [ 620.168548][T14528] ? idr_alloc_u32+0x320/0x320 [ 620.173308][T14528] ? net_generic+0x1e/0x240 [ 620.177805][T14528] ? net_generic+0x1e/0x240 [ 620.182302][T14528] ? radix_tree_lookup+0x267/0x280 [ 620.187408][T14528] ppp_dev_configure+0x777/0xad0 [ 620.192349][T14528] ppp_ioctl+0x6e2/0x1a90 [ 620.196679][T14528] ? ppp_poll+0x250/0x250 [ 620.201024][T14528] ? __fget_files+0x28/0x4b0 [ 620.205641][T14528] ? bpf_lsm_file_ioctl+0x9/0x10 [ 620.210578][T14528] ? security_file_ioctl+0x80/0xa0 [ 620.215692][T14528] ? ppp_poll+0x250/0x250 [ 620.220028][T14528] __se_sys_ioctl+0xfd/0x170 [ 620.224637][T14528] do_syscall_64+0x55/0xa0 [ 620.229055][T14528] ? clear_bhb_loop+0x40/0x90 [ 620.233734][T14528] ? clear_bhb_loop+0x40/0x90 [ 620.238419][T14528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.244323][T14528] RIP: 0033:0x7f279ab9c799 [ 620.248736][T14528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.268335][T14528] RSP: 002b:00007f279bafa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.276744][T14528] RAX: ffffffffffffffda RBX: 00007f279ae15fa0 RCX: 00007f279ab9c799 [ 620.284707][T14528] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000003 [ 620.292670][T14528] RBP: 00007f279bafa090 R08: 0000000000000000 R09: 0000000000000000 [ 620.300637][T14528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.308602][T14528] R13: 00007f279ae16038 R14: 00007f279ae15fa0 R15: 00007fffe5be2198 [ 620.316578][T14528] [ 620.607601][T14537] netlink: 'syz.0.2856': attribute type 3 has an invalid length. [ 620.617446][T14537] netlink: 'syz.0.2856': attribute type 1 has an invalid length. [ 620.630814][T14537] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2856'. [ 621.210055][T14552] netlink: 'syz.1.2861': attribute type 21 has an invalid length. [ 621.246480][T12434] wlan1: Trigger new scan to find an IBSS to join [ 621.481103][T14559] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 621.649993][ T12] hsr_slave_0: left promiscuous mode [ 621.669741][ T12] hsr_slave_1: left promiscuous mode [ 621.680913][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.699808][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.716188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.733126][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.752920][ T12] bridge_slave_1: left allmulticast mode [ 621.771975][ T12] bridge_slave_1: left promiscuous mode [ 621.795084][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.814595][ T12] bridge_slave_0: left promiscuous mode [ 621.825237][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.885548][ T12] veth1_macvtap: left promiscuous mode [ 621.894468][ T12] veth0_macvtap: left promiscuous mode [ 621.904125][ T12] veth1_vlan: left promiscuous mode [ 621.919340][ T12] veth0_vlan: left promiscuous mode [ 622.019270][T14569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.187015][ T1122] wlan1: Creating new IBSS network, BSSID da:da:6a:08:24:8b [ 622.944773][ T12] team0 (unregistering): Port device team_slave_1 removed [ 622.992077][ T12] team0 (unregistering): Port device team_slave_0 removed [ 623.031195][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.077171][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.384740][ T12] team0 (unregistering): Port device dummy0 removed [ 623.439575][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 623.449120][ T12] bond0 (unregistering): Released all slaves [ 623.548267][T14564] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 623.557977][T14567] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 624.068512][T14593] FAULT_INJECTION: forcing a failure. [ 624.068512][T14593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.090872][T14593] CPU: 0 PID: 14593 Comm: syz.0.2875 Not tainted syzkaller #0 [ 624.098378][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.108448][T14593] Call Trace: [ 624.111741][T14593] [ 624.114680][T14593] dump_stack_lvl+0x18c/0x250 [ 624.119383][T14593] ? show_regs_print_info+0x20/0x20 [ 624.124597][T14593] ? load_image+0x400/0x400 [ 624.129125][T14593] ? __might_fault+0xaa/0x120 [ 624.133825][T14593] ? __lock_acquire+0x7d40/0x7d40 [ 624.138879][T14593] should_fail_ex+0x39d/0x4d0 [ 624.143586][T14593] _copy_from_iter+0x1d9/0x12e0 [ 624.148461][T14593] ? slab_post_alloc_hook+0x8a/0x4b0 [ 624.153769][T14593] ? __virt_addr_valid+0x18c/0x540 [ 624.158910][T14593] ? __lock_acquire+0x7d40/0x7d40 [ 624.163942][T14593] ? rcu_is_watching+0x15/0xb0 [ 624.168716][T14593] ? copyout_mc+0x70/0x70 [ 624.173062][T14593] ? __virt_addr_valid+0x18c/0x540 [ 624.178177][T14593] ? __virt_addr_valid+0x18c/0x540 [ 624.183300][T14593] ? __virt_addr_valid+0x469/0x540 [ 624.188402][T14593] ? __check_object_size+0x506/0xa20 [ 624.193688][T14593] netlink_sendmsg+0x76b/0xbf0 [ 624.198469][T14593] ? netlink_getsockopt+0x590/0x590 [ 624.203675][T14593] ? aa_sock_msg_perm+0x94/0x150 [ 624.208616][T14593] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 624.213906][T14593] ? security_socket_sendmsg+0x80/0xa0 [ 624.219362][T14593] ? netlink_getsockopt+0x590/0x590 [ 624.224571][T14593] ____sys_sendmsg+0x5ba/0x960 [ 624.229351][T14593] ? __asan_memset+0x22/0x40 [ 624.233947][T14593] ? __sys_sendmsg_sock+0x30/0x30 [ 624.238967][T14593] ? __import_iovec+0x5f2/0x850 [ 624.243833][T14593] ? import_iovec+0x73/0xa0 [ 624.248334][T14593] ___sys_sendmsg+0x2a6/0x360 [ 624.253006][T14593] ? get_pid_task+0x20/0x1e0 [ 624.257605][T14593] ? __sys_sendmsg+0x2a0/0x2a0 [ 624.262374][T14593] ? __lock_acquire+0x7d40/0x7d40 [ 624.267418][T14593] __se_sys_sendmsg+0x1c2/0x2b0 [ 624.272272][T14593] ? __x64_sys_sendmsg+0x80/0x80 [ 624.277215][T14593] ? lockdep_hardirqs_on+0x98/0x150 [ 624.282417][T14593] do_syscall_64+0x55/0xa0 [ 624.286830][T14593] ? clear_bhb_loop+0x40/0x90 [ 624.291498][T14593] ? clear_bhb_loop+0x40/0x90 [ 624.296171][T14593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.302059][T14593] RIP: 0033:0x7fcd0e19c799 [ 624.306465][T14593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.326066][T14593] RSP: 002b:00007fcd0ef9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.334470][T14593] RAX: ffffffffffffffda RBX: 00007fcd0e415fa0 RCX: 00007fcd0e19c799 [ 624.342433][T14593] RDX: 0000000004000004 RSI: 0000200000000300 RDI: 0000000000000003 [ 624.350393][T14593] RBP: 00007fcd0ef9b090 R08: 0000000000000000 R09: 0000000000000000 [ 624.358355][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.366315][T14593] R13: 00007fcd0e416038 R14: 00007fcd0e415fa0 R15: 00007ffd686d5ae8 [ 624.374288][T14593] [ 624.708759][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.725131][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.760541][T14606] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2877'. [ 624.966364][T14608] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 625.222427][T14614] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 625.338787][T14617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.507197][T14616] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 626.047898][T14636] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2887'. [ 626.216159][T12425] wlan1: Trigger new scan to find an IBSS to join [ 626.757664][T14653] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 626.966064][T14659] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2893'. [ 627.688647][T14667] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2905'. [ 627.755385][T14667] openvswitch: netlink: Message has 20476 unknown bytes. [ 627.798186][T14663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.043872][T14672] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 628.483459][T14685] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2904'. [ 629.192714][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 629.199945][T12416] wlan1: Trigger new scan to find an IBSS to join [ 629.515284][T14700] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2911'. [ 629.524754][T14700] openvswitch: netlink: Message has 20476 unknown bytes. [ 630.235138][ T12] wlan1: Trigger new scan to find an IBSS to join [ 630.241702][ T12] wlan1: Trigger new scan to find an IBSS to join [ 630.295083][T14719] netlink: 'syz.2.2918': attribute type 3 has an invalid length. [ 630.309839][T14720] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 630.327932][T14719] netlink: 'syz.2.2918': attribute type 1 has an invalid length. [ 630.327952][T14719] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2918'. [ 630.362638][T14726] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2921'. [ 630.383424][T14726] openvswitch: netlink: Message has 20476 unknown bytes. [ 630.701892][T14730] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 630.909860][T14739] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2925'. [ 631.053024][T14741] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2926'. [ 631.366640][T14752] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2930'. [ 631.382116][T14752] openvswitch: netlink: Message has 20476 unknown bytes. [ 631.625612][T14759] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 631.858533][T14765] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 631.911174][T14775] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2941'. [ 631.933596][T14775] openvswitch: netlink: Message has 20476 unknown bytes. [ 632.350402][T14784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.788148][T14792] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 633.174495][T12425] wlan1: Trigger new scan to find an IBSS to join [ 633.373323][T14805] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 633.706681][T14814] FAULT_INJECTION: forcing a failure. [ 633.706681][T14814] name failslab, interval 1, probability 0, space 0, times 0 [ 633.777566][T14818] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2958'. [ 633.787194][T14814] CPU: 1 PID: 14814 Comm: syz.2.2956 Not tainted syzkaller #0 [ 633.794885][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.804963][T14814] Call Trace: [ 633.808259][T14814] [ 633.811202][T14814] dump_stack_lvl+0x18c/0x250 [ 633.815909][T14814] ? show_regs_print_info+0x20/0x20 [ 633.821137][T14814] ? load_image+0x400/0x400 [ 633.825666][T14814] ? _printk+0xa/0x130 [ 633.829753][T14814] should_fail_ex+0x39d/0x4d0 [ 633.834461][T14814] should_failslab+0x9/0x20 [ 633.838987][T14814] slab_pre_alloc_hook+0x59/0x310 [ 633.844041][T14814] ? bpf_test_init+0x9f/0x140 [ 633.848734][T14814] ? bpf_test_init+0x9f/0x140 [ 633.853443][T14814] __kmem_cache_alloc_node+0x53/0x250 [ 633.858843][T14814] ? bpf_test_init+0x9f/0x140 [ 633.863537][T14814] __kmalloc+0xa4/0x230 [ 633.867720][T14814] bpf_test_init+0x9f/0x140 [ 633.872282][T14814] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 633.877686][T14814] ? dev_put+0x80/0x80 [ 633.881782][T14814] ? dev_put+0x80/0x80 [ 633.885876][T14814] bpf_prog_test_run+0x321/0x390 [ 633.890836][T14814] __sys_bpf+0x49d/0x890 [ 633.895100][T14814] ? bpf_link_show_fdinfo+0x390/0x390 [ 633.900504][T14814] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 633.906690][T14814] __x64_sys_bpf+0x7c/0x90 [ 633.911127][T14814] do_syscall_64+0x55/0xa0 [ 633.915564][T14814] ? clear_bhb_loop+0x40/0x90 [ 633.920264][T14814] ? clear_bhb_loop+0x40/0x90 [ 633.924968][T14814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.930876][T14814] RIP: 0033:0x7ff11419c799 [ 633.935299][T14814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.954913][T14814] RSP: 002b:00007ff1150f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.963346][T14814] RAX: ffffffffffffffda RBX: 00007ff114415fa0 RCX: 00007ff11419c799 [ 633.971319][T14814] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 633.979282][T14814] RBP: 00007ff1150f5090 R08: 0000000000000000 R09: 0000000000000000 [ 633.987248][T14814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.995220][T14814] R13: 00007ff114416038 R14: 00007ff114415fa0 R15: 00007fffb09847f8 [ 634.003296][T14814] [ 634.144064][T14823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.205469][T12425] wlan1: Trigger new scan to find an IBSS to join [ 635.245400][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 636.207374][T11980] wlan1: Trigger new scan to find an IBSS to join [ 637.206949][T14835] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 637.844520][T14859] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2973'. [ 638.087645][T14863] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2972'. [ 639.245575][T12434] wlan1: Trigger new scan to find an IBSS to join [ 639.252800][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 639.259797][ T12] wlan1: Trigger new scan to find an IBSS to join [ 641.165262][T11980] wlan1: Trigger new scan to find an IBSS to join [ 641.602613][ T1075] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 641.611657][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 641.619752][T12416] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 641.986605][T14880] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 642.125061][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 642.407300][T14896] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2984'. [ 644.205102][T11980] wlan1: Trigger new scan to find an IBSS to join [ 644.211680][T12434] wlan1: Trigger new scan to find an IBSS to join [ 645.457379][ T1027] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 645.799911][T14912] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 646.146738][T14929] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2996'. [ 646.617161][T14943] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3000'. [ 648.206755][ T12] wlan1: Trigger new scan to find an IBSS to join [ 648.218667][ T12] wlan1: Trigger new scan to find an IBSS to join [ 649.853604][ T1027] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 651.284332][T14983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3013'. [ 651.295089][T14983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3013'. [ 651.312407][T14984] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3010'. [ 651.366797][T14985] netlink: 'syz.3.3014': attribute type 11 has an invalid length. [ 651.386347][T14985] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.3014'. [ 651.694137][T14994] netlink: 'syz.0.3018': attribute type 19 has an invalid length. [ 652.044186][T15001] netlink: 'syz.0.3020': attribute type 19 has an invalid length. [ 652.214791][ T12] wlan1: Trigger new scan to find an IBSS to join [ 652.266059][T15011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3025'. [ 652.280700][T15011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3025'. [ 652.366589][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 652.911859][T15017] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3027'. [ 654.205228][T12434] wlan1: Trigger new scan to find an IBSS to join [ 655.087986][T11980] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 655.908756][T15043] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3032'. [ 656.010296][T15040] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 656.059776][T15044] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 656.297814][T15047] FAULT_INJECTION: forcing a failure. [ 656.297814][T15047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.311684][T15047] CPU: 0 PID: 15047 Comm: syz.2.3036 Not tainted syzkaller #0 [ 656.319193][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.329367][T15047] Call Trace: [ 656.332666][T15047] [ 656.335615][T15047] dump_stack_lvl+0x18c/0x250 [ 656.340326][T15047] ? show_regs_print_info+0x20/0x20 [ 656.345546][T15047] ? load_image+0x400/0x400 [ 656.350071][T15047] ? __might_fault+0xaa/0x120 [ 656.354762][T15047] ? __lock_acquire+0x7d40/0x7d40 [ 656.359811][T15047] should_fail_ex+0x39d/0x4d0 [ 656.364514][T15047] _copy_to_user+0x2f/0xa0 [ 656.368950][T15047] bpf_test_finish+0x19f/0x650 [ 656.373741][T15047] ? convert___skb_to_skb+0x590/0x590 [ 656.379125][T15047] ? convert_skb_to___skb+0x420/0x420 [ 656.384502][T15047] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 656.390045][T15047] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 656.395427][T15047] ? cpu_online+0x60/0x60 [ 656.399749][T15047] bpf_prog_test_run+0x321/0x390 [ 656.404680][T15047] __sys_bpf+0x49d/0x890 [ 656.408915][T15047] ? bpf_link_show_fdinfo+0x390/0x390 [ 656.414293][T15047] ? lock_chain_count+0x20/0x20 [ 656.419144][T15047] __x64_sys_bpf+0x7c/0x90 [ 656.423559][T15047] do_syscall_64+0x55/0xa0 [ 656.427973][T15047] ? clear_bhb_loop+0x40/0x90 [ 656.432642][T15047] ? clear_bhb_loop+0x40/0x90 [ 656.437312][T15047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.443199][T15047] RIP: 0033:0x7ff11419c799 [ 656.447605][T15047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.467204][T15047] RSP: 002b:00007ff1150f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.475612][T15047] RAX: ffffffffffffffda RBX: 00007ff114415fa0 RCX: 00007ff11419c799 [ 656.483573][T15047] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 656.491534][T15047] RBP: 00007ff1150f5090 R08: 0000000000000000 R09: 0000000000000000 [ 656.499493][T15047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.507453][T15047] R13: 00007ff114416038 R14: 00007ff114415fa0 R15: 00007fffb09847f8 [ 656.515434][T15047] [ 656.562476][T15049] netlink: 'syz.0.3037': attribute type 9 has an invalid length. [ 656.579502][T15054] netlink: 'syz.0.3037': attribute type 2 has an invalid length. [ 656.595209][T15049] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3037'. [ 656.604983][T15054] netlink: 'syz.0.3037': attribute type 8 has an invalid length. [ 656.614863][T15054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3037'. [ 658.205502][ T1027] wlan1: Trigger new scan to find an IBSS to join [ 658.212076][ T12] wlan1: Trigger new scan to find an IBSS to join [ 660.195761][T15073] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 660.940213][T15096] netlink: 'syz.2.3055': attribute type 9 has an invalid length. [ 660.970123][T15096] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3055'. [ 661.016288][T15101] netlink: 'syz.2.3055': attribute type 2 has an invalid length. [ 661.079455][T15101] netlink: 'syz.2.3055': attribute type 8 has an invalid length. [ 661.088526][T15101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3055'. [ 662.205326][T12438] wlan1: Trigger new scan to find an IBSS to join [ 662.212895][T12434] wlan1: Trigger new scan to find an IBSS to join [ 662.605208][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 663.887068][T12425] wlan1: Creating new IBSS network, BSSID 26:e2:51:0a:10:43 [ 664.111828][T15112] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 664.351349][T15124] FAULT_INJECTION: forcing a failure. [ 664.351349][T15124] name failslab, interval 1, probability 0, space 0, times 0 [ 664.385177][T15124] CPU: 0 PID: 15124 Comm: syz.2.3064 Not tainted syzkaller #0 [ 664.392703][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 664.402783][T15124] Call Trace: [ 664.406284][T15124] [ 664.409252][T15124] dump_stack_lvl+0x18c/0x250 [ 664.413968][T15124] ? show_regs_print_info+0x20/0x20 [ 664.419202][T15124] ? load_image+0x400/0x400 [ 664.423739][T15124] ? __might_sleep+0xe0/0xe0 [ 664.428354][T15124] ? __lock_acquire+0x7d40/0x7d40 [ 664.433380][T15124] should_fail_ex+0x39d/0x4d0 [ 664.438057][T15124] should_failslab+0x9/0x20 [ 664.442556][T15124] slab_pre_alloc_hook+0x59/0x310 [ 664.447582][T15124] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 664.453309][T15124] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 664.459022][T15124] __kmem_cache_alloc_node+0x53/0x250 [ 664.464404][T15124] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 664.470117][T15124] __kmalloc+0xa4/0x230 [ 664.474279][T15124] tomoyo_realpath_from_path+0xe3/0x5d0 [ 664.479837][T15124] tomoyo_path_number_perm+0x248/0x620 [ 664.485297][T15124] ? tomoyo_path_number_perm+0x217/0x620 [ 664.490966][T15124] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 664.496455][T15124] ? ksys_write+0x1c4/0x260 [ 664.500990][T15124] ? __fget_files+0x28/0x4b0 [ 664.505589][T15124] ? __fget_files+0x28/0x4b0 [ 664.510200][T15124] security_file_ioctl+0x70/0xa0 [ 664.515152][T15124] __se_sys_ioctl+0x48/0x170 [ 664.519740][T15124] do_syscall_64+0x55/0xa0 [ 664.524156][T15124] ? clear_bhb_loop+0x40/0x90 [ 664.528834][T15124] ? clear_bhb_loop+0x40/0x90 [ 664.533598][T15124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.539495][T15124] RIP: 0033:0x7ff11419c799 [ 664.544005][T15124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.563626][T15124] RSP: 002b:00007ff1150f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.572413][T15124] RAX: ffffffffffffffda RBX: 00007ff114415fa0 RCX: 00007ff11419c799 [ 664.580389][T15124] RDX: 00f0ff1f00000000 RSI: 000000004004743c RDI: 0000000000000004 [ 664.588381][T15124] RBP: 00007ff1150f5090 R08: 0000000000000000 R09: 0000000000000000 [ 664.596364][T15124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.604360][T15124] R13: 00007ff114416038 R14: 00007ff114415fa0 R15: 00007fffb09847f8 [ 664.612438][T15124] [ 664.626851][T15127] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 664.638300][T15124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.679585][T15124] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3064'. [ 664.702732][T15133] netlink: 'syz.1.3067': attribute type 10 has an invalid length. [ 664.711035][T15133] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3067'. [ 664.723537][T15129] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3066'. [ 665.226932][T15139] netlink: 'syz.1.3070': attribute type 9 has an invalid length. [ 665.277218][T15139] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3070'. [ 667.175269][T12438] wlan1: Trigger new scan to find an IBSS to join [ 667.789060][T15143] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.827522][T15144] netlink: 'syz.1.3070': attribute type 2 has an invalid length. [ 667.855023][T15144] netlink: 'syz.1.3070': attribute type 8 has an invalid length. [ 667.885135][T15144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3070'. [ 668.360595][T15166] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 668.567232][T15175] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 670.041341][T15188] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3085'. [ 670.205034][T11980] wlan1: Trigger new scan to find an IBSS to join [ 671.804037][T15179] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 671.817325][ T1122] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 672.210681][T12438] wlan1: Trigger new scan to find an IBSS to join [ 672.261485][T15202] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 673.204055][T15208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.092695][T15248] netlink: 'syz.3.3106': attribute type 10 has an invalid length. [ 677.172759][T15254] netlink: 'syz.3.3106': attribute type 10 has an invalid length. [ 677.185104][T15254] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3106'. [ 677.698455][T15261] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 677.992711][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 678.218533][T12416] wlan1: Trigger new scan to find an IBSS to join [ 678.995412][T15262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.251481][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 680.491702][ T1075] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 681.759803][T15282] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3117'. [ 682.000968][T15287] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3118'. [ 683.165429][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 683.342977][T15301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.192064][ T1075] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 685.204670][T15296] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 685.423596][T15308] netlink: 'syz.2.3124': attribute type 10 has an invalid length. [ 685.493096][T15308] team0: Port device dummy0 added [ 685.511261][T15315] netlink: 'syz.2.3124': attribute type 10 has an invalid length. [ 685.523764][T15315] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3124'. [ 686.092440][T15327] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3130'. [ 686.130597][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.138703][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.402732][T15333] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3132'. [ 689.102688][T15337] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 689.165281][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 689.630477][T15352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.924848][T15369] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3145'. [ 690.100398][T15370] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 691.165061][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 692.205240][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 693.065510][T11980] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 693.540352][T15386] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 693.890299][T15391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.057489][T15402] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 694.132535][T15403] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 694.279957][T15408] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3161'. [ 695.168986][T12436] wlan1: Trigger new scan to find an IBSS to join [ 696.205278][T12436] wlan1: Trigger new scan to find an IBSS to join [ 697.328543][T15407] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 697.342057][T11980] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 698.001442][T15428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.077614][T15434] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.090504][T15432] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.308444][T15438] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.564023][T15444] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3174'. [ 700.205659][ T12] wlan1: Trigger new scan to find an IBSS to join [ 700.212244][ T12] wlan1: Trigger new scan to find an IBSS to join [ 701.165873][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 701.652671][T15458] FAULT_INJECTION: forcing a failure. [ 701.652671][T15458] name failslab, interval 1, probability 0, space 0, times 0 [ 701.666818][T15458] CPU: 0 PID: 15458 Comm: syz.2.3180 Not tainted syzkaller #0 [ 701.674309][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.684355][T15458] Call Trace: [ 701.687639][T15458] [ 701.690581][T15458] dump_stack_lvl+0x18c/0x250 [ 701.695269][T15458] ? show_regs_print_info+0x20/0x20 [ 701.700484][T15458] ? load_image+0x400/0x400 [ 701.705008][T15458] ? __might_sleep+0xe0/0xe0 [ 701.709607][T15458] ? __lock_acquire+0x7d40/0x7d40 [ 701.714628][T15458] should_fail_ex+0x39d/0x4d0 [ 701.719311][T15458] should_failslab+0x9/0x20 [ 701.723810][T15458] slab_pre_alloc_hook+0x59/0x310 [ 701.728833][T15458] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 701.734552][T15458] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 701.740264][T15458] __kmem_cache_alloc_node+0x53/0x250 [ 701.745636][T15458] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 701.751347][T15458] __kmalloc+0xa4/0x230 [ 701.755501][T15458] tomoyo_realpath_from_path+0xe3/0x5d0 [ 701.761051][T15458] tomoyo_path_number_perm+0x248/0x620 [ 701.766508][T15458] ? tomoyo_path_number_perm+0x217/0x620 [ 701.772136][T15458] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 701.777592][T15458] ? ksys_write+0x1c4/0x260 [ 701.782116][T15458] ? __fget_files+0x28/0x4b0 [ 701.786706][T15458] ? __fget_files+0x28/0x4b0 [ 701.791302][T15458] security_file_ioctl+0x70/0xa0 [ 701.796238][T15458] __se_sys_ioctl+0x48/0x170 [ 701.800826][T15458] do_syscall_64+0x55/0xa0 [ 701.805240][T15458] ? clear_bhb_loop+0x40/0x90 [ 701.809917][T15458] ? clear_bhb_loop+0x40/0x90 [ 701.814587][T15458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.820473][T15458] RIP: 0033:0x7ff11419c799 [ 701.824877][T15458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.844474][T15458] RSP: 002b:00007ff1150f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 701.852877][T15458] RAX: ffffffffffffffda RBX: 00007ff114415fa0 RCX: 00007ff11419c799 [ 701.860838][T15458] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 701.868802][T15458] RBP: 00007ff1150f5090 R08: 0000000000000000 R09: 0000000000000000 [ 701.876759][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.884725][T15458] R13: 00007ff114416038 R14: 00007ff114415fa0 R15: 00007fffb09847f8 [ 701.892699][T15458] [ 701.921515][T15458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 701.939739][T15457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.209839][T12416] wlan1: Trigger new scan to find an IBSS to join [ 702.266389][T15471] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 702.296822][T12416] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 702.319974][T15470] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 702.426856][T15477] netlink: 'syz.1.3187': attribute type 1 has an invalid length. [ 702.434735][T15477] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.3187'. [ 702.665740][T15485] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3188'. [ 705.257419][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 705.567968][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.660715][T15498] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3195'. [ 706.215625][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 707.251360][ T12] wlan1: Trigger new scan to find an IBSS to join [ 708.822986][T15505] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 708.835796][T15506] netlink: 'syz.3.3196': attribute type 4 has an invalid length. [ 708.928446][T15506] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3196'. [ 709.185493][T15506] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 709.247826][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 709.295109][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 709.397008][T15529] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3202'. [ 709.482750][T15531] netlink: 'syz.2.3204': attribute type 2 has an invalid length. [ 709.491089][T15531] netlink: 'syz.2.3204': attribute type 1 has an invalid length. [ 709.501377][T15531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3204'. [ 709.907340][T15535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.211389][T15544] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 711.165278][ T1027] wlan1: Trigger new scan to find an IBSS to join [ 711.245345][ T12] wlan1: Trigger new scan to find an IBSS to join [ 713.173552][T15546] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 713.185477][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 713.535896][T15562] netlink: 'syz.1.3214': attribute type 25 has an invalid length. [ 713.574707][T15562] netlink: 'syz.1.3214': attribute type 1 has an invalid length. [ 713.618940][T15562] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.205548][T11980] wlan1: Trigger new scan to find an IBSS to join [ 714.379039][T15572] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3217'. [ 715.256328][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 715.262935][T12425] wlan1: Trigger new scan to find an IBSS to join [ 716.150757][T12425] wlan1: Creating new IBSS network, BSSID 1e:70:ee:93:b2:23 [ 718.205240][T12438] wlan1: Trigger new scan to find an IBSS to join [ 718.211843][T11980] wlan1: Trigger new scan to find an IBSS to join [ 720.702986][T12416] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 720.703029][T11980] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 721.363394][T15609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.408277][T15612] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 721.551821][T15625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3233'. [ 721.581643][T15625] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.3233'. [ 721.629959][T15622] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 724.205540][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 724.213401][T12425] wlan1: Trigger new scan to find an IBSS to join [ 724.950781][T15639] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 725.158389][T15650] FAULT_INJECTION: forcing a failure. [ 725.158389][T15650] name failslab, interval 1, probability 0, space 0, times 0 [ 725.172172][T15650] CPU: 0 PID: 15650 Comm: syz.0.3240 Not tainted syzkaller #0 [ 725.179682][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.189754][T15650] Call Trace: [ 725.193074][T15650] [ 725.196002][T15650] dump_stack_lvl+0x18c/0x250 [ 725.200685][T15650] ? show_regs_print_info+0x20/0x20 [ 725.205891][T15650] ? load_image+0x400/0x400 [ 725.210394][T15650] ? __might_sleep+0xe0/0xe0 [ 725.214986][T15650] ? __lock_acquire+0x7d40/0x7d40 [ 725.220045][T15650] should_fail_ex+0x39d/0x4d0 [ 725.224736][T15650] should_failslab+0x9/0x20 [ 725.229240][T15650] slab_pre_alloc_hook+0x59/0x310 [ 725.234269][T15650] ? tomoyo_encode+0x28b/0x540 [ 725.239029][T15650] ? tomoyo_encode+0x28b/0x540 [ 725.243781][T15650] __kmem_cache_alloc_node+0x53/0x250 [ 725.249152][T15650] ? tomoyo_encode+0x28b/0x540 [ 725.253907][T15650] __kmalloc+0xa4/0x230 [ 725.258065][T15650] tomoyo_encode+0x28b/0x540 [ 725.262654][T15650] tomoyo_realpath_from_path+0x592/0x5d0 [ 725.268290][T15650] tomoyo_path_number_perm+0x248/0x620 [ 725.273746][T15650] ? tomoyo_path_number_perm+0x217/0x620 [ 725.279373][T15650] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 725.284828][T15650] ? ksys_write+0x1c4/0x260 [ 725.289348][T15650] ? __fget_files+0x28/0x4b0 [ 725.293934][T15650] ? __fget_files+0x28/0x4b0 [ 725.298524][T15650] security_file_ioctl+0x70/0xa0 [ 725.303460][T15650] __se_sys_ioctl+0x48/0x170 [ 725.308047][T15650] do_syscall_64+0x55/0xa0 [ 725.312456][T15650] ? clear_bhb_loop+0x40/0x90 [ 725.317122][T15650] ? clear_bhb_loop+0x40/0x90 [ 725.321792][T15650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.327675][T15650] RIP: 0033:0x7fcd0e19c799 [ 725.332092][T15650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.351692][T15650] RSP: 002b:00007fcd0ef9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.360102][T15650] RAX: ffffffffffffffda RBX: 00007fcd0e415fa0 RCX: 00007fcd0e19c799 [ 725.368154][T15650] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 725.376122][T15650] RBP: 00007fcd0ef9b090 R08: 0000000000000000 R09: 0000000000000000 [ 725.384085][T15650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.392052][T15650] R13: 00007fcd0e416038 R14: 00007fcd0e415fa0 R15: 00007ffd686d5ae8 [ 725.400033][T15650] [ 725.408612][T12425] wlan1: Trigger new scan to find an IBSS to join [ 725.435358][T15650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 725.652803][T15653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.690215][T15656] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 725.903445][T15660] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 728.205922][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 729.170882][T15681] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 729.387691][T15690] netlink: 'syz.1.3255': attribute type 7 has an invalid length. [ 729.403366][T15690] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3255'. [ 729.735529][T15698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.244490][T15709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.378797][T15715] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.725963][T15729] bridge0: port 3(erspan0) entered blocking state [ 730.732726][T15729] bridge0: port 3(erspan0) entered disabled state [ 730.739816][T15729] erspan0: entered allmulticast mode [ 730.752989][T15729] erspan0: entered promiscuous mode [ 730.759124][T15729] bridge0: port 3(erspan0) entered blocking state [ 730.765728][T15729] bridge0: port 3(erspan0) entered forwarding state [ 730.794090][T15733] netlink: 'syz.2.3271': attribute type 64 has an invalid length. [ 731.071404][T15739] FAULT_INJECTION: forcing a failure. [ 731.071404][T15739] name failslab, interval 1, probability 0, space 0, times 0 [ 731.130178][T15739] CPU: 0 PID: 15739 Comm: syz.0.3272 Not tainted syzkaller #0 [ 731.137702][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.147775][T15739] Call Trace: [ 731.151067][T15739] [ 731.154001][T15739] dump_stack_lvl+0x18c/0x250 [ 731.158708][T15739] ? show_regs_print_info+0x20/0x20 [ 731.163924][T15739] ? load_image+0x400/0x400 [ 731.168489][T15739] ? __might_sleep+0xe0/0xe0 [ 731.173107][T15739] ? __lock_acquire+0x7d40/0x7d40 [ 731.178244][T15739] should_fail_ex+0x39d/0x4d0 [ 731.183067][T15739] should_failslab+0x9/0x20 [ 731.187590][T15739] slab_pre_alloc_hook+0x59/0x310 [ 731.192649][T15739] ? sk_prot_alloc+0xe7/0x210 [ 731.197349][T15739] ? sk_prot_alloc+0xe7/0x210 [ 731.202038][T15739] __kmem_cache_alloc_node+0x53/0x250 [ 731.207435][T15739] ? sk_prot_alloc+0xe7/0x210 [ 731.212127][T15739] __kmalloc+0xa4/0x230 [ 731.216372][T15739] sk_prot_alloc+0xe7/0x210 [ 731.221058][T15739] ? sk_alloc+0x24/0x360 [ 731.225330][T15739] sk_alloc+0x3a/0x360 [ 731.229407][T15739] ? bpf_ctx_init+0x163/0x1a0 [ 731.234089][T15739] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 731.239646][T15739] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 731.245037][T15739] ? __fget_files+0x28/0x4b0 [ 731.249653][T15739] ? __fget_files+0x28/0x4b0 [ 731.254282][T15739] ? __fget_files+0x43d/0x4b0 [ 731.258989][T15739] ? cpu_online+0x60/0x60 [ 731.263337][T15739] bpf_prog_test_run+0x321/0x390 [ 731.268324][T15739] __sys_bpf+0x49d/0x890 [ 731.272581][T15739] ? bpf_link_show_fdinfo+0x390/0x390 [ 731.277985][T15739] ? lock_chain_count+0x20/0x20 [ 731.282856][T15739] __x64_sys_bpf+0x7c/0x90 [ 731.287283][T15739] do_syscall_64+0x55/0xa0 [ 731.291716][T15739] ? clear_bhb_loop+0x40/0x90 [ 731.296404][T15739] ? clear_bhb_loop+0x40/0x90 [ 731.301088][T15739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.307096][T15739] RIP: 0033:0x7fcd0e19c799 [ 731.311546][T15739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.331346][T15739] RSP: 002b:00007fcd0ef7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 731.339804][T15739] RAX: ffffffffffffffda RBX: 00007fcd0e416090 RCX: 00007fcd0e19c799 [ 731.347795][T15739] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 731.355795][T15739] RBP: 00007fcd0ef7a090 R08: 0000000000000000 R09: 0000000000000000 [ 731.363778][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.371767][T15739] R13: 00007fcd0e416128 R14: 00007fcd0e416090 R15: 00007ffd686d5ae8 [ 731.379762][T15739] [ 731.387606][T12416] wlan1: Trigger new scan to find an IBSS to join [ 731.419468][ T1027] wlan1: Trigger new scan to find an IBSS to join [ 731.763580][T15742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.974372][T15757] FAULT_INJECTION: forcing a failure. [ 731.974372][T15757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.046917][T15757] CPU: 0 PID: 15757 Comm: syz.1.3279 Not tainted syzkaller #0 [ 732.054450][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.064541][T15757] Call Trace: [ 732.067861][T15757] [ 732.070819][T15757] dump_stack_lvl+0x18c/0x250 [ 732.075529][T15757] ? show_regs_print_info+0x20/0x20 [ 732.080769][T15757] ? load_image+0x400/0x400 [ 732.085305][T15757] ? __might_fault+0xaa/0x120 [ 732.090020][T15757] ? __lock_acquire+0x7d40/0x7d40 [ 732.095086][T15757] should_fail_ex+0x39d/0x4d0 [ 732.099798][T15757] _copy_from_user+0x2f/0xe0 [ 732.104418][T15757] ___sys_sendmsg+0x1c7/0x360 [ 732.109122][T15757] ? get_pid_task+0x20/0x1e0 [ 732.113743][T15757] ? __sys_sendmsg+0x2a0/0x2a0 [ 732.118550][T15757] ? __lock_acquire+0x7d40/0x7d40 [ 732.123626][T15757] __se_sys_sendmsg+0x1c2/0x2b0 [ 732.128518][T15757] ? __x64_sys_sendmsg+0x80/0x80 [ 732.133498][T15757] ? lockdep_hardirqs_on+0x98/0x150 [ 732.138722][T15757] do_syscall_64+0x55/0xa0 [ 732.143157][T15757] ? clear_bhb_loop+0x40/0x90 [ 732.147873][T15757] ? clear_bhb_loop+0x40/0x90 [ 732.152573][T15757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.158488][T15757] RIP: 0033:0x7f279ab9c799 [ 732.162927][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.182564][T15757] RSP: 002b:00007f279bafa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.191013][T15757] RAX: ffffffffffffffda RBX: 00007f279ae15fa0 RCX: 00007f279ab9c799 [ 732.199015][T15757] RDX: 0000000004040000 RSI: 0000200000004440 RDI: 0000000000000008 [ 732.207017][T15757] RBP: 00007f279bafa090 R08: 0000000000000000 R09: 0000000000000000 [ 732.215156][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.223155][T15757] R13: 00007f279ae16038 R14: 00007f279ae15fa0 R15: 00007fffe5be2198 [ 732.231171][T15757] [ 732.476296][T15769] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3283'. [ 732.560209][T15769] netlink: 'syz.0.3283': attribute type 2 has an invalid length. [ 732.577985][T15773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3285'. [ 732.591353][T15773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3285'. [ 732.620336][T15773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3285'. [ 732.653211][T15773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3285'. [ 732.710804][T15773] FAULT_INJECTION: forcing a failure. [ 732.710804][T15773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.739711][T15773] CPU: 1 PID: 15773 Comm: syz.2.3285 Not tainted syzkaller #0 [ 732.747234][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.757311][T15773] Call Trace: [ 732.760617][T15773] [ 732.763568][T15773] dump_stack_lvl+0x18c/0x250 [ 732.768287][T15773] ? show_regs_print_info+0x20/0x20 [ 732.773516][T15773] ? load_image+0x400/0x400 [ 732.778048][T15773] ? __lock_acquire+0x7d40/0x7d40 [ 732.783095][T15773] ? snprintf+0xe9/0x140 [ 732.787362][T15773] should_fail_ex+0x39d/0x4d0 [ 732.792077][T15773] _copy_to_user+0x2f/0xa0 [ 732.796524][T15773] simple_read_from_buffer+0xe7/0x150 [ 732.801935][T15773] proc_fail_nth_read+0x1e8/0x260 [ 732.806992][T15773] ? proc_fault_inject_write+0x360/0x360 [ 732.812663][T15773] ? fsnotify_perm+0x271/0x5e0 [ 732.817460][T15773] ? proc_fault_inject_write+0x360/0x360 [ 732.823127][T15773] vfs_read+0x28b/0x970 [ 732.827375][T15773] ? kernel_read+0x1e0/0x1e0 [ 732.831998][T15773] ? __fget_files+0x28/0x4b0 [ 732.836617][T15773] ? __fget_files+0x28/0x4b0 [ 732.841227][T15773] ? __fget_files+0x43d/0x4b0 [ 732.845925][T15773] ? __fdget_pos+0x2a3/0x330 [ 732.850524][T15773] ? ksys_read+0x75/0x260 [ 732.854866][T15773] ksys_read+0x150/0x260 [ 732.859115][T15773] ? vfs_write+0x990/0x990 [ 732.863553][T15773] ? lockdep_hardirqs_on+0x98/0x150 [ 732.868762][T15773] do_syscall_64+0x55/0xa0 [ 732.873208][T15773] ? clear_bhb_loop+0x40/0x90 [ 732.877888][T15773] ? clear_bhb_loop+0x40/0x90 [ 732.882562][T15773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.888448][T15773] RIP: 0033:0x7ff11415cfce [ 732.892861][T15773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 732.912472][T15773] RSP: 002b:00007ff1150f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 732.920881][T15773] RAX: ffffffffffffffda RBX: 00007ff1150f56c0 RCX: 00007ff11415cfce [ 732.929026][T15773] RDX: 000000000000000f RSI: 00007ff1150f50a0 RDI: 0000000000000004 [ 732.936988][T15773] RBP: 00007ff1150f5090 R08: 0000000000000000 R09: 0000000000000000 [ 732.944969][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.952967][T15773] R13: 00007ff114416038 R14: 00007ff114415fa0 R15: 00007fffb09847f8 [ 732.960970][T15773] [ 733.250696][T12425] wlan1: Trigger new scan to find an IBSS to join [ 733.554390][T15797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3292'. [ 733.610548][T15797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3292'. [ 733.645582][T15800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3292'. [ 733.716648][T15803] netlink: 'syz.3.3294': attribute type 21 has an invalid length. [ 733.727292][T15803] netlink: 'syz.3.3294': attribute type 6 has an invalid length. [ 733.742877][T15803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3294'. [ 733.904434][T15810] FAULT_INJECTION: forcing a failure. [ 733.904434][T15810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.923389][T15810] CPU: 1 PID: 15810 Comm: syz.3.3297 Not tainted syzkaller #0 [ 733.930908][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.940964][T15810] Call Trace: [ 733.944235][T15810] [ 733.947156][T15810] dump_stack_lvl+0x18c/0x250 [ 733.951835][T15810] ? show_regs_print_info+0x20/0x20 [ 733.957029][T15810] ? load_image+0x400/0x400 [ 733.961527][T15810] ? __lock_acquire+0x7d40/0x7d40 [ 733.966542][T15810] ? snprintf+0xe9/0x140 [ 733.970778][T15810] should_fail_ex+0x39d/0x4d0 [ 733.975454][T15810] _copy_to_user+0x2f/0xa0 [ 733.979868][T15810] simple_read_from_buffer+0xe7/0x150 [ 733.985260][T15810] proc_fail_nth_read+0x1e8/0x260 [ 733.990313][T15810] ? proc_fault_inject_write+0x360/0x360 [ 733.995962][T15810] ? fsnotify_perm+0x271/0x5e0 [ 734.000739][T15810] ? proc_fault_inject_write+0x360/0x360 [ 734.006366][T15810] vfs_read+0x28b/0x970 [ 734.010523][T15810] ? kernel_read+0x1e0/0x1e0 [ 734.015108][T15810] ? __fget_files+0x28/0x4b0 [ 734.019687][T15810] ? __fget_files+0x28/0x4b0 [ 734.024274][T15810] ? __fget_files+0x43d/0x4b0 [ 734.028950][T15810] ? __fdget_pos+0x2a3/0x330 [ 734.033531][T15810] ? ksys_read+0x75/0x260 [ 734.037856][T15810] ksys_read+0x150/0x260 [ 734.042097][T15810] ? vfs_write+0x990/0x990 [ 734.046506][T15810] ? lockdep_hardirqs_on+0x98/0x150 [ 734.051700][T15810] do_syscall_64+0x55/0xa0 [ 734.056110][T15810] ? clear_bhb_loop+0x40/0x90 [ 734.060776][T15810] ? clear_bhb_loop+0x40/0x90 [ 734.065446][T15810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.071329][T15810] RIP: 0033:0x7f4955b5cfce [ 734.075735][T15810] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 734.095331][T15810] RSP: 002b:00007f4956b49fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.103742][T15810] RAX: ffffffffffffffda RBX: 00007f4956b4a6c0 RCX: 00007f4955b5cfce [ 734.111711][T15810] RDX: 000000000000000f RSI: 00007f4956b4a0a0 RDI: 0000000000000007 [ 734.119762][T15810] RBP: 00007f4956b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 734.127723][T15810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.135683][T15810] R13: 00007f4955e16038 R14: 00007f4955e15fa0 R15: 00007ffff8335758 [ 734.143659][T15810] [ 734.577229][T15824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.874780][T15839] netlink: 'syz.3.3305': attribute type 153 has an invalid length. [ 734.936392][T15839] __nla_validate_parse: 1 callbacks suppressed [ 734.936411][T15839] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3305'. [ 735.177281][T12425] wlan1: Trigger new scan to find an IBSS to join [ 736.206783][ T12] wlan1: Trigger new scan to find an IBSS to join [ 737.246096][T12425] wlan1: Trigger new scan to find an IBSS to join [ 737.252703][T12425] wlan1: Trigger new scan to find an IBSS to join [ 738.207008][T12416] wlan1: Creating new IBSS network, BSSID 96:63:41:0b:c7:74 [ 738.425449][T15857] mac80211_hwsim hwsim322 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 738.553771][T15861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.753317][T15869] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3315'. [ 739.187872][T15876] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3316'. [ 739.466491][T15887] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3321'. [ 739.534267][T15887] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3321'. [ 739.776585][T15900] netlink: 'syz.0.3323': attribute type 21 has an invalid length. [ 739.785346][T15900] netlink: 'syz.0.3323': attribute type 6 has an invalid length. [ 739.807564][T15900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3323'. [ 740.042571][T15903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.092568][T15902] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 740.587527][T15924] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3329'. [ 740.909307][T15926] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3330'. [ 741.165152][T12416] wlan1: Trigger new scan to find an IBSS to join [ 741.721182][T15945] mac80211_hwsim hwsim326 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 741.888091][T15942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.215200][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 742.215298][T12416] wlan1: Trigger new scan to find an IBSS to join [ 742.641286][T15968] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3342'. [ 744.205247][ T12] wlan1: Trigger new scan to find an IBSS to join [ 745.714515][T15989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.073279][T15994] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3347'. [ 746.095878][T15988] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 746.209083][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 746.873228][T16016] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3353'. [ 747.580499][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.589283][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.208065][T12438] wlan1: Trigger new scan to find an IBSS to join [ 749.245349][T12425] wlan1: Trigger new scan to find an IBSS to join [ 749.786764][ T1122] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 749.825550][T16013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.350970][T16026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.421371][T16031] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 750.726387][T16043] syzkaller0: entered promiscuous mode [ 750.741036][T16043] syzkaller0: entered allmulticast mode [ 752.207269][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 752.213835][T12416] wlan1: Trigger new scan to find an IBSS to join [ 753.145754][T12438] wlan1: Creating new IBSS network, BSSID fa:5e:d1:e1:f4:db [ 753.249669][T12416] wlan1: Trigger new scan to find an IBSS to join [ 753.863861][T16060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.105915][T16071] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3370'. [ 755.154728][T16082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.175900][T12416] wlan1: Trigger new scan to find an IBSS to join [ 755.449577][T16103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3380'. [ 755.475063][T16103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3380'. [ 755.492092][T16103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3380'. [ 755.502166][T16103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3380'. [ 755.912147][T16114] bridge_slave_1: left allmulticast mode [ 755.925704][T16114] bridge_slave_1: left promiscuous mode [ 755.934139][T16114] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.206443][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 756.312600][T16114] bridge_slave_0: left allmulticast mode [ 756.375472][T16114] bridge_slave_0: left promiscuous mode [ 756.400416][T16114] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.240411][T16129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.298311][T16136] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3386'. [ 757.702251][T16148] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 757.708734][T16148] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 757.802267][ T51] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 758.104120][T16160] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3405'. [ 758.205145][T12416] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 758.670063][T16165] mac80211_hwsim hwsim324 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 758.948416][T16177] netlink: 142528 bytes leftover after parsing attributes in process `syz.2.3404'. [ 758.958762][T16177] netlink: 'syz.2.3404': attribute type 1 has an invalid length. [ 760.817048][T16204] mac80211_hwsim hwsim328 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 760.933524][T16208] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3412'. [ 761.176970][T12434] wlan1: Trigger new scan to find an IBSS to join [ 761.459635][T16220] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3417'. [ 763.175284][T12416] wlan1: Trigger new scan to find an IBSS to join [ 763.185742][T12434] wlan1: Trigger new scan to find an IBSS to join [ 766.007844][T16253] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3427'. [ 766.144605][T16257] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 766.208071][T11980] wlan1: Trigger new scan to find an IBSS to join [ 766.426612][T16269] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 766.463761][T16271] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3431'. [ 766.635319][T16276] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3432'. [ 766.829980][T16273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.207679][ T1075] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 767.229963][ T1075] ------------[ cut here ]------------ [ 767.236698][ T1075] WARNING: CPU: 1 PID: 1075 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 767.246995][ T1075] Modules linked in: [ 767.250919][ T1075] CPU: 1 PID: 1075 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 767.258630][ T1075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.268973][ T1075] Workqueue: cfg80211 cfg80211_event_work [ 767.274733][ T1075] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 767.281034][ T1075] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 d3 a1 f7 0f 0b eb bb e8 3e d3 a1 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 30 d3 a1 f7 0f 0b e9 e0 fd ff ff e8 [ 767.300938][ T1075] RSP: 0018:ffffc900044ffa20 EFLAGS: 00010293 [ 767.307130][ T1075] RAX: ffffffff89e54922 RBX: dffffc0000000000 RCX: ffff888023b9da00 [ 767.315439][ T1075] RDX: 0000000000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 767.323452][ T1075] RBP: ffffc900044ffaf8 R08: ffffffff911c156f R09: 1ffffffff22382ad [ 767.331531][ T1075] R10: dffffc0000000000 R11: fffffbfff22382ae R12: ffff88805fd78c90 [ 767.339879][ T1075] R13: 1ffff9200089ff4c R14: ffff88802ed335b8 R15: 000000000000001f [ 767.348145][ T1075] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 767.357224][ T1075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.363841][ T1075] CR2: 00007f279ade7158 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 767.372032][ T1075] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.380115][ T1075] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 767.388185][ T1075] Call Trace: [ 767.391495][ T1075] [ 767.394453][ T1075] ? mutex_lock_nested+0x20/0x20 [ 767.399540][ T1075] ? trace_rdev_return_void+0x1c0/0x1c0 [ 767.405659][ T1075] cfg80211_process_wdev_events+0x3bc/0x550 [ 767.411602][ T1075] cfg80211_process_rdev_events+0xa1/0x110 [ 767.417648][ T1075] cfg80211_event_work+0x2f/0x40 [ 767.422626][ T1075] ? process_scheduled_works+0x96f/0x15d0 [ 767.428520][ T1075] process_scheduled_works+0xa5d/0x15d0 [ 767.432959][T16296] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 767.434113][ T1075] ? worker_attach_to_pool+0x380/0x380 [ 767.440762][T16296] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 767.452866][ T1075] ? assign_work+0x3d2/0x5d0 [ 767.457588][ T1075] worker_thread+0xa55/0xfc0 [ 767.462251][ T1075] kthread+0x2fa/0x390 [ 767.466413][ T1075] ? pr_cont_work+0x560/0x560 [ 767.471136][ T1075] ? kthread_blkcg+0xd0/0xd0 [ 767.475856][ T1075] ret_from_fork+0x48/0x80 [ 767.480309][ T1075] ? kthread_blkcg+0xd0/0xd0 [ 767.485009][ T1075] ret_from_fork_asm+0x11/0x20 [ 767.489918][ T1075] [ 767.492965][ T1075] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 767.500384][ T1075] CPU: 1 PID: 1075 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 767.507959][ T1075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.518045][ T1075] Workqueue: cfg80211 cfg80211_event_work [ 767.523801][ T1075] Call Trace: [ 767.527104][ T1075] [ 767.530049][ T1075] dump_stack_lvl+0x18c/0x250 [ 767.534766][ T1075] ? show_regs_print_info+0x20/0x20 [ 767.539996][ T1075] ? load_image+0x400/0x400 [ 767.544541][ T1075] panic+0x2dc/0x730 [ 767.548469][ T1075] ? bpf_jit_dump+0xd0/0xd0 [ 767.553007][ T1075] ? ret_from_fork_asm+0x11/0x20 [ 767.557979][ T1075] __warn+0x2e0/0x470 [ 767.561986][ T1075] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 767.567575][ T1075] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 767.573149][ T1075] report_bug+0x2be/0x4f0 [ 767.577501][ T1075] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 767.583075][ T1075] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 767.588665][ T1075] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 767.594239][ T1075] handle_bug+0xcf/0x120 [ 767.598515][ T1075] exc_invalid_op+0x1a/0x50 [ 767.603120][ T1075] asm_exc_invalid_op+0x1a/0x20 [ 767.607969][ T1075] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 767.614119][ T1075] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 d3 a1 f7 0f 0b eb bb e8 3e d3 a1 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 30 d3 a1 f7 0f 0b e9 e0 fd ff ff e8 [ 767.633804][ T1075] RSP: 0018:ffffc900044ffa20 EFLAGS: 00010293 [ 767.639868][ T1075] RAX: ffffffff89e54922 RBX: dffffc0000000000 RCX: ffff888023b9da00 [ 767.647835][ T1075] RDX: 0000000000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 767.655805][ T1075] RBP: ffffc900044ffaf8 R08: ffffffff911c156f R09: 1ffffffff22382ad [ 767.663851][ T1075] R10: dffffc0000000000 R11: fffffbfff22382ae R12: ffff88805fd78c90 [ 767.671810][ T1075] R13: 1ffff9200089ff4c R14: ffff88802ed335b8 R15: 000000000000001f [ 767.679787][ T1075] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 767.685435][ T1075] ? mutex_lock_nested+0x20/0x20 [ 767.690385][ T1075] ? trace_rdev_return_void+0x1c0/0x1c0 [ 767.695947][ T1075] cfg80211_process_wdev_events+0x3bc/0x550 [ 767.701953][ T1075] cfg80211_process_rdev_events+0xa1/0x110 [ 767.707763][ T1075] cfg80211_event_work+0x2f/0x40 [ 767.712802][ T1075] ? process_scheduled_works+0x96f/0x15d0 [ 767.718598][ T1075] process_scheduled_works+0xa5d/0x15d0 [ 767.724169][ T1075] ? worker_attach_to_pool+0x380/0x380 [ 767.729660][ T1075] ? assign_work+0x3d2/0x5d0 [ 767.734257][ T1075] worker_thread+0xa55/0xfc0 [ 767.738867][ T1075] kthread+0x2fa/0x390 [ 767.742922][ T1075] ? pr_cont_work+0x560/0x560 [ 767.747595][ T1075] ? kthread_blkcg+0xd0/0xd0 [ 767.752173][ T1075] ret_from_fork+0x48/0x80 [ 767.756582][ T1075] ? kthread_blkcg+0xd0/0xd0 [ 767.761162][ T1075] ret_from_fork_asm+0x11/0x20 [ 767.765937][ T1075] [ 767.769353][ T1075] Kernel Offset: disabled [ 767.773730][ T1075] Rebooting in 86400 seconds..