last executing test programs: 5.015370389s ago: executing program 2 (id=1808): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000008}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/294], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 4.756683307s ago: executing program 2 (id=1811): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x20000000}, 0x80, 0x0, 0x0, 0x9, 0x9, 0xd, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x4e}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@const={0x8, 0x0, 0x0, 0xa, 0x3}, @enum64={0xd, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x2, 0x401, 0x4}, {0x1, 0xffffffff, 0x8}, {0x2, 0x80000000, 0x2}, {0x2, 0xdc6a, 0x5}, {0x6, 0xff, 0x4}, {0x7, 0x0, 0x3}]}, @enum={0x4, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x1ff}, {0xd, 0x4}, {0x5, 0x77}, {0x7, 0x1}, {0x8, 0x101}, {0x7, 0x401}, {0x5, 0x8}, {0xe}]}]}, {0x0, [0x5f, 0x61, 0x0, 0x30, 0x61]}}, &(0x7f00000007c0)=""/121, 0xcb, 0x79, 0x1, 0x6}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000180081054e81f782db4cb904021d00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b300277ce06bbace8017cbec4c2ee5a7cef409f113d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dc7923fae94a2c5e23df63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ee4edef3d93452a92954b43370e000100000000000003e543", 0xd8}], 0x1}, 0x448c0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000040)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.36733812s ago: executing program 2 (id=1816): sendmsg$inet(0xffffffffffffffff, 0x0, 0x8840) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_clone(0x22400, &(0x7f0000000080)="abbe17e803e2fe7692e20f40b0ae3653645d529ef0dd5f9b25b9a1592f3593cc8482eba9e171f77f48371cf1ee5376dc33b328fd2938fd1df67b7ee25ae3e79272f29c42b1d62aa6e014276f604b8d039b4ea16330f58e3bf165fc1aad04c01d87e6780e0f2a934d82fae0b528bbe503b79ef0bb0602c5a2b974f5739ea46d412237949f55727e1e808dac60f9ed581e3f771cbb6ff9fc4522f3f0ee4f7a941b4b2711ec53850e", 0xa7, &(0x7f0000000200), &(0x7f00000003c0), &(0x7f00000006c0)="4e8670b7bcdde847f88f02d956501a7483c55a99556453cbe50271afe799197f99cf7891ade7daf58e27d86dd97e96cf61a64435f7f385d0af3f3d831e3a7cc4dc1fe9218dee206004d605388085347e82e3f770787d7196fc9f80a72b20937e8cb978d206966f2adf12dc6133f67bc4806ef9dab7129d8d1a69aef862303febd296acde4893597e8ac85d596ba6d01fe6ac8ec216a35881ec96df9efedf4ee316262c0748d9cc0f") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.211084257s ago: executing program 1 (id=1818): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x20000000}, 0x80, 0x0, 0x0, 0x9, 0x9, 0xd, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x4e}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@const={0x8, 0x0, 0x0, 0xa, 0x3}, @enum64={0xd, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x2, 0x401, 0x4}, {0x1, 0xffffffff, 0x8}, {0x2, 0x80000000, 0x2}, {0x2, 0xdc6a, 0x5}, {0x6, 0xff, 0x4}, {0x7, 0x0, 0x3}]}, @enum={0x4, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x1ff}, {0xd, 0x4}, {0x5, 0x77}, {0x7, 0x1}, {0x8, 0x101}, {0x7, 0x401}, {0x5, 0x8}, {0xe}]}]}, {0x0, [0x5f, 0x61, 0x0, 0x30, 0x61]}}, &(0x7f00000007c0)=""/121, 0xcb, 0x79, 0x1, 0x6}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000180081054e81f782db4cb904021d00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b300277ce06bbace8017cbec4c2ee5a7cef409f113d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dc7923fae94a2c5e23df63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ee4edef3d93452a92954b43370e000100000000000003e543", 0xd8}], 0x1}, 0x448c0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000040)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.210517757s ago: executing program 3 (id=1819): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) 3.076823251s ago: executing program 2 (id=1820): socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000f900850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8c, 0x0, 0x0, 0x2, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x1, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r6}, 0x4) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x7e8166965e22236a) 3.059129592s ago: executing program 0 (id=1821): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x8, 0xf, 0x3, 0x0, 0x7, 0x30000, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa51b, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x14102, 0x6, 0xfffffffb, 0x8, 0x5, 0x0, 0x7, 0x0, 0x3, 0x0, 0xd48c}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.970259365s ago: executing program 3 (id=1822): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 2.767773741s ago: executing program 0 (id=1823): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x2d, 0x0, 0x1, 0x2}, 0x28) socket$kcm(0x1e, 0x5, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) syz_clone(0x2080, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) write$cgroup_pid(r3, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) 2.251272278s ago: executing program 3 (id=1824): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x20000000}, 0x80, 0x0, 0x0, 0x9, 0x9, 0xd, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x4e}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@const={0x8, 0x0, 0x0, 0xa, 0x3}, @enum64={0xd, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x2, 0x401, 0x4}, {0x1, 0xffffffff, 0x8}, {0x2, 0x80000000, 0x2}, {0x2, 0xdc6a, 0x5}, {0x6, 0xff, 0x4}, {0x7, 0x0, 0x3}]}, @enum={0x4, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x1ff}, {0xd, 0x4}, {0x5, 0x77}, {0x7, 0x1}, {0x8, 0x101}, {0x7, 0x401}, {0x5, 0x8}, {0xe}]}]}, {0x0, [0x5f, 0x61, 0x0, 0x30, 0x61]}}, &(0x7f00000007c0)=""/121, 0xcb, 0x79, 0x1, 0x6}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000180081054e81f782db4cb904021d00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b300277ce06bbace8017cbec4c2ee5a7cef409f113d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dc7923fae94a2c5e23df63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ee4edef3d93452a92954b43370e000100000000000003e543", 0xd8}], 0x1}, 0x448c0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000040)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.220096308s ago: executing program 1 (id=1825): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000000)=[{&(0x7f0000000040)='r', 0x200420}], 0x1}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000600)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={0x1, 0x58, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000180)="931951cb1825e797d8c332a0ff1d184b0e03df1d16fc1745efae000cc64096ed1923add44933e855fdcf3d017793ccac6c1920a7db71010ea8ba937789bbc8f4aeced3492694d3d414ce3bbd239125137f79200b025c40e966959a9e25ba5158668257f8fb5a60865892fe239855facb369674aefa42e00ef3cda4a5586f36031d486df6fef2339b16115c808fad3b696426a0c3eb8521147fd1cbc97de69287c4f39dd2271183b5bce5be094a22f37fca48c793c8c213f4669269aed99e0d2043884ab4ec5567a79e37aa1d06", 0xcd}, {&(0x7f0000000280)="bb053ea105962f545155bfc23dc11c546dd04a28e0319830e57c3b49ce49087596c7c213601736c578a7005347181ba5b25bbbdb437455ccdf2e04f57484688bf4daccf4acb545061432f80ef7fd47f4c4cbe4bb053eb22f6ee2f1f562bf96dace531654b95a0131a71b0e9a11de3b94adfb32aecb3a9f67ffeb09620d06dd0755b6f834bb051b528269dfec3939c273e9c297262f52b2eda9dcf4e449bc24752873893f06463582dff26b26b488e5b728cabd33256b2dc1a1c65dbf76f7a1c69ce68feddfac329ea97082868d654c25da9203dafa9e32e37e476cf5099256", 0xdf}, {&(0x7f0000000480)="02d84e3b03c2e54ba6e096c7191abb93ee51a294319c9c35b4933863fc6f65e212bde46187b5b87d0e606a746a890dab0d6eb1c86919613e6a1438955f844593e94c5ebeae7e20370be393b5d0f20c676d07c16b2b90bd1e92bee4b73d1978f236aa6733ebcd958a906b32d8937c3b114f7e9dcaa43db09ce7e955862104e9f70ffefad01ccb9dea45cf5f5b7eb864e0f4921f64bbdfac7c944a6c15a44d1674dc4a6160555c28de528a6a53d47120a6821159a39df415b5", 0xb8}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="1591102cffad20241e31ea186062edf007e53d57", 0x14}, {&(0x7f00000018c0)="3b7c17300ab5c3efb0f01d8647322afb8bee98d410d93132c4c02e643548b5170061ffe3ead20803a075a5c809df36681dc62e7b7e5007ebdd4cbf711888c388530f8fa82d87d25d0204baa554c9a1e141a39c358c12c7e2c6c425b689d7602f3c67167a56934761405802f21f5eae30126cf2670e3a451f2877b4407795b37398969e122821ee30dc93e32b330cad960f19395ad3d180cc801cfc371c6c048e0bc0abff8fb1375cbf", 0xa9}, {&(0x7f0000001980)="9d7c9b3e192d1d6b9997577ad236c43c14f10274f70ada3f0818e26d40b578941f60e1ddde2c3222286caac6f8c081eeb7308eae29ebd183684281cd0b7d919165216e4fa60ca5265ac957150e01eec571f7a4aef8216cb6470fe110c17fe16a271fa0db1d405de1f81405a33df143e1b930520d6a08ea510b487e9f66b1be107fecee26988ae3e0281cb11b2935a21d57533062520bfd1c5c", 0x99}], 0x7, &(0x7f0000001c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @rr={0x7, 0x13, 0x2d, [@private=0xa010100, @loopback, @broadcast, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0xa1, 0x1, 0x2, [{@remote, 0x4292}, {@rand_addr=0x64010100, 0x8000}]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x90, [@empty, @local, @private=0xa010102, @multicast2, @multicast1, @broadcast, @local, @empty, @empty, @multicast1]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x1, 0xd, "727fead813ee6314d8f599"}, {0x1, 0x4, "5415"}]}, @end, @ssrr={0x89, 0x7, 0xf0, [@remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x44}}}}], 0x148}, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x22048005) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0), 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000680), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) 1.912739548s ago: executing program 2 (id=1826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000002000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000007a417cd60fd70000000000657100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="25d4ae7c54638ea3e580c1daead91d96d552a2435f9073cf116673d4a9b57287ea5c0c42f4ccc5e49f6c03744289f5b4e9642abf6f646a5037a237f929d9f1c91b3d6cd88de90bbda0fbfafc1fe810823d4fde316656c4114fcf894dafb7dee36dcf69f278d7d1c1dd4376e6def9cb82050000000000000035cfd6280abd193f43dc7c18e005bb67a4da858d4adcacdbb0f3cf362dd451fd18d23dd71243ccb5fa64db3b1f6ff62b58e6e24994f6fd2d03ced29cec428ce0b7cd400e65c09f7fba851bc5af50370100", @ANYRES8=r1, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) recvmsg(r7, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNSETIFF(r4, 0xb701, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100), 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.904076369s ago: executing program 0 (id=1834): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000000)=[{&(0x7f0000000040)='r', 0x200420}], 0x1}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000600)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={0x1, 0x58, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000180)="931951cb1825e797d8c332a0ff1d184b0e03df1d16fc1745efae000cc64096ed1923add44933e855fdcf3d017793ccac6c1920a7db71010ea8ba937789bbc8f4aeced3492694d3d414ce3bbd239125137f79200b025c40e966959a9e25ba5158668257f8fb5a60865892fe239855facb369674aefa42e00ef3cda4a5586f36031d486df6fef2339b16115c808fad3b696426a0c3eb8521147fd1cbc97de69287c4f39dd2271183b5bce5be094a22f37fca48c793c8c213f4669269aed99e0d2043884ab4ec5567a79e37aa1d06", 0xcd}, {&(0x7f0000000280)="bb053ea105962f545155bfc23dc11c546dd04a28e0319830e57c3b49ce49087596c7c213601736c578a7005347181ba5b25bbbdb437455ccdf2e04f57484688bf4daccf4acb545061432f80ef7fd47f4c4cbe4bb053eb22f6ee2f1f562bf96dace531654b95a0131a71b0e9a11de3b94adfb32aecb3a9f67ffeb09620d06dd0755b6f834bb051b528269dfec3939c273e9c297262f52b2eda9dcf4e449bc24752873893f06463582dff26b26b488e5b728cabd33256b2dc1a1c65dbf76f7a1c69ce68feddfac329ea97082868d654c25da9203dafa9e32e37e476cf5099256", 0xdf}, {&(0x7f0000000480)="02d84e3b03c2e54ba6e096c7191abb93ee51a294319c9c35b4933863fc6f65e212bde46187b5b87d0e606a746a890dab0d6eb1c86919613e6a1438955f844593e94c5ebeae7e20370be393b5d0f20c676d07c16b2b90bd1e92bee4b73d1978f236aa6733ebcd958a906b32d8937c3b114f7e9dcaa43db09ce7e955862104e9f70ffefad01ccb9dea45cf5f5b7eb864e0f4921f64bbdfac7c944a6c15a44d1674dc4a6160555c28de528a6a53d47120a6821159a39df415b5", 0xb8}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="1591102cffad20241e31ea186062edf007e53d57", 0x14}, {&(0x7f00000018c0)="3b7c17300ab5c3efb0f01d8647322afb8bee98d410d93132c4c02e643548b5170061ffe3ead20803a075a5c809df36681dc62e7b7e5007ebdd4cbf711888c388530f8fa82d87d25d0204baa554c9a1e141a39c358c12c7e2c6c425b689d7602f3c67167a56934761405802f21f5eae30126cf2670e3a451f2877b4407795b37398969e122821ee30dc93e32b330cad960f19395ad3d180cc801cfc371c6c048e0bc0abff8fb1375cbf", 0xa9}, {&(0x7f0000001980)="9d7c9b3e192d1d6b9997577ad236c43c14f10274f70ada3f0818e26d40b578941f60e1ddde2c3222286caac6f8c081eeb7308eae29ebd183684281cd0b7d919165216e4fa60ca5265ac957150e01eec571f7a4aef8216cb6470fe110c17fe16a271fa0db1d405de1f81405a33df143e1b930520d6a08ea510b487e9f66b1be107fecee26988ae3e0281cb11b2935a21d57533062520bfd1c5c", 0x99}], 0x7, &(0x7f0000001c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @rr={0x7, 0x13, 0x2d, [@private=0xa010100, @loopback, @broadcast, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0xa1, 0x1, 0x2, [{@remote, 0x4292}, {@rand_addr=0x64010100, 0x8000}]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x90, [@empty, @local, @private=0xa010102, @multicast2, @multicast1, @broadcast, @local, @empty, @empty, @multicast1]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x1, 0xb, "727fead813ee6314d8"}, {0x1, 0x4, "5415"}]}, @end, @ssrr={0x89, 0x7, 0xf0, [@remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x44}}}}], 0x140}, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x22048005) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0), 0x0) socket$kcm(0x2, 0x1, 0x84) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000680), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x1) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r13, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002000)={{r11, 0xffffffffffffffff}, &(0x7f0000001f80), &(0x7f0000001fc0)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x16, 0x8, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x1, 0x0, 0x2, 0x6, 0x6, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f05}, @map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc866}]}, &(0x7f0000000640)='GPL\x00', 0x7fffffff, 0xd7, &(0x7f0000001e00)=""/215, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, r13, 0x8, &(0x7f0000001f00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001f40)={0x0, 0x5, 0x6c, 0x8}, 0x10, r3, r7, 0x0, &(0x7f0000002040)=[r14, r11], 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0xfe33) 1.783604862s ago: executing program 3 (id=1827): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, r0}, 0x38) (fail_nth: 1) 1.358346637s ago: executing program 3 (id=1828): sendmsg$inet(0xffffffffffffffff, 0x0, 0x8840) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_clone(0x22400, &(0x7f0000000080)="abbe17e803e2fe7692e20f40b0ae3653645d529ef0dd5f9b25b9a1592f3593cc8482eba9e171f77f48371cf1ee5376dc33b328fd2938fd1df67b7ee25ae3e79272f29c42b1d62aa6e014276f604b8d039b4ea16330f58e3bf165fc1aad04c01d87e6780e0f2a934d82fae0b528bbe503b79ef0bb0602c5a2b974f5739ea46d412237949f55727e1e808dac60f9ed581e3f771cbb6ff9fc4522f3f0ee4f7a941b4b2711ec53850e", 0xa7, &(0x7f0000000200), &(0x7f00000003c0), &(0x7f00000006c0)="4e8670b7bcdde847f88f02d956501a7483c55a99556453cbe50271afe799197f99cf7891ade7daf58e27d86dd97e96cf61a64435f7f385d0af3f3d831e3a7cc4dc1fe9218dee206004d605388085347e82e3f770787d7196fc9f80a72b20937e8cb978d206966f2adf12dc6133f67bc4806ef9dab7129d8d1a69aef862303febd296acde4893597e8ac85d596ba6d01fe6ac8ec216a35881ec96df9efedf4ee316262c0748d9cc0f") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.204713981s ago: executing program 1 (id=1829): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) 828.417003ms ago: executing program 0 (id=1830): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) 782.385085ms ago: executing program 1 (id=1831): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x8, 0xf, 0x3, 0x0, 0x7, 0x30000, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa51b, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x14102, 0x6, 0xfffffffb, 0x8, 0x5, 0x0, 0x7, 0x0, 0x3, 0x0, 0xd48c}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 707.944837ms ago: executing program 2 (id=1832): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 425.765536ms ago: executing program 1 (id=1833): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, r0}, 0x38) 318.10979ms ago: executing program 0 (id=1835): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x2d, 0x0, 0x1, 0x2}, 0x28) socket$kcm(0x1e, 0x5, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) syz_clone(0x2080, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) write$cgroup_pid(r3, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) 316.59733ms ago: executing program 3 (id=1836): socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000f900850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8c, 0x0, 0x0, 0x2, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x1, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r6}, 0x4) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x7e8166965e22236a) 25.949529ms ago: executing program 0 (id=1837): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x20000000}, 0x80, 0x0, 0x0, 0x9, 0x9, 0xd, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x4e}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@const={0x8, 0x0, 0x0, 0xa, 0x3}, @enum64={0xd, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x2, 0x401, 0x4}, {0x1, 0xffffffff, 0x8}, {0x2, 0x80000000, 0x2}, {0x2, 0xdc6a, 0x5}, {0x6, 0xff, 0x4}, {0x7, 0x0, 0x3}]}, @enum={0x4, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x1ff}, {0xd, 0x4}, {0x5, 0x77}, {0x7, 0x1}, {0x8, 0x101}, {0x7, 0x401}, {0x5, 0x8}, {0xe}]}]}, {0x0, [0x5f, 0x61, 0x0, 0x30, 0x61]}}, &(0x7f00000007c0)=""/121, 0xcb, 0x79, 0x1, 0x6}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000180081054e81f782db4cb904021d00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b300277ce06bbace8017cbec4c2ee5a7cef409f113d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dc7923fae94a2c5e23df63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ee4edef3d93452a92954b43370e000100000000000003e543", 0xd8}], 0x1}, 0x448c0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000040)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 1 (id=1838): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000000)=[{&(0x7f0000000040)='r', 0x200420}], 0x1}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000600)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={0x1, 0x58, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000180)="931951cb1825e797d8c332a0ff1d184b0e03df1d16fc1745efae000cc64096ed1923add44933e855fdcf3d017793ccac6c1920a7db71010ea8ba937789bbc8f4aeced3492694d3d414ce3bbd239125137f79200b025c40e966959a9e25ba5158668257f8fb5a60865892fe239855facb369674aefa42e00ef3cda4a5586f36031d486df6fef2339b16115c808fad3b696426a0c3eb8521147fd1cbc97de69287c4f39dd2271183b5bce5be094a22f37fca48c793c8c213f4669269aed99e0d2043884ab4ec5567a79e37aa1d06", 0xcd}, {&(0x7f0000000280)="bb053ea105962f545155bfc23dc11c546dd04a28e0319830e57c3b49ce49087596c7c213601736c578a7005347181ba5b25bbbdb437455ccdf2e04f57484688bf4daccf4acb545061432f80ef7fd47f4c4cbe4bb053eb22f6ee2f1f562bf96dace531654b95a0131a71b0e9a11de3b94adfb32aecb3a9f67ffeb09620d06dd0755b6f834bb051b528269dfec3939c273e9c297262f52b2eda9dcf4e449bc24752873893f06463582dff26b26b488e5b728cabd33256b2dc1a1c65dbf76f7a1c69ce68feddfac329ea97082868d654c25da9203dafa9e32e37e476cf5099256", 0xdf}, {&(0x7f0000000480)="02d84e3b03c2e54ba6e096c7191abb93ee51a294319c9c35b4933863fc6f65e212bde46187b5b87d0e606a746a890dab0d6eb1c86919613e6a1438955f844593e94c5ebeae7e20370be393b5d0f20c676d07c16b2b90bd1e92bee4b73d1978f236aa6733ebcd958a906b32d8937c3b114f7e9dcaa43db09ce7e955862104e9f70ffefad01ccb9dea45cf5f5b7eb864e0f4921f64bbdfac7c944a6c15a44d1674dc4a6160555c28de528a6a53d47120a6821159a39df415b5", 0xb8}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="1591102cffad20241e31ea186062edf007e53d57", 0x14}, {&(0x7f00000018c0)="3b7c17300ab5c3efb0f01d8647322afb8bee98d410d93132c4c02e643548b5170061ffe3ead20803a075a5c809df36681dc62e7b7e5007ebdd4cbf711888c388530f8fa82d87d25d0204baa554c9a1e141a39c358c12c7e2c6c425b689d7602f3c67167a56934761405802f21f5eae30126cf2670e3a451f2877b4407795b37398969e122821ee30dc93e32b330cad960f19395ad3d180cc801cfc371c6c048e0bc0abff8fb1375cbf", 0xa9}, {&(0x7f0000001980)="9d7c9b3e192d1d6b9997577ad236c43c14f10274f70ada3f0818e26d40b578941f60e1ddde2c3222286caac6f8c081eeb7308eae29ebd183684281cd0b7d919165216e4fa60ca5265ac957150e01eec571f7a4aef8216cb6470fe110c17fe16a271fa0db1d405de1f81405a33df143e1b930520d6a08ea510b487e9f66b1be107fecee26988ae3e0281cb11b2935a21d57533062520bfd1c5c", 0x99}], 0x7, &(0x7f0000001c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @rr={0x7, 0x13, 0x2d, [@private=0xa010100, @loopback, @broadcast, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0xa1, 0x1, 0x2, [{@remote, 0x4292}, {@rand_addr=0x64010100, 0x8000}]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x90, [@empty, @local, @private=0xa010102, @multicast2, @multicast1, @broadcast, @local, @empty, @empty, @multicast1]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x1, 0xd, "727fead813ee6314d8f599"}, {0x1, 0x4, "5415"}]}, @end, @ssrr={0x89, 0x7, 0xf0, [@remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x44}}}}], 0x148}, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x22048005) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0), 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000680), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): sg+0x8d0/0xbf0 [ 178.219864][ T7803] ? netlink_getsockopt+0x590/0x590 [ 178.225058][ T7803] ? aa_sock_msg_perm+0x94/0x150 [ 178.229998][ T7803] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.235276][ T7803] ? security_socket_sendmsg+0x80/0xa0 [ 178.240730][ T7803] ? netlink_getsockopt+0x590/0x590 [ 178.245933][ T7803] ____sys_sendmsg+0x5ba/0x960 [ 178.250697][ T7803] ? __asan_memset+0x22/0x40 [ 178.255281][ T7803] ? __sys_sendmsg_sock+0x30/0x30 [ 178.260297][ T7803] ? __import_iovec+0x5f2/0x850 [ 178.265143][ T7803] ? import_iovec+0x73/0xa0 [ 178.269669][ T7803] ___sys_sendmsg+0x2a6/0x360 [ 178.274342][ T7803] ? get_pid_task+0x20/0x1e0 [ 178.278937][ T7803] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.283710][ T7803] ? __lock_acquire+0x7d40/0x7d40 [ 178.288750][ T7803] __se_sys_sendmsg+0x1c2/0x2b0 [ 178.293599][ T7803] ? __x64_sys_sendmsg+0x80/0x80 [ 178.298544][ T7803] ? lockdep_hardirqs_on+0x98/0x150 [ 178.303741][ T7803] do_syscall_64+0x55/0xb0 [ 178.308154][ T7803] ? clear_bhb_loop+0x40/0x90 [ 178.312820][ T7803] ? clear_bhb_loop+0x40/0x90 [ 178.317488][ T7803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.323377][ T7803] RIP: 0033:0x7f5c80d9ce59 [ 178.327788][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.347385][ T7803] RSP: 002b:00007f5c7eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.355790][ T7803] RAX: ffffffffffffffda RBX: 00007f5c81015fa0 RCX: 00007f5c80d9ce59 [ 178.363751][ T7803] RDX: 0000000020000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 178.371717][ T7803] RBP: 00007f5c7eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.379684][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.387648][ T7803] R13: 00007f5c81016038 R14: 00007f5c81015fa0 R15: 00007ffe484722a8 [ 178.395629][ T7803] [ 178.413070][ T7803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.570131][ T7812] FAULT_INJECTION: forcing a failure. [ 178.570131][ T7812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.591343][ T7814] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 178.599313][ T7812] CPU: 0 PID: 7812 Comm: syz.3.703 Not tainted syzkaller #0 [ 178.606620][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.616683][ T7812] Call Trace: [ 178.619969][ T7812] [ 178.622904][ T7812] dump_stack_lvl+0x18c/0x250 [ 178.627583][ T7812] ? show_regs_print_info+0x20/0x20 [ 178.632780][ T7812] ? load_image+0x420/0x420 [ 178.637290][ T7812] ? __might_fault+0xaa/0x120 [ 178.641964][ T7812] ? __lock_acquire+0x7d40/0x7d40 [ 178.646996][ T7812] should_fail_ex+0x39d/0x4d0 [ 178.651681][ T7812] _copy_from_user+0x2f/0xe0 [ 178.656275][ T7812] ___sys_sendmsg+0x1c7/0x360 [ 178.660950][ T7812] ? get_pid_task+0x20/0x1e0 [ 178.665541][ T7812] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.670316][ T7812] ? __lock_acquire+0x7d40/0x7d40 [ 178.675350][ T7812] __se_sys_sendmsg+0x1c2/0x2b0 [ 178.680200][ T7812] ? __x64_sys_sendmsg+0x80/0x80 [ 178.685146][ T7812] ? lockdep_hardirqs_on+0x98/0x150 [ 178.690351][ T7812] do_syscall_64+0x55/0xb0 [ 178.694763][ T7812] ? clear_bhb_loop+0x40/0x90 [ 178.699432][ T7812] ? clear_bhb_loop+0x40/0x90 [ 178.704102][ T7812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.709999][ T7812] RIP: 0033:0x7f5c80d9ce59 [ 178.714410][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.734014][ T7812] RSP: 002b:00007f5c7eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.742432][ T7812] RAX: ffffffffffffffda RBX: 00007f5c81015fa0 RCX: 00007f5c80d9ce59 [ 178.750399][ T7812] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 178.758366][ T7812] RBP: 00007f5c7eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.766337][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.774300][ T7812] R13: 00007f5c81016038 R14: 00007f5c81015fa0 R15: 00007ffe484722a8 [ 178.782277][ T7812] [ 178.904665][ T7819] netlink: 'syz.1.702': attribute type 8 has an invalid length. [ 179.477345][ T7832] netlink: 'syz.2.708': attribute type 10 has an invalid length. [ 179.485873][ T7832] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 179.925955][ T7843] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 179.935410][ T7843] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.619984][ T7852] __nla_validate_parse: 11 callbacks suppressed [ 180.620000][ T7852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.717'. [ 180.645622][ T7852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.717'. [ 180.687959][ T7852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.717'. [ 180.895057][ T7856] netlink: 'syz.2.718': attribute type 8 has an invalid length. [ 180.923231][ T7856] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.718'. [ 181.059666][ T7863] FAULT_INJECTION: forcing a failure. [ 181.059666][ T7863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.075404][ T7863] CPU: 0 PID: 7863 Comm: syz.1.721 Not tainted syzkaller #0 [ 181.082762][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.092874][ T7863] Call Trace: [ 181.096195][ T7863] [ 181.099179][ T7863] dump_stack_lvl+0x18c/0x250 [ 181.103920][ T7863] ? show_regs_print_info+0x20/0x20 [ 181.109180][ T7863] ? load_image+0x420/0x420 [ 181.113744][ T7863] ? __lock_acquire+0x7d40/0x7d40 [ 181.118824][ T7863] ? snprintf+0xe9/0x140 [ 181.123130][ T7863] should_fail_ex+0x39d/0x4d0 [ 181.127877][ T7863] _copy_to_user+0x2f/0xa0 [ 181.132356][ T7863] simple_read_from_buffer+0xe7/0x150 [ 181.137786][ T7863] proc_fail_nth_read+0x1e8/0x260 [ 181.142857][ T7863] ? proc_fault_inject_write+0x360/0x360 [ 181.148523][ T7863] ? fsnotify_perm+0x271/0x5e0 [ 181.153299][ T7863] ? proc_fault_inject_write+0x360/0x360 [ 181.158957][ T7863] vfs_read+0x28b/0x970 [ 181.163142][ T7863] ? kernel_read+0x1e0/0x1e0 [ 181.167759][ T7863] ? __fget_files+0x28/0x4b0 [ 181.172374][ T7863] ? __fget_files+0x28/0x4b0 [ 181.176977][ T7863] ? __fget_files+0x43d/0x4b0 [ 181.181687][ T7863] ? __fdget_pos+0x2a3/0x330 [ 181.186286][ T7863] ? ksys_read+0x75/0x260 [ 181.190637][ T7863] ksys_read+0x150/0x260 [ 181.194903][ T7863] ? vfs_write+0x990/0x990 [ 181.199348][ T7863] ? lockdep_hardirqs_on+0x98/0x150 [ 181.204570][ T7863] do_syscall_64+0x55/0xb0 [ 181.209083][ T7863] ? clear_bhb_loop+0x40/0x90 [ 181.213774][ T7863] ? clear_bhb_loop+0x40/0x90 [ 181.218469][ T7863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.224373][ T7863] RIP: 0033:0x7f985555d68e [ 181.228807][ T7863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.248437][ T7863] RSP: 002b:00007f985641efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.256868][ T7863] RAX: ffffffffffffffda RBX: 00007f985641f6c0 RCX: 00007f985555d68e [ 181.264851][ T7863] RDX: 000000000000000f RSI: 00007f985641f0a0 RDI: 0000000000000004 [ 181.272834][ T7863] RBP: 00007f985641f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.280816][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.288793][ T7863] R13: 00007f9855816038 R14: 00007f9855815fa0 R15: 00007ffe05fb01e8 [ 181.296810][ T7863] [ 181.638364][ T7880] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 181.646381][ T7880] netlink: 152 bytes leftover after parsing attributes in process `syz.1.724'. [ 181.661294][ T7880] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 181.789313][ T7885] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 181.797142][ T7885] netlink: 152 bytes leftover after parsing attributes in process `syz.2.727'. [ 181.809218][ T7885] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 182.778387][ T7905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.732'. [ 182.875080][ T7908] netlink: 'syz.0.735': attribute type 8 has an invalid length. [ 182.927866][ T7908] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.735'. [ 183.072195][ T7915] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 183.080341][ T7915] netlink: 152 bytes leftover after parsing attributes in process `syz.1.737'. [ 183.091152][ T7915] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.871040][ T7928] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 183.879098][ T7928] netlink: 152 bytes leftover after parsing attributes in process `syz.0.740'. [ 183.895658][ T7928] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 184.313752][ T7949] netlink: 'syz.1.749': attribute type 21 has an invalid length. [ 184.430361][ T7950] netlink: 'syz.3.748': attribute type 8 has an invalid length. [ 184.660935][ T7958] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 184.672577][ T7958] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 184.714385][ T7960] netlink: 'syz.2.751': attribute type 2 has an invalid length. [ 184.724732][ T7960] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 184.817126][ T7962] bridge0: port 3(hsr_slave_1) entered blocking state [ 184.824827][ T7962] bridge0: port 3(hsr_slave_1) entered disabled state [ 184.837640][ T7962] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 184.856106][ T7962] team0: Device nlmon0 is of different type [ 185.655594][ T7994] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 185.671966][ T7994] __nla_validate_parse: 7 callbacks suppressed [ 185.671983][ T7994] netlink: 152 bytes leftover after parsing attributes in process `syz.1.760'. [ 185.698545][ T7994] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 185.716221][ T7998] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 185.727586][ T7996] FAULT_INJECTION: forcing a failure. [ 185.727586][ T7996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.748761][ T7996] CPU: 0 PID: 7996 Comm: syz.3.765 Not tainted syzkaller #0 [ 185.756123][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.766218][ T7996] Call Trace: [ 185.769521][ T7996] [ 185.772473][ T7996] dump_stack_lvl+0x18c/0x250 [ 185.777267][ T7996] ? show_regs_print_info+0x20/0x20 [ 185.782488][ T7996] ? load_image+0x420/0x420 [ 185.787004][ T7996] ? __might_fault+0xaa/0x120 [ 185.791698][ T7996] ? __lock_acquire+0x7d40/0x7d40 [ 185.796737][ T7996] should_fail_ex+0x39d/0x4d0 [ 185.801433][ T7996] _copy_from_user+0x2f/0xe0 [ 185.806043][ T7996] ___sys_sendmsg+0x1c7/0x360 [ 185.810728][ T7996] ? get_pid_task+0x20/0x1e0 [ 185.815334][ T7996] ? __sys_sendmsg+0x2a0/0x2a0 [ 185.820135][ T7996] ? __lock_acquire+0x7d40/0x7d40 [ 185.825203][ T7996] __se_sys_sendmsg+0x1c2/0x2b0 [ 185.830075][ T7996] ? __x64_sys_sendmsg+0x80/0x80 [ 185.835042][ T7996] ? lockdep_hardirqs_on+0x98/0x150 [ 185.840253][ T7996] do_syscall_64+0x55/0xb0 [ 185.844671][ T7996] ? clear_bhb_loop+0x40/0x90 [ 185.849355][ T7996] ? clear_bhb_loop+0x40/0x90 [ 185.854037][ T7996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.859942][ T7996] RIP: 0033:0x7f5c80d9ce59 [ 185.864365][ T7996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.883983][ T7996] RSP: 002b:00007f5c7eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.892409][ T7996] RAX: ffffffffffffffda RBX: 00007f5c81015fa0 RCX: 00007f5c80d9ce59 [ 185.900383][ T7996] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 185.908357][ T7996] RBP: 00007f5c7eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 185.916329][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.924300][ T7996] R13: 00007f5c81016038 R14: 00007f5c81015fa0 R15: 00007ffe484722a8 [ 185.932302][ T7996] [ 186.070923][ T8001] netlink: 'syz.2.766': attribute type 8 has an invalid length. [ 186.086778][ T8001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.766'. [ 186.129482][ T8012] netlink: 'syz.0.769': attribute type 4 has an invalid length. [ 186.220428][ T8016] netlink: 152 bytes leftover after parsing attributes in process `syz.3.768'. [ 186.230214][ T8016] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.451804][ T8021] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.772'. [ 187.135316][ T8041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.780'. [ 187.146331][ T8041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.780'. [ 187.159940][ T8041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.780'. [ 187.209536][ T8048] netlink: 152 bytes leftover after parsing attributes in process `syz.1.779'. [ 187.219299][ T8048] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 187.888791][ T8054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.783'. [ 187.979461][ T8056] netlink: 156 bytes leftover after parsing attributes in process `syz.1.784'. [ 188.253205][ T8071] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.873381][ T8099] validate_nla: 6 callbacks suppressed [ 189.873399][ T8099] netlink: 'syz.0.793': attribute type 10 has an invalid length. [ 189.892240][ T8099] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.971628][ T8103] FAULT_INJECTION: forcing a failure. [ 189.971628][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 189.984698][ T8103] CPU: 1 PID: 8103 Comm: syz.2.797 Not tainted syzkaller #0 [ 189.992002][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.002069][ T8103] Call Trace: [ 190.005360][ T8103] [ 190.008300][ T8103] dump_stack_lvl+0x18c/0x250 [ 190.012998][ T8103] ? show_regs_print_info+0x20/0x20 [ 190.018212][ T8103] ? load_image+0x420/0x420 [ 190.022724][ T8103] ? mark_lock+0x94/0x320 [ 190.027072][ T8103] ? mark_lock+0x94/0x320 [ 190.031423][ T8103] should_fail_ex+0x39d/0x4d0 [ 190.036121][ T8103] should_failslab+0x9/0x20 [ 190.040654][ T8103] slab_pre_alloc_hook+0x59/0x310 [ 190.045698][ T8103] kmem_cache_alloc_node+0x60/0x320 [ 190.051004][ T8103] ? __alloc_skb+0x103/0x2c0 [ 190.055620][ T8103] __alloc_skb+0x103/0x2c0 [ 190.060054][ T8103] tipc_buf_acquire+0x2b/0xe0 [ 190.064748][ T8103] tipc_named_withdraw+0x1db/0x760 [ 190.069887][ T8103] tipc_nametbl_withdraw+0xcc/0x280 [ 190.075096][ T8103] ? tipc_group_self+0x26/0x1c0 [ 190.079968][ T8103] tipc_sk_leave+0x453/0x4e0 [ 190.084579][ T8103] ? __tipc_shutdown+0x1530/0x1530 [ 190.089711][ T8103] ? _local_bh_enable+0xa0/0xa0 [ 190.094603][ T8103] tipc_release+0x328/0x2160 [ 190.099213][ T8103] ? ima_get_current_hash_algo+0x10/0x10 [ 190.104867][ T8103] ? tipc_sock_destruct+0x180/0x180 [ 190.110079][ T8103] ? down_write+0x16e/0x200 [ 190.114599][ T8103] ? down_read_killable+0x340/0x340 [ 190.119828][ T8103] sock_close+0xbd/0x230 [ 190.124087][ T8103] ? sock_mmap+0xa0/0xa0 [ 190.128343][ T8103] __fput+0x234/0x970 [ 190.132361][ T8103] __se_sys_close+0x15f/0x220 [ 190.137077][ T8103] do_syscall_64+0x55/0xb0 [ 190.141522][ T8103] ? clear_bhb_loop+0x40/0x90 [ 190.146219][ T8103] ? clear_bhb_loop+0x40/0x90 [ 190.150920][ T8103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.156849][ T8103] RIP: 0033:0x7f4561f9ce59 [ 190.161289][ T8103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.180913][ T8103] RSP: 002b:00007f4562efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 190.189350][ T8103] RAX: ffffffffffffffda RBX: 00007f4562215fa0 RCX: 00007f4561f9ce59 [ 190.197340][ T8103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 190.205322][ T8103] RBP: 00007f4562efd090 R08: 0000000000000000 R09: 0000000000000000 [ 190.213304][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.221283][ T8103] R13: 00007f4562216038 R14: 00007f4562215fa0 R15: 00007ffc95e93188 [ 190.229282][ T8103] [ 190.232417][ T8103] tipc: Withdrawal distribution failure [ 190.452150][ T8112] netlink: 'syz.3.800': attribute type 39 has an invalid length. [ 190.478584][ T8116] netlink: 'syz.1.798': attribute type 8 has an invalid length. [ 190.523216][ T8117] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 190.538824][ T8117] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.390802][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 191.392954][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 191.396960][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 191.402916][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 191.750644][ T8150] netlink: 'syz.0.810': attribute type 10 has an invalid length. [ 191.777839][ T8150] __nla_validate_parse: 5 callbacks suppressed [ 191.777856][ T8150] netlink: 152 bytes leftover after parsing attributes in process `syz.0.810'. [ 191.811765][ T8150] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.990566][ T8164] netlink: 'syz.1.814': attribute type 8 has an invalid length. [ 191.999147][ T8164] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.814'. [ 192.014823][ T8165] netlink: 'syz.2.813': attribute type 10 has an invalid length. [ 192.023149][ T8165] netlink: 152 bytes leftover after parsing attributes in process `syz.2.813'. [ 192.033036][ T8165] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.505969][ T8167] netlink: 'syz.0.815': attribute type 11 has an invalid length. [ 192.520733][ T8167] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 192.529749][ T8167] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.815'. [ 192.654405][ T8169] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.816'. [ 192.702702][ T8167] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 192.711881][ T8167] netlink: 2 bytes leftover after parsing attributes in process `syz.0.815'. [ 192.860949][ T8174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.819'. [ 193.029418][ T8176] can: request_module (can-proto-4) failed. [ 193.167213][ T8184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.823'. [ 193.183181][ T8184] team0: entered promiscuous mode [ 193.189629][ T8184] team_slave_0: entered promiscuous mode [ 193.197287][ T8184] team_slave_1: entered promiscuous mode [ 193.203641][ T8184] geneve1: entered promiscuous mode [ 193.211801][ T8184] bridge0: port 3(team0) entered blocking state [ 193.220873][ T8184] bridge0: port 3(team0) entered disabled state [ 193.229902][ T8184] team0: entered allmulticast mode [ 193.247968][ T8184] team_slave_0: entered allmulticast mode [ 193.271678][ T8184] team_slave_1: entered allmulticast mode [ 193.298520][ T8184] geneve1: entered allmulticast mode [ 193.307280][ T8184] bridge0: port 3(team0) entered blocking state [ 193.313854][ T8184] bridge0: port 3(team0) entered forwarding state [ 193.474852][ T8197] netlink: 152 bytes leftover after parsing attributes in process `syz.0.824'. [ 193.490998][ T8197] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.598750][ T8199] netlink: 152 bytes leftover after parsing attributes in process `syz.1.825'. [ 193.608642][ T8199] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 194.491415][ T8225] team0: Device hsr_slave_0 failed to register rx_handler [ 194.673014][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.679630][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.234202][ T8252] validate_nla: 6 callbacks suppressed [ 196.234224][ T8252] netlink: 'syz.2.841': attribute type 10 has an invalid length. [ 196.269414][ T8252] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.298497][ T8160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 196.457053][ T8259] netlink: 'syz.1.843': attribute type 10 has an invalid length. [ 196.483562][ T8259] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 197.161772][ T8271] netlink: 'syz.0.847': attribute type 8 has an invalid length. [ 197.187980][ T8271] __nla_validate_parse: 7 callbacks suppressed [ 197.187998][ T8271] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.847'. [ 198.406698][ T8295] FAULT_INJECTION: forcing a failure. [ 198.406698][ T8295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.435156][ T8296] netlink: 'syz.3.854': attribute type 10 has an invalid length. [ 198.470901][ T8295] CPU: 0 PID: 8295 Comm: syz.2.855 Not tainted syzkaller #0 [ 198.478270][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.488361][ T8295] Call Trace: [ 198.491671][ T8295] [ 198.494620][ T8295] dump_stack_lvl+0x18c/0x250 [ 198.499337][ T8295] ? show_regs_print_info+0x20/0x20 [ 198.504572][ T8295] ? load_image+0x420/0x420 [ 198.509112][ T8295] ? __lock_acquire+0x7d40/0x7d40 [ 198.514195][ T8295] ? __virt_addr_valid+0x18c/0x540 [ 198.519344][ T8295] should_fail_ex+0x39d/0x4d0 [ 198.524061][ T8295] _copy_from_user+0x2f/0xe0 [ 198.528435][ T8296] netlink: 152 bytes leftover after parsing attributes in process `syz.3.854'. [ 198.528672][ T8295] bpf_prog_test_run_skb+0x26c/0x18c0 [ 198.543019][ T8295] ? __fget_files+0x28/0x4b0 [ 198.547649][ T8295] ? __fget_files+0x28/0x4b0 [ 198.552289][ T8295] ? __fget_files+0x43d/0x4b0 [ 198.552568][ T8296] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 198.556993][ T8295] ? cpu_online+0x60/0x60 [ 198.557028][ T8295] bpf_prog_test_run+0x321/0x390 [ 198.557052][ T8295] __sys_bpf+0x49d/0x890 [ 198.585957][ T8295] ? bpf_link_show_fdinfo+0x390/0x390 [ 198.591380][ T8295] ? lock_chain_count+0x20/0x20 [ 198.596275][ T8295] __x64_sys_bpf+0x7c/0x90 [ 198.600728][ T8295] do_syscall_64+0x55/0xb0 [ 198.605187][ T8295] ? clear_bhb_loop+0x40/0x90 [ 198.609896][ T8295] ? clear_bhb_loop+0x40/0x90 [ 198.614608][ T8295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.620546][ T8295] RIP: 0033:0x7f4561f9ce59 [ 198.624993][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.644646][ T8295] RSP: 002b:00007f4562edc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.653215][ T8295] RAX: ffffffffffffffda RBX: 00007f4562216090 RCX: 00007f4561f9ce59 [ 198.663226][ T8295] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 198.671409][ T8295] RBP: 00007f4562edc090 R08: 0000000000000000 R09: 0000000000000000 [ 198.679847][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.687850][ T8295] R13: 00007f4562216128 R14: 00007f4562216090 R15: 00007ffc95e93188 [ 198.695888][ T8295] [ 198.710551][ T8292] FAULT_INJECTION: forcing a failure. [ 198.710551][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.730584][ T8292] CPU: 1 PID: 8292 Comm: syz.0.853 Not tainted syzkaller #0 [ 198.737946][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.748029][ T8292] Call Trace: [ 198.751333][ T8292] [ 198.754290][ T8292] dump_stack_lvl+0x18c/0x250 [ 198.759007][ T8292] ? show_regs_print_info+0x20/0x20 [ 198.764242][ T8292] ? load_image+0x420/0x420 [ 198.768779][ T8292] ? __lock_acquire+0x7d40/0x7d40 [ 198.773841][ T8292] ? snprintf+0xe9/0x140 [ 198.778129][ T8292] should_fail_ex+0x39d/0x4d0 [ 198.782852][ T8292] _copy_to_user+0x2f/0xa0 [ 198.787304][ T8292] simple_read_from_buffer+0xe7/0x150 [ 198.792724][ T8292] proc_fail_nth_read+0x1e8/0x260 [ 198.797799][ T8292] ? proc_fault_inject_write+0x360/0x360 [ 198.803474][ T8292] ? fsnotify_perm+0x271/0x5e0 [ 198.808278][ T8292] ? proc_fault_inject_write+0x360/0x360 [ 198.814391][ T8292] vfs_read+0x28b/0x970 [ 198.818605][ T8292] ? kernel_read+0x1e0/0x1e0 [ 198.823247][ T8292] ? __fget_files+0x28/0x4b0 [ 198.827897][ T8292] ? __fget_files+0x28/0x4b0 [ 198.832709][ T8292] ? __fget_files+0x43d/0x4b0 [ 198.837433][ T8292] ? __fdget_pos+0x2a3/0x330 [ 198.842064][ T8292] ? ksys_read+0x75/0x260 [ 198.846438][ T8292] ksys_read+0x150/0x260 [ 198.850808][ T8292] ? vfs_write+0x990/0x990 [ 198.855268][ T8292] ? lockdep_hardirqs_on+0x98/0x150 [ 198.860516][ T8292] do_syscall_64+0x55/0xb0 [ 198.864976][ T8292] ? clear_bhb_loop+0x40/0x90 [ 198.869684][ T8292] ? clear_bhb_loop+0x40/0x90 [ 198.874396][ T8292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.880322][ T8292] RIP: 0033:0x7f9c6ed5d68e [ 198.884783][ T8292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.904419][ T8292] RSP: 002b:00007f9c6fc8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.912870][ T8292] RAX: ffffffffffffffda RBX: 00007f9c6fc8b6c0 RCX: 00007f9c6ed5d68e [ 198.920875][ T8292] RDX: 000000000000000f RSI: 00007f9c6fc8b0a0 RDI: 0000000000000003 [ 198.928877][ T8292] RBP: 00007f9c6fc8b090 R08: 0000000000000000 R09: 0000000000000000 [ 198.936876][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.944980][ T8292] R13: 00007f9c6f016038 R14: 00007f9c6f015fa0 R15: 00007ffe093b88f8 [ 198.952996][ T8292] [ 198.969942][ T8301] netlink: 'syz.2.857': attribute type 10 has an invalid length. [ 198.984157][ T8301] netlink: 160 bytes leftover after parsing attributes in process `syz.2.857'. [ 198.997653][ T8301] bond_slave_1: entered promiscuous mode [ 199.004353][ T8301] bond_slave_1: entered allmulticast mode [ 199.014303][ T8302] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 199.046349][ T8302] netlink: 152 bytes leftover after parsing attributes in process `syz.1.856'. [ 199.108849][ T8302] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 199.448273][ T8315] netlink: 14 bytes leftover after parsing attributes in process `syz.2.862'. [ 199.497136][ T8316] netlink: 'syz.3.861': attribute type 8 has an invalid length. [ 199.505132][ T8316] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.861'. [ 199.800204][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.863'. [ 200.744860][ T8340] netlink: 'syz.0.869': attribute type 10 has an invalid length. [ 200.777966][ T8340] netlink: 152 bytes leftover after parsing attributes in process `syz.0.869'. [ 200.810563][ T8340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 200.843163][ T8344] netlink: 'syz.3.871': attribute type 10 has an invalid length. [ 200.874187][ T8344] hsr0: left promiscuous mode [ 201.066850][ T8350] netlink: 'syz.3.874': attribute type 8 has an invalid length. [ 201.077557][ T8350] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.874'. [ 201.104236][ T8353] netlink: 152 bytes leftover after parsing attributes in process `syz.2.873'. [ 201.121895][ T8353] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.596281][ T8369] FAULT_INJECTION: forcing a failure. [ 201.596281][ T8369] name failslab, interval 1, probability 0, space 0, times 0 [ 201.609947][ T8369] CPU: 0 PID: 8369 Comm: syz.0.882 Not tainted syzkaller #0 [ 201.617283][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.627389][ T8369] Call Trace: [ 201.630684][ T8369] [ 201.633620][ T8369] dump_stack_lvl+0x18c/0x250 [ 201.638307][ T8369] ? sctp_sendmsg+0x15d2/0x2910 [ 201.643147][ T8369] ? ___sys_sendmsg+0x2a6/0x360 [ 201.647984][ T8369] ? show_regs_print_info+0x20/0x20 [ 201.653169][ T8369] ? load_image+0x420/0x420 [ 201.657665][ T8369] should_fail_ex+0x39d/0x4d0 [ 201.662349][ T8369] should_failslab+0x9/0x20 [ 201.666857][ T8369] slab_pre_alloc_hook+0x59/0x310 [ 201.671886][ T8369] ? sctp_add_bind_addr+0x8c/0x360 [ 201.677008][ T8369] __kmem_cache_alloc_node+0x53/0x250 [ 201.682385][ T8369] ? sctp_add_bind_addr+0x8c/0x360 [ 201.687493][ T8369] kmalloc_trace+0x2a/0xe0 [ 201.691915][ T8369] sctp_add_bind_addr+0x8c/0x360 [ 201.696859][ T8369] sctp_copy_local_addr_list+0x315/0x4f0 [ 201.702496][ T8369] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 201.708214][ T8369] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 201.714283][ T8369] ? sctp_v6_is_any+0x64/0x70 [ 201.718991][ T8369] ? sctp_copy_one_addr+0x8c/0x350 [ 201.724657][ T8369] sctp_bind_addr_copy+0xb3/0x3c0 [ 201.729710][ T8369] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 201.736074][ T8369] sctp_connect_new_asoc+0x2f9/0x6a0 [ 201.741384][ T8369] ? __sctp_connect+0xd80/0xd80 [ 201.746245][ T8369] ? __local_bh_enable_ip+0x13a/0x1c0 [ 201.751622][ T8369] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 201.757183][ T8369] ? security_sctp_bind_connect+0x89/0xb0 [ 201.762906][ T8369] sctp_sendmsg+0x15d2/0x2910 [ 201.767596][ T8369] ? sctp_getsockopt+0xb60/0xb60 [ 201.772532][ T8369] ? aa_sk_perm+0x83c/0x970 [ 201.777035][ T8369] ? aa_af_perm+0x330/0x330 [ 201.781624][ T8369] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 201.788092][ T8369] ? sock_rps_record_flow+0x19/0x3f0 [ 201.793444][ T8369] ? inet_sendmsg+0xe9/0x2f0 [ 201.798084][ T8369] ? inet_send_prepare+0x260/0x260 [ 201.803216][ T8369] ____sys_sendmsg+0x5ba/0x960 [ 201.807985][ T8369] ? __lock_acquire+0x7d40/0x7d40 [ 201.813045][ T8369] ? __asan_memset+0x22/0x40 [ 201.817642][ T8369] ? __sys_sendmsg_sock+0x30/0x30 [ 201.822671][ T8369] ? __import_iovec+0x5f2/0x850 [ 201.827531][ T8369] ? import_iovec+0x73/0xa0 [ 201.832047][ T8369] ___sys_sendmsg+0x2a6/0x360 [ 201.836760][ T8369] ? __sys_sendmsg+0x2a0/0x2a0 [ 201.841564][ T8369] ? trace_call_bpf+0xc3/0x6c0 [ 201.846400][ T8369] __se_sys_sendmsg+0x1c2/0x2b0 [ 201.851276][ T8369] ? __x64_sys_sendmsg+0x80/0x80 [ 201.856230][ T8369] ? lockdep_hardirqs_on+0x98/0x150 [ 201.861449][ T8369] do_syscall_64+0x55/0xb0 [ 201.865867][ T8369] ? clear_bhb_loop+0x40/0x90 [ 201.870546][ T8369] ? clear_bhb_loop+0x40/0x90 [ 201.875255][ T8369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.881174][ T8369] RIP: 0033:0x7f9c6ed9ce59 [ 201.885593][ T8369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.905211][ T8369] RSP: 002b:00007f9c6fc8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.913626][ T8369] RAX: ffffffffffffffda RBX: 00007f9c6f015fa0 RCX: 00007f9c6ed9ce59 [ 201.921623][ T8369] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 201.929617][ T8369] RBP: 00007f9c6fc8b090 R08: 0000000000000000 R09: 0000000000000000 [ 201.937638][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.945605][ T8369] R13: 00007f9c6f016038 R14: 00007f9c6f015fa0 R15: 00007ffe093b88f8 [ 201.953680][ T8369] [ 202.075108][ T8373] validate_nla: 1 callbacks suppressed [ 202.075127][ T8373] netlink: 'syz.0.884': attribute type 33 has an invalid length. [ 202.146708][ T8377] netlink: 'syz.2.883': attribute type 16 has an invalid length. [ 202.156005][ T8377] netlink: 'syz.2.883': attribute type 3 has an invalid length. [ 202.179164][ T8379] FAULT_INJECTION: forcing a failure. [ 202.179164][ T8379] name failslab, interval 1, probability 0, space 0, times 0 [ 202.193502][ T8379] CPU: 1 PID: 8379 Comm: syz.0.886 Not tainted syzkaller #0 [ 202.200840][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.210922][ T8379] Call Trace: [ 202.214201][ T8379] [ 202.217125][ T8379] dump_stack_lvl+0x18c/0x250 [ 202.221806][ T8379] ? show_regs_print_info+0x20/0x20 [ 202.227011][ T8379] ? load_image+0x420/0x420 [ 202.231537][ T8379] ? __might_sleep+0xe0/0xe0 [ 202.236148][ T8379] ? __lock_acquire+0x7d40/0x7d40 [ 202.241193][ T8379] ? verify_lock_unused+0x140/0x140 [ 202.246403][ T8379] should_fail_ex+0x39d/0x4d0 [ 202.251090][ T8379] should_failslab+0x9/0x20 [ 202.255597][ T8379] slab_pre_alloc_hook+0x59/0x310 [ 202.260620][ T8379] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 202.266171][ T8379] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 202.271713][ T8379] __kmem_cache_alloc_node+0x53/0x250 [ 202.277087][ T8379] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 202.282639][ T8379] __kmalloc+0xa4/0x230 [ 202.286797][ T8379] bpf_prog_test_run_skb+0x245/0x18c0 [ 202.292170][ T8379] ? __fget_files+0x28/0x4b0 [ 202.296786][ T8379] ? __fget_files+0x28/0x4b0 [ 202.301393][ T8379] ? __fget_files+0x43d/0x4b0 [ 202.306087][ T8379] ? cpu_online+0x60/0x60 [ 202.310421][ T8379] bpf_prog_test_run+0x321/0x390 [ 202.315361][ T8379] __sys_bpf+0x49d/0x890 [ 202.319635][ T8379] ? bpf_link_show_fdinfo+0x390/0x390 [ 202.325059][ T8379] ? lock_chain_count+0x20/0x20 [ 202.329929][ T8379] __x64_sys_bpf+0x7c/0x90 [ 202.334377][ T8379] do_syscall_64+0x55/0xb0 [ 202.338798][ T8379] ? clear_bhb_loop+0x40/0x90 [ 202.343476][ T8379] ? clear_bhb_loop+0x40/0x90 [ 202.348151][ T8379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.354052][ T8379] RIP: 0033:0x7f9c6ed9ce59 [ 202.358462][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.378170][ T8379] RSP: 002b:00007f9c6fc8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.386593][ T8379] RAX: ffffffffffffffda RBX: 00007f9c6f015fa0 RCX: 00007f9c6ed9ce59 [ 202.394563][ T8379] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 202.402818][ T8379] RBP: 00007f9c6fc8b090 R08: 0000000000000000 R09: 0000000000000000 [ 202.411685][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.419855][ T8379] R13: 00007f9c6f016038 R14: 00007f9c6f015fa0 R15: 00007ffe093b88f8 [ 202.428646][ T8379] [ 202.944051][ T8394] netlink: 'syz.3.889': attribute type 10 has an invalid length. [ 202.972561][ T8394] __nla_validate_parse: 2 callbacks suppressed [ 202.972578][ T8394] netlink: 152 bytes leftover after parsing attributes in process `syz.3.889'. [ 203.065977][ T8394] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.844889][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 203.926448][ T8404] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 203.957855][ T8404] netlink: 152 bytes leftover after parsing attributes in process `syz.3.891'. [ 203.967665][ T8404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 204.115382][ T8412] netlink: 'syz.1.893': attribute type 8 has an invalid length. [ 204.123545][ T8412] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.893'. [ 204.369457][ T8419] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 204.427015][ T8419] team0 (unregistering): Port device team_slave_0 removed [ 204.464359][ T8419] team0 (unregistering): Port device team_slave_1 removed [ 204.492283][ T8419] team0 (unregistering): Port device geneve1 removed [ 204.500504][ T8419] veth1_vlan: left allmulticast mode [ 204.520313][ T8419] team0 (unregistering): Port device macvlan0 removed [ 204.938483][ T8429] netlink: 'syz.3.900': attribute type 10 has an invalid length. [ 204.967821][ T8429] netlink: 152 bytes leftover after parsing attributes in process `syz.3.900'. [ 204.977632][ T8429] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 208.411370][ T8459] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 208.432204][ T8459] netlink: 152 bytes leftover after parsing attributes in process `syz.0.906'. [ 208.444918][ T8459] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 208.477926][ T8461] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.904'. [ 208.569615][ T8464] netlink: 'syz.3.909': attribute type 8 has an invalid length. [ 208.577571][ T8464] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.909'. [ 208.941312][ T8472] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 208.949441][ T8472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.912'. [ 208.960896][ T8472] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 209.195827][ T8474] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.214787][ T8474] netlink: 'syz.0.913': attribute type 3 has an invalid length. [ 209.223302][ T8474] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.913'. [ 209.457121][ T8478] netlink: 'syz.3.915': attribute type 21 has an invalid length. [ 209.465608][ T8478] netlink: 156 bytes leftover after parsing attributes in process `syz.3.915'. [ 209.498577][ T8478] netlink: 'syz.3.915': attribute type 21 has an invalid length. [ 210.018378][ T8484] netlink: 'syz.0.916': attribute type 2 has an invalid length. [ 210.041055][ T8484] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 210.059720][ T8484] netlink: 152 bytes leftover after parsing attributes in process `syz.0.916'. [ 210.579075][ T8502] netlink: 'syz.1.921': attribute type 10 has an invalid length. [ 210.587418][ T8502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.921'. [ 210.597397][ T8502] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 210.674655][ T8503] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.920'. [ 211.295857][ T8508] netlink: 'syz.3.923': attribute type 8 has an invalid length. [ 211.318667][ T8508] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.923'. [ 212.178352][ T8523] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 212.739840][ T8531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.763088][ T8534] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 213.000873][ T8536] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 213.068181][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 213.793516][ T8546] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.861714][ T8546] validate_nla: 3 callbacks suppressed [ 213.861757][ T8546] netlink: 'syz.3.936': attribute type 3 has an invalid length. [ 213.910742][ T8551] netlink: 'syz.0.937': attribute type 8 has an invalid length. [ 213.931873][ T8546] __nla_validate_parse: 5 callbacks suppressed [ 213.931989][ T8546] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.936'. [ 213.957989][ T8551] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.937'. [ 214.297006][ T8555] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.941'. [ 214.320459][ T8555] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 214.645571][ T8562] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 214.660198][ T8562] netlink: 152 bytes leftover after parsing attributes in process `syz.2.942'. [ 214.672731][ T8562] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.225481][ T8569] netlink: 'syz.3.944': attribute type 29 has an invalid length. [ 215.235241][ T8569] netlink: 'syz.3.944': attribute type 3 has an invalid length. [ 215.250966][ T8569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.944'. [ 215.462805][ T8568] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.945'. [ 215.482176][ T8568] bridge_slave_1: default FDB implementation only supports local addresses [ 215.570123][ T8575] netlink: 'syz.2.946': attribute type 10 has an invalid length. [ 215.597230][ T8575] netlink: 152 bytes leftover after parsing attributes in process `syz.2.946'. [ 215.627490][ T8575] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.669097][ T8579] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.947'. [ 215.687951][ T8579] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 215.696129][ T8578] netlink: 'syz.3.948': attribute type 9 has an invalid length. [ 215.706668][ T8578] netlink: 399 bytes leftover after parsing attributes in process `syz.3.948'. [ 215.885247][ T8586] netlink: 'syz.0.949': attribute type 10 has an invalid length. [ 215.893620][ T8586] netlink: 152 bytes leftover after parsing attributes in process `syz.0.949'. [ 215.903522][ T8586] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.038967][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 216.424182][ T8589] netlink: 'syz.2.951': attribute type 8 has an invalid length. [ 216.705838][ T8591] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 216.976711][ T8593] netlink: 'syz.1.953': attribute type 4 has an invalid length. [ 217.132216][ T8602] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.054529][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 218.160156][ T8618] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.592016][ T8621] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 218.966991][ T8625] validate_nla: 3 callbacks suppressed [ 218.967048][ T8625] netlink: 'syz.2.970': attribute type 8 has an invalid length. [ 218.983916][ T8629] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 218.999302][ T8629] wg1: entered promiscuous mode [ 219.004434][ T8625] __nla_validate_parse: 6 callbacks suppressed [ 219.004468][ T8625] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.970'. [ 219.025691][ T8629] wg1: entered allmulticast mode [ 219.031754][ T8629] team0: Device wg1 is of different type [ 219.042135][ T8159] wlan1: Creating new IBSS network, BSSID c2:85:9f:90:fd:de [ 219.071930][ T8158] wlan1: Trigger new scan to find an IBSS to join [ 219.255609][ T8636] netlink: 'syz.3.964': attribute type 8 has an invalid length. [ 219.269534][ T8636] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.964'. [ 219.436743][ T8643] netlink: 'syz.1.966': attribute type 10 has an invalid length. [ 219.450027][ T8643] netlink: 152 bytes leftover after parsing attributes in process `syz.1.966'. [ 219.460258][ T8643] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 219.566010][ T8645] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 219.574023][ T8645] netlink: 152 bytes leftover after parsing attributes in process `syz.0.968'. [ 219.583994][ T8645] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 220.364747][ T8660] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 220.373238][ T8660] netlink: 152 bytes leftover after parsing attributes in process `syz.2.972'. [ 220.383413][ T8660] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 221.194070][ T8669] netlink: 'syz.1.976': attribute type 8 has an invalid length. [ 221.208407][ T8669] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.976'. [ 221.315039][ T8675] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 221.323153][ T8675] netlink: 152 bytes leftover after parsing attributes in process `syz.2.979'. [ 221.333282][ T8675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 221.352130][ T8676] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 221.360057][ T8676] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.978'. [ 222.033311][ T8160] wlan1: Trigger new scan to find an IBSS to join [ 222.655501][ T8699] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 222.663612][ T8699] netlink: 152 bytes leftover after parsing attributes in process `syz.0.987'. [ 222.678755][ T8699] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 222.968574][ T8157] wlan1: Creating new IBSS network, BSSID c2:57:e0:a8:e5:75 [ 223.476835][ T8707] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.988'. [ 223.527366][ T8711] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 223.555351][ T8712] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 224.481950][ T8722] validate_nla: 4 callbacks suppressed [ 224.481988][ T8722] netlink: 'syz.1.993': attribute type 9 has an invalid length. [ 224.498697][ T8722] __nla_validate_parse: 3 callbacks suppressed [ 224.498728][ T8722] netlink: 399 bytes leftover after parsing attributes in process `syz.1.993'. [ 224.557110][ T8726] netlink: 'syz.3.1001': attribute type 10 has an invalid length. [ 224.571263][ T8726] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1001'. [ 224.585809][ T8726] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 225.430334][ T8737] netlink: 'syz.0.1004': attribute type 10 has an invalid length. [ 225.438299][ T8737] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1004'. [ 225.456424][ T8737] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.410255][ T8749] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 226.425716][ T8749] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1009'. [ 226.453657][ T8749] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.607329][ T8753] netlink: 'syz.1.1000': attribute type 10 has an invalid length. [ 226.626943][ T8753] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1000'. [ 226.640080][ T8753] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 227.328950][ T79] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 227.436557][ T8760] netlink: 'syz.3.1005': attribute type 8 has an invalid length. [ 227.445886][ T8760] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1005'. [ 227.496068][ T8762] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 227.504081][ T8762] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1003'. [ 227.514191][ T8762] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 228.248136][ T8766] team0: left allmulticast mode [ 228.258580][ T8766] team_slave_0: left allmulticast mode [ 228.264477][ T8766] team_slave_1: left allmulticast mode [ 228.289344][ T8766] geneve1: left allmulticast mode [ 228.303898][ T8766] bridge0: port 3(team0) entered disabled state [ 228.376455][ T8766] bridge_slave_1: left allmulticast mode [ 228.384466][ T8766] bridge_slave_1: left promiscuous mode [ 228.400343][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.464526][ T8766] bridge_slave_0: left allmulticast mode [ 228.471113][ T8766] bridge_slave_0: left promiscuous mode [ 228.487139][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.826634][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 228.843656][ T8773] netlink: 'syz.0.1015': attribute type 10 has an invalid length. [ 228.854231][ T8773] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1015'. [ 228.875717][ T8773] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.202324][ T8784] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1008'. [ 229.202509][ T8776] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 229.235427][ T8784] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 229.376954][ T8782] netlink: 'syz.0.1011': attribute type 29 has an invalid length. [ 229.394730][ T8782] netlink: 'syz.0.1011': attribute type 3 has an invalid length. [ 230.617570][ T8808] netlink: 'syz.0.1019': attribute type 21 has an invalid length. [ 230.647844][ T8808] __nla_validate_parse: 1 callbacks suppressed [ 230.647862][ T8808] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1019'. [ 230.678346][ T8808] netlink: 'syz.0.1019': attribute type 21 has an invalid length. [ 230.955333][ T8819] bridge_slave_1: left allmulticast mode [ 230.962772][ T8819] bridge_slave_1: left promiscuous mode [ 230.970557][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.016664][ T8819] bridge_slave_0: left allmulticast mode [ 231.030756][ T8819] bridge_slave_0: left promiscuous mode [ 231.039215][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.209746][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 231.225845][ T8824] netlink: 'syz.3.1021': attribute type 10 has an invalid length. [ 231.246067][ T8824] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1021'. [ 231.268426][ T8824] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 231.316343][ T8832] netlink: 'syz.1.1022': attribute type 10 has an invalid length. [ 232.122744][ T8842] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1023'. [ 232.168895][ T8842] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 232.251493][ T8834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.599591][ T8855] netlink: 'syz.1.1031': attribute type 10 has an invalid length. [ 232.631420][ T8855] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1031'. [ 232.656568][ T8855] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 233.330468][ T8865] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 233.358596][ T8865] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1035'. [ 233.394624][ T8865] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 233.476514][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 233.564845][ T8868] netlink: 'syz.2.1037': attribute type 10 has an invalid length. [ 233.904566][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 237.916281][ T8917] netlink: 'syz.2.1051': attribute type 10 has an invalid length. [ 237.931761][ T8917] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1051'. [ 237.942264][ T8917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 238.556893][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 239.894743][ T8959] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 239.915823][ T8959] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1065'. [ 239.932203][ T8959] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 240.058815][ T8961] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 240.066709][ T8961] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1066'. [ 240.082314][ T8961] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 241.824531][ T9005] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1083'. [ 241.842533][ T9005] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 241.866913][ T9009] netlink: 'syz.1.1081': attribute type 10 has an invalid length. [ 241.875262][ T9009] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1081'. [ 241.889358][ T9009] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.028309][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 242.451025][ T9018] netlink: 'syz.3.1085': attribute type 10 has an invalid length. [ 242.463445][ T9018] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1085'. [ 242.475426][ T9018] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.068251][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 243.210497][ T9035] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1100'. [ 243.220348][ T9035] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 243.335796][ T9040] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1092'. [ 243.374819][ T9040] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 243.978791][ T9062] netlink: 'syz.0.1103': attribute type 8 has an invalid length. [ 243.986590][ T9062] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1103'. [ 244.028221][ T8160] wlan1: Trigger new scan to find an IBSS to join [ 244.988700][ T8160] wlan1: Trigger new scan to find an IBSS to join [ 246.686327][ T8160] wlan1: Creating new IBSS network, BSSID be:fd:f2:3e:f3:c4 [ 246.707947][ T9063] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1104'. [ 246.942799][ T9076] netlink: 'syz.2.1106': attribute type 3 has an invalid length. [ 246.952870][ T9076] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1106'. [ 247.230841][ T9090] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1113'. [ 247.260949][ T9090] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 247.453199][ T9098] netlink: 'syz.0.1116': attribute type 8 has an invalid length. [ 247.470951][ T9098] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1116'. [ 247.557353][ T9097] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1117'. [ 248.494187][ T9118] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1126'. [ 249.072848][ T8160] wlan1: Trigger new scan to find an IBSS to join [ 249.881533][ T9149] netlink: 'syz.0.1133': attribute type 8 has an invalid length. [ 249.942885][ T9149] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1133'. [ 250.035327][ T9153] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1137'. [ 250.054475][ T79] wlan1: Creating new IBSS network, BSSID 96:53:c7:57:fa:18 [ 251.730975][ T9172] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1144'. [ 251.765609][ T9172] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 252.029377][ T8160] wlan1: Trigger new scan to find an IBSS to join [ 252.371226][ T9189] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1149'. [ 252.921312][ T9195] netlink: 'syz.3.1153': attribute type 8 has an invalid length. [ 252.940113][ T9195] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1153'. [ 253.085515][ T9207] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 253.100112][ T9207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1155'. [ 253.120038][ T9207] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 254.410014][ T9228] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 254.429767][ T9228] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1161'. [ 254.458678][ T9228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 254.836618][ T9240] netlink: 'syz.1.1165': attribute type 10 has an invalid length. [ 254.846065][ T9240] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1165'. [ 254.860282][ T9240] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 254.884034][ T9241] netlink: 'syz.0.1166': attribute type 8 has an invalid length. [ 254.892498][ T9241] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1166'. [ 255.068707][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 255.083968][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 255.874024][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.880698][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.145084][ T9264] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1175'. [ 256.203184][ T9270] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1177'. [ 256.213434][ T9270] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 256.305807][ T9275] netlink: 'syz.2.1176': attribute type 10 has an invalid length. [ 256.313889][ T9275] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1176'. [ 256.324070][ T9275] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 256.497664][ T9279] netlink: 'syz.3.1179': attribute type 10 has an invalid length. [ 256.506162][ T9279] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1179'. [ 256.517917][ T9279] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 256.778328][ T9285] netlink: 'syz.1.1181': attribute type 8 has an invalid length. [ 256.787860][ T9285] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1181'. [ 257.167425][ T9291] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1191'. [ 257.177087][ T9291] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 257.953102][ T9306] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1188'. [ 257.972159][ T9306] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 258.029208][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 258.190741][ T9314] netlink: 'syz.0.1190': attribute type 10 has an invalid length. [ 258.212884][ T9314] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 259.032321][ T9331] netlink: 'syz.3.1194': attribute type 8 has an invalid length. [ 259.460560][ T9341] __nla_validate_parse: 4 callbacks suppressed [ 259.460579][ T9341] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1199'. [ 259.486726][ T9341] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 259.983114][ T9349] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1203'. [ 259.993056][ T9349] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 260.028063][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 260.218325][ T9356] netlink: 'syz.3.1204': attribute type 10 has an invalid length. [ 260.233929][ T9356] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1204'. [ 260.264732][ T9356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 260.947853][ T9363] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1207'. [ 261.068034][ T79] wlan1: Trigger new scan to find an IBSS to join [ 261.393750][ T9370] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1210'. [ 262.027137][ T9393] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1217'. [ 262.094571][ T9393] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 262.197332][ T9398] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1220'. [ 262.998739][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 263.136135][ T9408] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1224'. [ 266.028814][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 266.326445][ T9437] netlink: 'syz.1.1234': attribute type 21 has an invalid length. [ 266.369561][ T9437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1234'. [ 266.991400][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 267.320475][ T9451] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1239'. [ 267.538461][ T9466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'. [ 267.548009][ T9463] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1243'. [ 270.028011][ T3485] wlan1: Trigger new scan to find an IBSS to join [ 271.072124][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 271.416564][ T9534] netlink: 'syz.1.1267': attribute type 10 has an invalid length. [ 271.432892][ T9534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1267'. [ 271.463714][ T9534] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 272.000760][ T9553] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1277'. [ 272.020779][ T3485] wlan1: Creating new IBSS network, BSSID ca:6b:89:c4:c6:db [ 272.028216][ T9553] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 273.155157][ T9576] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1286'. [ 273.194808][ T9578] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 273.207179][ T9578] netlink: 'syz.0.1285': attribute type 3 has an invalid length. [ 273.233697][ T9578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1285'. [ 273.252735][ T9580] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1287'. [ 273.283476][ T9580] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 273.342397][ T9578] netlink: 'syz.0.1285': attribute type 10 has an invalid length. [ 273.375857][ T9578] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1285'. [ 274.043199][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 274.740784][ T9614] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1298'. [ 274.786493][ T9614] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 274.988033][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 275.222396][ T9620] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1297'. [ 275.712779][ T9632] netlink: 'syz.1.1302': attribute type 10 has an invalid length. [ 275.754567][ T9632] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1302'. [ 275.801767][ T9632] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 276.514603][ T9645] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1307'. [ 276.558452][ T9645] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 276.596399][ T9647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1308'. [ 276.637047][ T9650] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1310'. [ 277.168692][ T9672] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 277.190461][ T9672] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1315'. [ 277.214028][ T9672] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 278.027983][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 278.106341][ T9682] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1319'. [ 278.136826][ T9682] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 278.710996][ T9699] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 278.747961][ T9699] netlink: 'syz.1.1322': attribute type 3 has an invalid length. [ 278.781598][ T9699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1322'. [ 278.854141][ T9699] netlink: 'syz.1.1322': attribute type 10 has an invalid length. [ 278.904019][ T9699] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1322'. [ 279.069501][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 279.076246][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 279.215838][ T9711] netlink: 'syz.3.1327': attribute type 10 has an invalid length. [ 279.250985][ T9711] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1327'. [ 279.295532][ T9711] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 279.774003][ T3485] wlan1: Creating new IBSS network, BSSID ba:a9:f3:2c:ac:d9 [ 280.120906][ T3485] wlan1: Creating new IBSS network, BSSID 8e:4b:f4:a0:54:ae [ 282.221053][ T9747] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 282.257229][ T9747] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1337'. [ 282.371644][ T9747] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 282.810187][ T9760] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 282.897989][ T9760] netlink: 'syz.3.1341': attribute type 3 has an invalid length. [ 282.952324][ T9760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1341'. [ 282.998952][ T9761] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 283.040585][ T9761] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1341'. [ 283.159594][ T9767] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1345'. [ 283.213470][ T9767] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 284.030479][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 285.443355][ T8159] wlan1: Creating new IBSS network, BSSID ba:e1:73:c4:11:05 [ 286.184874][ T9804] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1357'. [ 286.850468][ T9818] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 286.918004][ T9818] netlink: 'syz.2.1359': attribute type 3 has an invalid length. [ 286.985211][ T9818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1359'. [ 286.999291][ T9820] netlink: 'syz.2.1359': attribute type 10 has an invalid length. [ 287.007159][ T9820] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1359'. [ 288.755804][ T9832] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1363'. [ 288.822030][ T9832] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 289.007225][ T9824] TCP: TCP_TX_DELAY enabled [ 289.272850][ T9844] FAULT_INJECTION: forcing a failure. [ 289.272850][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 289.316973][ T9844] CPU: 1 PID: 9844 Comm: syz.1.1369 Not tainted syzkaller #0 [ 289.324412][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.334492][ T9844] Call Trace: [ 289.337785][ T9844] [ 289.340729][ T9844] dump_stack_lvl+0x18c/0x250 [ 289.345429][ T9844] ? show_regs_print_info+0x20/0x20 [ 289.350649][ T9844] ? load_image+0x420/0x420 [ 289.355174][ T9844] ? __might_sleep+0xe0/0xe0 [ 289.359784][ T9844] ? __lock_acquire+0x7d40/0x7d40 [ 289.364831][ T9844] ? trace_call_bpf+0xc3/0x6c0 [ 289.369621][ T9844] should_fail_ex+0x39d/0x4d0 [ 289.374332][ T9844] should_failslab+0x9/0x20 [ 289.378859][ T9844] slab_pre_alloc_hook+0x59/0x310 [ 289.383913][ T9844] kmem_cache_alloc_node+0x60/0x320 [ 289.389137][ T9844] ? __alloc_skb+0x103/0x2c0 [ 289.393755][ T9844] __alloc_skb+0x103/0x2c0 [ 289.398199][ T9844] netlink_dump+0x1ec/0xe50 [ 289.402731][ T9844] ? lock_chain_count+0x20/0x20 [ 289.407606][ T9844] ? netlink_lookup+0x200/0x200 [ 289.412490][ T9844] ? genl_start+0x4bd/0x6b0 [ 289.417011][ T9844] ? genl_start+0x574/0x6b0 [ 289.421539][ T9844] __netlink_dump_start+0x5f1/0x810 [ 289.426762][ T9844] genl_family_rcv_msg_dumpit+0x214/0x310 [ 289.432508][ T9844] ? genl_rcv_msg+0x7a0/0x7a0 [ 289.437199][ T9844] ? genl_get_cmd+0x692/0x920 [ 289.441901][ T9844] ? genl_family_rcv_msg_doit+0x310/0x310 [ 289.447636][ T9844] ? genl_start+0x6b0/0x6b0 [ 289.452158][ T9844] ? genl_dumpit+0x1a0/0x1a0 [ 289.456789][ T9844] ? mark_lock+0x94/0x320 [ 289.461148][ T9844] genl_rcv_msg+0x5e5/0x7a0 [ 289.465677][ T9844] ? genl_bind+0x360/0x360 [ 289.470116][ T9844] ? ethnl_default_doit+0xb80/0xb80 [ 289.475326][ T9844] ? ethnl_default_start+0x560/0x560 [ 289.480624][ T9844] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 289.486017][ T9844] ? lockdep_hardirqs_on+0x98/0x150 [ 289.491256][ T9844] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.497438][ T9844] netlink_rcv_skb+0x241/0x4d0 [ 289.502223][ T9844] ? genl_bind+0x360/0x360 [ 289.506663][ T9844] ? netlink_ack+0x1180/0x1180 [ 289.511462][ T9844] ? __lock_acquire+0x7d40/0x7d40 [ 289.516517][ T9844] ? down_read+0x1ac/0x2e0 [ 289.520958][ T9844] genl_rcv+0x28/0x40 [ 289.524959][ T9844] netlink_unicast+0x751/0x8d0 [ 289.529750][ T9844] netlink_sendmsg+0x8d0/0xbf0 [ 289.534538][ T9844] ? netlink_getsockopt+0x590/0x590 [ 289.539755][ T9844] ? aa_sock_msg_perm+0x94/0x150 [ 289.544722][ T9844] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 289.550026][ T9844] ? security_socket_sendmsg+0x80/0xa0 [ 289.555511][ T9844] ? netlink_getsockopt+0x590/0x590 [ 289.560740][ T9844] ____sys_sendmsg+0x5ba/0x960 [ 289.565531][ T9844] ? __asan_memset+0x22/0x40 [ 289.570141][ T9844] ? __sys_sendmsg_sock+0x30/0x30 [ 289.575178][ T9844] ? __import_iovec+0x5f2/0x850 [ 289.580056][ T9844] ? import_iovec+0x73/0xa0 [ 289.584583][ T9844] ___sys_sendmsg+0x2a6/0x360 [ 289.589290][ T9844] ? __sys_sendmsg+0x2a0/0x2a0 [ 289.594123][ T9844] __se_sys_sendmsg+0x1c2/0x2b0 [ 289.598998][ T9844] ? __x64_sys_sendmsg+0x80/0x80 [ 289.603979][ T9844] ? syscall_enter_from_user_mode+0x2e/0x80 [ 289.609901][ T9844] do_syscall_64+0x55/0xb0 [ 289.614333][ T9844] ? clear_bhb_loop+0x40/0x90 [ 289.619018][ T9844] ? clear_bhb_loop+0x40/0x90 [ 289.623716][ T9844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.629633][ T9844] RIP: 0033:0x7f985559ce59 [ 289.634060][ T9844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.653695][ T9844] RSP: 002b:00007f985641f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.662137][ T9844] RAX: ffffffffffffffda RBX: 00007f9855815fa0 RCX: 00007f985559ce59 [ 289.670138][ T9844] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 289.678131][ T9844] RBP: 00007f985641f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.686118][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.694113][ T9844] R13: 00007f9855816038 R14: 00007f9855815fa0 R15: 00007ffe05fb01e8 [ 289.702121][ T9844] [ 289.759631][ T9848] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 289.767529][ T9848] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1370'. [ 289.849857][ T9848] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 290.800801][ T9864] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 290.849824][ T9864] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1375'. [ 290.902277][ T9864] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 291.027818][ T9865] netlink: 'syz.0.1374': attribute type 10 has an invalid length. [ 291.038130][ T9865] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1374'. [ 291.096998][ T9865] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 291.820931][ T9869] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1377'. [ 291.880949][ T9869] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 292.109231][ T9883] C: renamed from team_slave_0 (while UP) [ 292.141361][ T9883] netlink: 'syz.1.1381': attribute type 3 has an invalid length. [ 292.161836][ T9883] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 292.185319][ T9883] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1381'. [ 292.213536][ T9883] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 292.955309][ T9901] netlink: 'syz.1.1384': attribute type 10 has an invalid length. [ 292.969874][ T9901] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1384'. [ 292.998255][ T9901] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 293.031341][ T9902] netlink: 'syz.2.1385': attribute type 10 has an invalid length. [ 293.053115][ T9902] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1385'. [ 293.077572][ T9902] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 293.121989][ T9906] netlink: 'syz.3.1386': attribute type 10 has an invalid length. [ 293.139160][ T9906] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1386'. [ 293.166991][ T9906] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 295.666936][ T9940] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1397'. [ 295.728522][ T9938] netlink: 'syz.2.1395': attribute type 17 has an invalid length. [ 296.310114][ T9959] netlink: 'syz.1.1399': attribute type 10 has an invalid length. [ 296.331631][ T9959] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1399'. [ 296.358649][ T9959] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.445795][ T9960] netlink: 'syz.0.1398': attribute type 10 has an invalid length. [ 296.468782][ T9960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1398'. [ 296.493480][ T9960] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 297.796532][ T9980] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1407'. [ 298.030426][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 298.336594][ T9988] FAULT_INJECTION: forcing a failure. [ 298.336594][ T9988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.485514][ T9988] CPU: 1 PID: 9988 Comm: syz.0.1409 Not tainted syzkaller #0 [ 298.492958][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.503038][ T9988] Call Trace: [ 298.506331][ T9988] [ 298.509276][ T9988] dump_stack_lvl+0x18c/0x250 [ 298.513979][ T9988] ? show_regs_print_info+0x20/0x20 [ 298.519204][ T9988] ? load_image+0x420/0x420 [ 298.523730][ T9988] ? __might_fault+0xaa/0x120 [ 298.528426][ T9988] ? __lock_acquire+0x7d40/0x7d40 [ 298.533473][ T9988] should_fail_ex+0x39d/0x4d0 [ 298.538178][ T9988] _copy_from_user+0x2f/0xe0 [ 298.542785][ T9988] __sys_bpf+0x23e/0x890 [ 298.547029][ T9988] ? bpf_link_show_fdinfo+0x390/0x390 [ 298.552407][ T9988] ? lock_chain_count+0x20/0x20 [ 298.557255][ T9988] __x64_sys_bpf+0x7c/0x90 [ 298.561664][ T9988] do_syscall_64+0x55/0xb0 [ 298.566075][ T9988] ? clear_bhb_loop+0x40/0x90 [ 298.570739][ T9988] ? clear_bhb_loop+0x40/0x90 [ 298.575405][ T9988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.581293][ T9988] RIP: 0033:0x7f9c6ed9ce59 [ 298.585698][ T9988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.605308][ T9988] RSP: 002b:00007f9c6fc8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.613719][ T9988] RAX: ffffffffffffffda RBX: 00007f9c6f015fa0 RCX: 00007f9c6ed9ce59 [ 298.621684][ T9988] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000f [ 298.629647][ T9988] RBP: 00007f9c6fc8b090 R08: 0000000000000000 R09: 0000000000000000 [ 298.637607][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.645568][ T9988] R13: 00007f9c6f016038 R14: 00007f9c6f015fa0 R15: 00007ffe093b88f8 [ 298.653544][ T9988] [ 299.037521][ T9999] netlink: 'syz.1.1411': attribute type 10 has an invalid length. [ 299.072782][ T9999] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1411'. [ 299.104442][ T9999] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 299.298309][T10002] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1415'. [ 300.414361][T10013] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1418'. [ 301.796843][T10047] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 301.828815][T10047] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1426'. [ 301.882861][T10047] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 302.017344][T10050] netlink: 'syz.0.1427': attribute type 10 has an invalid length. [ 302.025465][T10050] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1427'. [ 302.077864][T10050] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 303.005184][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 304.452398][T10085] netlink: 'syz.0.1440': attribute type 10 has an invalid length. [ 304.470825][T10085] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1440'. [ 304.500056][T10085] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 307.966393][T10125] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 307.992597][T10125] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1454'. [ 308.014691][T10125] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 308.048922][ T8158] wlan1: Trigger new scan to find an IBSS to join [ 309.017679][ T8158] wlan1: Creating new IBSS network, BSSID 3e:27:f7:46:b9:29 [ 309.036721][T10143] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1461'. [ 309.058161][T10143] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 309.978815][T10155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1464'. [ 310.167941][ T8157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.224050][T10161] netlink: 'syz.2.1465': attribute type 10 has an invalid length. [ 310.235592][T10161] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1465'. [ 310.247088][T10161] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 310.588450][T10165] netlink: 'syz.3.1467': attribute type 4 has an invalid length. [ 310.828162][T10174] netlink: 15798 bytes leftover after parsing attributes in process `syz.3.1470'. [ 311.045750][T10183] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1473'. [ 311.066067][T10183] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 312.094955][T10192] netlink: 'syz.1.1475': attribute type 10 has an invalid length. [ 312.110288][T10192] team0: left promiscuous mode [ 312.115746][T10192] C: left promiscuous mode [ 312.123530][T10192] team_slave_1: left promiscuous mode [ 312.129652][T10192] geneve1: left promiscuous mode [ 312.168842][T10192] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.218792][T10192] bond0: (slave team0): Enslaving as an active interface with an up link [ 312.548656][T10208] FAULT_INJECTION: forcing a failure. [ 312.548656][T10208] name failslab, interval 1, probability 0, space 0, times 0 [ 312.603590][T10208] CPU: 1 PID: 10208 Comm: syz.2.1480 Not tainted syzkaller #0 [ 312.611112][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.621184][T10208] Call Trace: [ 312.624464][T10208] [ 312.627396][T10208] dump_stack_lvl+0x18c/0x250 [ 312.632079][T10208] ? show_regs_print_info+0x20/0x20 [ 312.637270][T10208] ? load_image+0x420/0x420 [ 312.641768][T10208] ? __lock_acquire+0x7d40/0x7d40 [ 312.646785][T10208] ? number+0xd0c/0xf60 [ 312.650942][T10208] should_fail_ex+0x39d/0x4d0 [ 312.655621][T10208] should_failslab+0x9/0x20 [ 312.660121][T10208] slab_pre_alloc_hook+0x59/0x310 [ 312.665145][T10208] ? __kthread_create_on_node+0x1d0/0x3f0 [ 312.670859][T10208] ? __kthread_create_on_node+0x1d0/0x3f0 [ 312.676661][T10208] __kmem_cache_alloc_node+0x53/0x250 [ 312.682036][T10208] ? __kthread_create_on_node+0x1d0/0x3f0 [ 312.687750][T10208] __kmalloc_node_track_caller+0xa2/0x230 [ 312.693470][T10208] kvasprintf+0xec/0x1a0 [ 312.697710][T10208] ? bust_spinlocks+0xd0/0xd0 [ 312.702405][T10208] __kthread_create_on_node+0x1d0/0x3f0 [ 312.707946][T10208] ? kthread_create_on_node+0x140/0x140 [ 312.713493][T10208] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 312.719470][T10208] ? rxrpc_direct_abort+0x330/0x330 [ 312.724666][T10208] ? rxrpc_direct_abort+0x330/0x330 [ 312.729865][T10208] kthread_create_on_node+0xec/0x140 [ 312.735171][T10208] ? __local_bh_enable_ip+0x13a/0x1c0 [ 312.740547][T10208] ? tsk_fork_get_node+0x70/0x70 [ 312.745485][T10208] ? __local_bh_enable_ip+0x13a/0x1c0 [ 312.750860][T10208] rxrpc_lookup_local+0xff3/0x1610 [ 312.755981][T10208] ? rxrpc_local_dont_fragment+0x70/0x70 [ 312.761610][T10208] ? none_clear+0x10/0x10 [ 312.765936][T10208] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 312.772002][T10208] ? lockdep_hardirqs_on+0x98/0x150 [ 312.777201][T10208] ? _local_bh_enable+0xa0/0xa0 [ 312.782053][T10208] rxrpc_sendmsg+0x30a/0x5b0 [ 312.786644][T10208] ? rxrpc_getsockopt+0x150/0x150 [ 312.791663][T10208] ____sys_sendmsg+0x5ba/0x960 [ 312.796426][T10208] ? __asan_memset+0x22/0x40 [ 312.801011][T10208] ? __sys_sendmsg_sock+0x30/0x30 [ 312.806026][T10208] ? __import_iovec+0x3fa/0x850 [ 312.810878][T10208] ? import_iovec+0x73/0xa0 [ 312.815374][T10208] ___sys_sendmsg+0x2a6/0x360 [ 312.820053][T10208] ? __sys_sendmsg+0x2a0/0x2a0 [ 312.824825][T10208] ? trace_call_bpf+0xc3/0x6c0 [ 312.829610][T10208] __se_sys_sendmsg+0x1c2/0x2b0 [ 312.834454][T10208] ? __x64_sys_sendmsg+0x80/0x80 [ 312.839400][T10208] ? lockdep_hardirqs_on+0x98/0x150 [ 312.844601][T10208] do_syscall_64+0x55/0xb0 [ 312.849008][T10208] ? clear_bhb_loop+0x40/0x90 [ 312.853675][T10208] ? clear_bhb_loop+0x40/0x90 [ 312.858346][T10208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.864239][T10208] RIP: 0033:0x7f4561f9ce59 [ 312.868647][T10208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.888245][T10208] RSP: 002b:00007f4562efd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.896651][T10208] RAX: ffffffffffffffda RBX: 00007f4562215fa0 RCX: 00007f4561f9ce59 [ 312.904617][T10208] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 312.912579][T10208] RBP: 00007f4562efd090 R08: 0000000000000000 R09: 0000000000000000 [ 312.920545][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.928508][T10208] R13: 00007f4562216038 R14: 00007f4562215fa0 R15: 00007ffc95e93188 [ 312.936488][T10208] [ 313.201177][T10213] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1483'. [ 313.217381][T10213] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 313.290491][T10217] netlink: 'syz.1.1482': attribute type 10 has an invalid length. [ 313.298639][T10217] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1482'. [ 313.317008][T10217] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 314.265045][T10232] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 314.287866][T10232] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1493'. [ 314.320631][T10232] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 315.492780][ T8160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.833765][T10244] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1492'. [ 316.467030][T10258] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 316.489223][T10258] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1498'. [ 316.515844][T10258] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 317.314854][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.321426][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.254602][T10282] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1506'. [ 318.475032][T10289] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1508'. [ 318.928280][T10294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1509'. [ 319.123816][T10297] FAULT_INJECTION: forcing a failure. [ 319.123816][T10297] name failslab, interval 1, probability 0, space 0, times 0 [ 319.200875][T10297] CPU: 0 PID: 10297 Comm: syz.3.1511 Not tainted syzkaller #0 [ 319.208394][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.218477][T10297] Call Trace: [ 319.221785][T10297] [ 319.224735][T10297] dump_stack_lvl+0x18c/0x250 [ 319.229440][T10297] ? do_sock_setsockopt+0x175/0x1a0 [ 319.234638][T10297] ? do_syscall_64+0x55/0xb0 [ 319.239222][T10297] ? show_regs_print_info+0x20/0x20 [ 319.244421][T10297] ? load_image+0x420/0x420 [ 319.248929][T10297] should_fail_ex+0x39d/0x4d0 [ 319.253611][T10297] should_failslab+0x9/0x20 [ 319.258110][T10297] slab_pre_alloc_hook+0x59/0x310 [ 319.263132][T10297] ? sctp_sched_prio_set+0x3ec/0x9b0 [ 319.268417][T10297] __kmem_cache_alloc_node+0x53/0x250 [ 319.273786][T10297] ? sctp_sched_prio_set+0x3ec/0x9b0 [ 319.279069][T10297] kmalloc_trace+0x2a/0xe0 [ 319.283486][T10297] sctp_sched_prio_set+0x3ec/0x9b0 [ 319.288608][T10297] sctp_sched_set_sched+0x3ab/0x750 [ 319.293810][T10297] sctp_setsockopt_scheduler+0x493/0x6f0 [ 319.299445][T10297] sctp_setsockopt+0x252/0x11e0 [ 319.304292][T10297] ? sock_common_recvmsg+0x190/0x190 [ 319.309571][T10297] do_sock_setsockopt+0x175/0x1a0 [ 319.314587][T10297] ? __fdget+0x180/0x210 [ 319.318829][T10297] __x64_sys_setsockopt+0x182/0x200 [ 319.324025][T10297] do_syscall_64+0x55/0xb0 [ 319.328436][T10297] ? clear_bhb_loop+0x40/0x90 [ 319.333104][T10297] ? clear_bhb_loop+0x40/0x90 [ 319.337774][T10297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.343665][T10297] RIP: 0033:0x7f5c80d9ce59 [ 319.348075][T10297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.367675][T10297] RSP: 002b:00007f5c7efd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.376085][T10297] RAX: ffffffffffffffda RBX: 00007f5c81016090 RCX: 00007f5c80d9ce59 [ 319.384051][T10297] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 319.392014][T10297] RBP: 00007f5c7efd5090 R08: 0000000000000008 R09: 0000000000000000 [ 319.399980][T10297] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.407944][T10297] R13: 00007f5c81016128 R14: 00007f5c81016090 R15: 00007ffe484722a8 [ 319.415921][T10297] [ 319.591562][T10303] FAULT_INJECTION: forcing a failure. [ 319.591562][T10303] name failslab, interval 1, probability 0, space 0, times 0 [ 319.604401][T10303] CPU: 1 PID: 10303 Comm: syz.2.1514 Not tainted syzkaller #0 [ 319.611881][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.621946][T10303] Call Trace: [ 319.625226][T10303] [ 319.628153][T10303] dump_stack_lvl+0x18c/0x250 [ 319.632835][T10303] ? show_regs_print_info+0x20/0x20 [ 319.638032][T10303] ? load_image+0x420/0x420 [ 319.642536][T10303] should_fail_ex+0x39d/0x4d0 [ 319.647218][T10303] should_failslab+0x9/0x20 [ 319.651723][T10303] slab_pre_alloc_hook+0x59/0x310 [ 319.656749][T10303] kmem_cache_alloc+0x5a/0x2d0 [ 319.661514][T10303] ? skb_clone+0x1eb/0x370 [ 319.665931][T10303] skb_clone+0x1eb/0x370 [ 319.670171][T10303] bpf_clone_redirect+0x167/0x4a0 [ 319.675195][T10303] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 319.681269][T10303] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 319.686724][T10303] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 319.692534][T10303] ? perf_trace_preemptirq_template+0x269/0x330 [ 319.698785][T10303] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 319.704764][T10303] ? lockdep_softirqs_on+0x580/0x580 [ 319.710046][T10303] ? lock_chain_count+0x20/0x20 [ 319.714890][T10303] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 319.721134][T10303] ? __local_bh_disable_ip+0x108/0x1a0 [ 319.726594][T10303] ? __cant_sleep+0x220/0x220 [ 319.731266][T10303] ? __local_bh_enable_ip+0x13a/0x1c0 [ 319.736632][T10303] ? _local_bh_enable+0xa0/0xa0 [ 319.741478][T10303] ? bpf_test_timer_continue+0x135/0x380 [ 319.747109][T10303] ? bpf_test_run+0x174/0x870 [ 319.751784][T10303] bpf_test_run+0x2df/0x870 [ 319.756306][T10303] ? bpf_test_run+0x174/0x870 [ 319.760987][T10303] ? dst_hold+0x70/0x70 [ 319.765150][T10303] ? eth_get_headlen+0x210/0x210 [ 319.770090][T10303] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 319.775476][T10303] ? cpu_online+0x60/0x60 [ 319.779802][T10303] bpf_prog_test_run+0x321/0x390 [ 319.784751][T10303] __sys_bpf+0x49d/0x890 [ 319.788991][T10303] ? bpf_link_show_fdinfo+0x390/0x390 [ 319.794379][T10303] ? lock_chain_count+0x20/0x20 [ 319.799238][T10303] __x64_sys_bpf+0x7c/0x90 [ 319.803651][T10303] do_syscall_64+0x55/0xb0 [ 319.808063][T10303] ? clear_bhb_loop+0x40/0x90 [ 319.812733][T10303] ? clear_bhb_loop+0x40/0x90 [ 319.817405][T10303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.823298][T10303] RIP: 0033:0x7f4561f9ce59 [ 319.827710][T10303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.847317][T10303] RSP: 002b:00007f4562efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.855734][T10303] RAX: ffffffffffffffda RBX: 00007f4562215fa0 RCX: 00007f4561f9ce59 [ 319.863700][T10303] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 319.871664][T10303] RBP: 00007f4562efd090 R08: 0000000000000000 R09: 0000000000000000 [ 319.879629][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.887599][T10303] R13: 00007f4562216038 R14: 00007f4562215fa0 R15: 00007ffc95e93188 [ 319.895579][T10303] [ 320.616521][T10315] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1517'. [ 320.641314][T10323] netlink: 'syz.2.1518': attribute type 10 has an invalid length. [ 320.659309][T10323] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1518'. [ 320.692762][T10323] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 321.069217][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 321.117995][T10339] netlink: 'syz.0.1523': attribute type 10 has an invalid length. [ 321.147985][T10339] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1523'. [ 321.178629][T10339] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 322.177284][T10366] FAULT_INJECTION: forcing a failure. [ 322.177284][T10366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.191120][T10366] CPU: 0 PID: 10366 Comm: syz.1.1533 Not tainted syzkaller #0 [ 322.198616][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.208700][T10366] Call Trace: [ 322.211993][T10366] [ 322.214928][T10366] dump_stack_lvl+0x18c/0x250 [ 322.219612][T10366] ? show_regs_print_info+0x20/0x20 [ 322.224819][T10366] ? load_image+0x420/0x420 [ 322.229328][T10366] ? __might_fault+0xaa/0x120 [ 322.234012][T10366] ? __lock_acquire+0x7d40/0x7d40 [ 322.239041][T10366] should_fail_ex+0x39d/0x4d0 [ 322.243724][T10366] _copy_from_user+0x2f/0xe0 [ 322.248315][T10366] kstrtouint_from_user+0xde/0x170 [ 322.253437][T10366] ? kstrtol_from_user+0x190/0x190 [ 322.258561][T10366] proc_fail_nth_write+0x8f/0x250 [ 322.263585][T10366] ? proc_fail_nth_read+0x260/0x260 [ 322.268786][T10366] ? proc_fail_nth_read+0x260/0x260 [ 322.273983][T10366] vfs_write+0x296/0x990 [ 322.278231][T10366] ? file_end_write+0x250/0x250 [ 322.283079][T10366] ? __fget_files+0x28/0x4b0 [ 322.287686][T10366] ? __fget_files+0x28/0x4b0 [ 322.292295][T10366] ? __fget_files+0x43d/0x4b0 [ 322.296994][T10366] ? __fdget_pos+0x2a3/0x330 [ 322.301594][T10366] ? ksys_write+0x75/0x260 [ 322.306018][T10366] ksys_write+0x150/0x260 [ 322.310351][T10366] ? __ia32_sys_read+0x90/0x90 [ 322.315118][T10366] ? lockdep_hardirqs_on+0x98/0x150 [ 322.320328][T10366] do_syscall_64+0x55/0xb0 [ 322.324739][T10366] ? clear_bhb_loop+0x40/0x90 [ 322.329409][T10366] ? clear_bhb_loop+0x40/0x90 [ 322.334080][T10366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.339973][T10366] RIP: 0033:0x7f985555d68e [ 322.344385][T10366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.363988][T10366] RSP: 002b:00007f985641efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.372399][T10366] RAX: ffffffffffffffda RBX: 00007f985641f6c0 RCX: 00007f985555d68e [ 322.380366][T10366] RDX: 0000000000000001 RSI: 00007f985641f0a0 RDI: 0000000000000004 [ 322.388332][T10366] RBP: 00007f985641f090 R08: 0000000000000000 R09: 0000000000000000 [ 322.396296][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.404260][T10366] R13: 00007f9855816038 R14: 00007f9855815fa0 R15: 00007ffe05fb01e8 [ 322.412246][T10366] [ 322.416172][T10362] can: request_module (can-proto-0) failed. [ 322.482946][T10367] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1532'. [ 322.898569][T10380] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 322.924213][T10380] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1534'. [ 322.955617][T10380] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 323.078877][ T8158] wlan1: Trigger new scan to find an IBSS to join [ 324.561906][T10385] netlink: 'syz.2.1537': attribute type 10 has an invalid length. [ 324.570085][T10385] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1537'. [ 324.580215][T10385] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.848509][T10402] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1543'. [ 325.602838][T10411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1545'. [ 326.028097][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 326.029150][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 326.959811][ T8157] wlan1: Creating new IBSS network, BSSID 2e:c0:32:7f:96:7c [ 327.107641][T10435] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1554'. [ 327.576130][T10453] netlink: 826 bytes leftover after parsing attributes in process `syz.3.1562'. [ 328.044369][T10463] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1565'. [ 328.233913][T10465] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1566'. [ 328.347663][T10471] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 328.423632][T10473] netlink: 'syz.0.1568': attribute type 10 has an invalid length. [ 328.433788][T10473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1568'. [ 328.448523][T10473] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 329.785147][T10494] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1577'. [ 330.571810][T10512] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1581'. [ 330.933364][T10525] netlink: 'syz.3.1584': attribute type 10 has an invalid length. [ 330.957837][T10525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1584'. [ 331.002787][T10525] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 332.044366][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 332.844062][T10544] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1591'. [ 332.979736][T10558] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 333.011525][T10558] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 333.032782][T10562] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 333.071786][ T8157] wlan1: Trigger new scan to find an IBSS to join [ 333.359730][T10574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1597'. [ 334.798783][T10591] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1605'. [ 334.987961][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 335.221730][T10602] netlink: 'syz.3.1608': attribute type 8 has an invalid length. [ 335.257243][T10602] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1608'. [ 335.874104][T10613] netlink: 'syz.1.1611': attribute type 8 has an invalid length. [ 335.916930][T10613] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1611'. [ 337.068977][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 337.075529][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 338.112973][ T79] wlan1: Trigger new scan to find an IBSS to join [ 338.192388][ T8156] wlan1: Creating new IBSS network, BSSID 1e:60:45:55:03:44 [ 339.802700][T10661] netlink: 'syz.0.1623': attribute type 8 has an invalid length. [ 339.834769][T10661] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1623'. [ 340.068829][T10657] netlink: 'syz.3.1622': attribute type 10 has an invalid length. [ 340.076848][T10657] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1622'. [ 340.097507][T10657] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 340.991203][ T79] wlan1: Trigger new scan to find an IBSS to join [ 341.079144][ T8157] wlan1: Creating new IBSS network, BSSID 22:7b:5f:c2:60:7f [ 341.917384][ T79] wlan1: Creating new IBSS network, BSSID 5e:28:a7:ea:51:54 [ 343.166337][T10684] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 343.632846][T10710] netlink: 'syz.0.1637': attribute type 8 has an invalid length. [ 343.642186][T10710] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1637'. [ 343.652719][T10711] netlink: 'syz.3.1636': attribute type 10 has an invalid length. [ 343.661745][T10711] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1636'. [ 343.680347][T10711] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 346.827080][T10761] netlink: 'syz.3.1650': attribute type 10 has an invalid length. [ 346.875830][T10761] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1650'. [ 346.915658][T10761] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 347.784381][T10774] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1657'. [ 348.762904][T10793] netlink: 'syz.3.1663': attribute type 10 has an invalid length. [ 348.787831][T10793] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1663'. [ 348.808484][T10793] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 349.690656][T10809] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1668'. [ 351.536569][T10840] netlink: 'syz.3.1675': attribute type 10 has an invalid length. [ 351.565046][T10840] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1675'. [ 351.583809][T10840] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 351.628137][T10844] netlink: 'syz.2.1677': attribute type 10 has an invalid length. [ 351.636244][T10844] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1677'. [ 351.664252][T10844] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 351.730717][T10843] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1678'. [ 354.028952][ T79] wlan1: Trigger new scan to find an IBSS to join [ 355.143707][T10877] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1689'. [ 355.377529][T10891] netlink: 'syz.2.1690': attribute type 10 has an invalid length. [ 355.388707][T10891] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1690'. [ 355.401722][T10892] netlink: 'syz.3.1693': attribute type 8 has an invalid length. [ 355.409633][T10892] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1693'. [ 355.409643][T10891] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 355.434914][T10893] netlink: 'syz.1.1691': attribute type 10 has an invalid length. [ 355.443220][T10893] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1691'. [ 355.454292][T10893] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 356.633504][T10907] netlink: 'syz.3.1697': attribute type 11 has an invalid length. [ 357.023857][T10912] delete_channel: no stack [ 357.135610][T10918] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1701'. [ 357.282094][T10928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 357.292591][T10928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 357.302836][T10928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 357.351182][T10933] netlink: 'syz.1.1703': attribute type 10 has an invalid length. [ 357.359583][T10933] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1703'. [ 357.374020][T10933] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 357.445914][T10938] netlink: 'syz.2.1704': attribute type 10 has an invalid length. [ 357.454249][T10938] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1704'. [ 357.464634][T10938] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 357.921414][T10943] netlink: 'syz.0.1706': attribute type 8 has an invalid length. [ 358.304536][T10952] netlink: 'syz.1.1715': attribute type 10 has an invalid length. [ 358.313727][T10952] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 359.070093][ T8158] wlan1: Trigger new scan to find an IBSS to join [ 359.079205][ T8156] wlan1: Trigger new scan to find an IBSS to join [ 359.189545][T10966] netlink: 'syz.0.1710': attribute type 11 has an invalid length. [ 359.653001][T10985] netlink: 'syz.0.1716': attribute type 10 has an invalid length. [ 359.664398][T10985] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 359.918833][T10994] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 359.989498][ T79] wlan1: Creating new IBSS network, BSSID 9e:0d:17:34:aa:b7 [ 360.446737][T10999] __nla_validate_parse: 6 callbacks suppressed [ 360.446795][T10999] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1724'. [ 360.760782][T11011] FAULT_INJECTION: forcing a failure. [ 360.760782][T11011] name failslab, interval 1, probability 0, space 0, times 0 [ 360.775843][T11011] CPU: 0 PID: 11011 Comm: syz.3.1727 Not tainted syzkaller #0 [ 360.783351][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.793433][T11011] Call Trace: [ 360.796807][T11011] [ 360.799888][T11011] dump_stack_lvl+0x18c/0x250 [ 360.804776][T11011] ? show_regs_print_info+0x20/0x20 [ 360.810067][T11011] ? load_image+0x420/0x420 [ 360.814675][T11011] ? __might_sleep+0xe0/0xe0 [ 360.819862][T11011] ? __lock_acquire+0x7d40/0x7d40 [ 360.825032][T11011] should_fail_ex+0x39d/0x4d0 [ 360.829951][T11011] should_failslab+0x9/0x20 [ 360.834496][T11011] slab_pre_alloc_hook+0x59/0x310 [ 360.839681][T11011] ? tomoyo_encode+0x28b/0x540 [ 360.844486][T11011] ? tomoyo_encode+0x28b/0x540 [ 360.849356][T11011] __kmem_cache_alloc_node+0x53/0x250 [ 360.854758][T11011] ? tomoyo_encode+0x28b/0x540 [ 360.859546][T11011] __kmalloc+0xa4/0x230 [ 360.863727][T11011] tomoyo_encode+0x28b/0x540 [ 360.868340][T11011] tomoyo_realpath_from_path+0x592/0x5d0 [ 360.874005][T11011] tomoyo_path_number_perm+0x248/0x620 [ 360.879487][T11011] ? tomoyo_path_number_perm+0x217/0x620 [ 360.885156][T11011] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 360.890645][T11011] ? ksys_write+0x1c4/0x260 [ 360.895202][T11011] ? __fget_files+0x28/0x4b0 [ 360.899837][T11011] ? __fget_files+0x28/0x4b0 [ 360.904459][T11011] security_file_ioctl+0x70/0xa0 [ 360.909417][T11011] __se_sys_ioctl+0x48/0x170 [ 360.914035][T11011] do_syscall_64+0x55/0xb0 [ 360.918468][T11011] ? clear_bhb_loop+0x40/0x90 [ 360.923252][T11011] ? clear_bhb_loop+0x40/0x90 [ 360.927945][T11011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.933993][T11011] RIP: 0033:0x7f5c80d9ce59 [ 360.938483][T11011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.958162][T11011] RSP: 002b:00007f5c7eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.966667][T11011] RAX: ffffffffffffffda RBX: 00007f5c81015fa0 RCX: 00007f5c80d9ce59 [ 360.974659][T11011] RDX: 0000200000000200 RSI: 0000000000008994 RDI: 0000000000000003 [ 360.982654][T11011] RBP: 00007f5c7eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.990643][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.998639][T11011] R13: 00007f5c81016038 R14: 00007f5c81015fa0 R15: 00007ffe484722a8 [ 361.006657][T11011] [ 361.093083][T11011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.115174][T11003] validate_nla: 2 callbacks suppressed [ 361.115259][T11003] netlink: 'syz.1.1726': attribute type 11 has an invalid length. [ 361.505102][T11024] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1733'. [ 361.553130][T11031] netlink: 'syz.3.1732': attribute type 10 has an invalid length. [ 361.579665][T11031] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1732'. [ 361.618661][T11031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 361.694347][T11040] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 361.702478][T11040] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1735'. [ 361.718616][T11040] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 362.376518][T11056] netlink: 'syz.2.1750': attribute type 10 has an invalid length. [ 362.384449][T11056] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1750'. [ 362.394932][T11056] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 363.067956][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 363.306045][T11069] netlink: 'syz.1.1747': attribute type 29 has an invalid length. [ 363.360571][T11071] netlink: 'syz.1.1747': attribute type 1 has an invalid length. [ 363.472425][T11069] netlink: 'syz.1.1747': attribute type 29 has an invalid length. [ 363.480869][T11073] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1746'. [ 363.549793][T11069] netlink: 'syz.1.1747': attribute type 29 has an invalid length. [ 363.561635][T11076] netlink: 'syz.2.1744': attribute type 11 has an invalid length. [ 363.577503][T11078] FAULT_INJECTION: forcing a failure. [ 363.577503][T11078] name failslab, interval 1, probability 0, space 0, times 0 [ 363.594743][T11078] CPU: 1 PID: 11078 Comm: syz.3.1748 Not tainted syzkaller #0 [ 363.602272][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.612367][T11078] Call Trace: [ 363.615670][T11078] [ 363.618632][T11078] dump_stack_lvl+0x18c/0x250 [ 363.623356][T11078] ? show_regs_print_info+0x20/0x20 [ 363.628595][T11078] ? load_image+0x420/0x420 [ 363.633149][T11078] ? __might_sleep+0xe0/0xe0 [ 363.637790][T11078] ? __lock_acquire+0x7d40/0x7d40 [ 363.642867][T11078] should_fail_ex+0x39d/0x4d0 [ 363.647603][T11078] should_failslab+0x9/0x20 [ 363.652148][T11078] slab_pre_alloc_hook+0x59/0x310 [ 363.657230][T11078] kmem_cache_alloc_node+0x60/0x320 [ 363.662482][T11078] ? __alloc_skb+0x103/0x2c0 [ 363.667237][T11078] __alloc_skb+0x103/0x2c0 [ 363.671693][T11078] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 363.677098][T11078] rtnetlink_event+0x1b7/0x260 [ 363.681923][T11078] notifier_call_chain+0x197/0x380 [ 363.687081][T11078] dev_set_mac_address+0x39a/0x4d0 [ 363.692314][T11078] ? dev_pre_changeaddr_notify+0x120/0x120 [ 363.698168][T11078] ? down_write+0x16e/0x200 [ 363.702818][T11078] dev_set_mac_address_user+0x31/0x50 [ 363.708223][T11078] dev_ioctl+0x7b4/0x1140 [ 363.712656][T11078] sock_do_ioctl+0x239/0x310 [ 363.717281][T11078] ? sock_show_fdinfo+0xb0/0xb0 [ 363.722188][T11078] sock_ioctl+0x5ba/0x7e0 [ 363.726553][T11078] ? sock_poll+0x3e0/0x3e0 [ 363.731013][T11078] ? bpf_lsm_file_ioctl+0x9/0x10 [ 363.735991][T11078] ? security_file_ioctl+0x80/0xa0 [ 363.741124][T11078] ? sock_poll+0x3e0/0x3e0 [ 363.745564][T11078] __se_sys_ioctl+0xfd/0x170 [ 363.750186][T11078] do_syscall_64+0x55/0xb0 [ 363.754625][T11078] ? clear_bhb_loop+0x40/0x90 [ 363.759315][T11078] ? clear_bhb_loop+0x40/0x90 [ 363.764006][T11078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.769917][T11078] RIP: 0033:0x7f5c80d9ce59 [ 363.774351][T11078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.793972][T11078] RSP: 002b:00007f5c7eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.802412][T11078] RAX: ffffffffffffffda RBX: 00007f5c81015fa0 RCX: 00007f5c80d9ce59 [ 363.810401][T11078] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000005 [ 363.818388][T11078] RBP: 00007f5c7eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 363.826374][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.834361][T11078] R13: 00007f5c81016038 R14: 00007f5c81015fa0 R15: 00007ffe484722a8 [ 363.842375][T11078] [ 364.161871][T11097] netlink: 'syz.2.1754': attribute type 10 has an invalid length. [ 364.171333][T11097] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1754'. [ 364.190620][T11097] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 364.208436][T11100] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1752'. [ 364.226864][T11100] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 364.311120][T11105] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1759'. [ 364.394501][T11105] C: renamed from team_slave_0 [ 364.403709][T11105] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1759'. [ 364.620212][T11115] C: renamed from team_slave_0 [ 364.661463][T11111] syzkaller0: entered promiscuous mode [ 364.666997][T11111] syzkaller0: entered allmulticast mode [ 366.781179][T11149] validate_nla: 3 callbacks suppressed [ 366.781192][T11149] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 366.797935][T11149] __nla_validate_parse: 4 callbacks suppressed [ 366.797949][T11149] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1772'. [ 366.814527][T11149] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 367.052896][T11159] netlink: 'syz.1.1773': attribute type 10 has an invalid length. [ 367.070940][T11159] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1773'. [ 367.080594][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 367.087149][ T8158] wlan1: Trigger new scan to find an IBSS to join [ 367.095961][T11159] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 367.118441][T11158] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1774'. [ 367.134531][T11161] netlink: 'syz.0.1782': attribute type 10 has an invalid length. [ 367.144905][T11161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1782'. [ 367.158238][T11161] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 367.808622][T11175] netlink: 'syz.1.1779': attribute type 10 has an invalid length. [ 368.024694][ T8158] wlan1: Creating new IBSS network, BSSID 52:41:47:92:ea:f0 [ 369.059248][T11193] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1785'. [ 369.069918][T11186] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1781'. [ 369.218942][T11196] C: renamed from team_slave_0 (while UP) [ 369.240359][T11196] netlink: 'syz.2.1785': attribute type 3 has an invalid length. [ 369.270968][T11196] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1785'. [ 369.367390][T11193] syzkaller0: entered promiscuous mode [ 369.376520][T11193] syzkaller0: entered allmulticast mode [ 369.416283][T11208] netlink: 'syz.1.1788': attribute type 10 has an invalid length. [ 369.448090][T11208] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1788'. [ 369.461205][T11208] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 372.039125][ T8159] wlan1: Trigger new scan to find an IBSS to join [ 372.768533][T11212] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 372.776388][T11212] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1789'. [ 372.786163][T11212] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 372.822194][T11231] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1797'. [ 372.938074][T11237] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1798'. [ 372.959892][ T8159] wlan1: Creating new IBSS network, BSSID c6:ed:c9:e3:35:f5 [ 373.068054][ T8160] wlan1: Trigger new scan to find an IBSS to join [ 373.169771][T11248] netlink: 'syz.0.1802': attribute type 21 has an invalid length. [ 373.203574][T11248] netlink: 'syz.0.1802': attribute type 10 has an invalid length. [ 373.232658][T11248] netlink: 'syz.0.1802': attribute type 12 has an invalid length. [ 373.244911][T11248] netlink: 'syz.0.1802': attribute type 13 has an invalid length. [ 373.266663][T11248] netlink: 'syz.0.1802': attribute type 14 has an invalid length. [ 373.304059][T11248] netlink: 'syz.0.1802': attribute type 15 has an invalid length. [ 373.320806][T11248] netlink: 'syz.0.1802': attribute type 16 has an invalid length. [ 373.329056][T11248] netlink: 'syz.0.1802': attribute type 19 has an invalid length. [ 373.336997][T11248] netlink: 'syz.0.1802': attribute type 21 has an invalid length. [ 373.352661][T11248] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.1802'. [ 374.035182][T11265] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1806'. [ 374.220073][T11273] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1807'. [ 374.275522][T11273] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 374.615652][T11282] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1811'. [ 376.191076][T11307] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1818'. [ 377.118716][T11329] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1825'. [ 377.149632][T11329] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 377.204480][T11325] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1824'. [ 377.405865][T11336] FAULT_INJECTION: forcing a failure. [ 377.405865][T11336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.431180][T11336] CPU: 0 PID: 11336 Comm: syz.3.1827 Not tainted syzkaller #0 [ 377.438707][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.448785][T11336] Call Trace: [ 377.452078][T11336] [ 377.455026][T11336] dump_stack_lvl+0x18c/0x250 [ 377.459727][T11336] ? show_regs_print_info+0x20/0x20 [ 377.464951][T11336] ? load_image+0x420/0x420 [ 377.469478][T11336] ? __might_fault+0xaa/0x120 [ 377.474187][T11336] ? __lock_acquire+0x7d40/0x7d40 [ 377.479249][T11336] should_fail_ex+0x39d/0x4d0 [ 377.483960][T11336] _copy_from_user+0x2f/0xe0 [ 377.488606][T11336] __sys_bpf+0x23e/0x890 [ 377.492870][T11336] ? bpf_link_show_fdinfo+0x390/0x390 [ 377.498284][T11336] ? lock_chain_count+0x20/0x20 [ 377.503168][T11336] __x64_sys_bpf+0x7c/0x90 [ 377.507611][T11336] do_syscall_64+0x55/0xb0 [ 377.512056][T11336] ? clear_bhb_loop+0x40/0x90 [ 377.516747][T11336] ? clear_bhb_loop+0x40/0x90 [ 377.521456][T11336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.527374][T11336] RIP: 0033:0x7f5c80d9ce59 [ 377.531800][T11336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.551408][T11336] RSP: 002b:00007f5c7eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.559818][T11336] RAX: ffffffffffffffda RBX: 00007f5c81015fa0 RCX: 00007f5c80d9ce59 [ 377.567784][T11336] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000019 [ 377.575746][T11336] RBP: 00007f5c7eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.583708][T11336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.591670][T11336] R13: 00007f5c81016038 R14: 00007f5c81015fa0 R15: 00007ffe484722a8 [ 377.599654][T11336] [ 377.749153][T11340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 378.050840][ T8158] wlan1: Trigger new scan to find an IBSS to join [ 378.761254][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.767676][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.535297][ T8160] wlan1: Creating new IBSS network, BSSID 6a:05:5f:52:8b:65 [ 379.553723][T11372] __nla_validate_parse: 2 callbacks suppressed [ 379.553741][T11372] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1837'. [ 379.572339][ T8160] ------------[ cut here ]------------ [ 379.578243][ T8160] WARNING: CPU: 0 PID: 8160 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 379.588265][ T8160] Modules linked in: [ 379.592190][ T8160] CPU: 0 PID: 8160 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 379.600168][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.608420][T11373] validate_nla: 14 callbacks suppressed [ 379.608437][T11373] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 379.610279][ T8160] Workqueue: cfg80211 cfg80211_event_work [ 379.629451][ T8160] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 379.635643][ T8160] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 c1 9e f7 0f 0b eb bb e8 9e c1 9e f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 c1 9e f7 0f 0b e9 e0 fd ff ff e8 [ 379.641669][T11373] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1838'. [ 379.655525][ T8160] RSP: 0000:ffffc900054a7a20 EFLAGS: 00010293 [ 379.670648][ T8160] RAX: ffffffff89e869f2 RBX: dffffc0000000000 RCX: ffff888026170000 [ 379.678701][ T8160] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 379.686708][ T8160] RBP: ffffc900054a7af8 R08: ffffffff911cd56f R09: 1ffffffff2239aad [ 379.694747][ T8160] R10: dffffc0000000000 R11: fffffbfff2239aae R12: ffff88805da74d10 [ 379.703049][ T8160] R13: 1ffff92000a94f4c R14: ffff888079f63618 R15: 000000000000001f [ 379.711221][ T8160] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 379.720220][ T8160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.726829][ T8160] CR2: 0000001b2da09ff8 CR3: 0000000026df7000 CR4: 00000000003506f0 [ 379.734907][ T8160] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.743025][ T8160] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 379.751088][ T8160] Call Trace: [ 379.754397][ T8160] [ 379.757368][ T8160] ? mutex_lock_nested+0x20/0x20 [ 379.762515][ T8160] ? trace_rdev_return_void+0x1c0/0x1c0 [ 379.768170][ T8160] cfg80211_process_wdev_events+0x3bc/0x550 [ 379.774124][ T8160] cfg80211_process_rdev_events+0xa1/0x110 [ 379.780032][ T8160] cfg80211_event_work+0x2f/0x40 [ 379.785010][ T8160] ? process_scheduled_works+0x96f/0x15d0 [ 379.790976][ T8160] process_scheduled_works+0xa5d/0x15d0 [ 379.796595][ T8160] ? worker_attach_to_pool+0x380/0x380 [ 379.802388][ T8160] ? assign_work+0x3d2/0x5d0 [ 379.807033][ T8160] worker_thread+0xa55/0xfc0 [ 379.811816][ T8160] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 379.817785][ T8160] ? _raw_spin_unlock+0x40/0x40 [ 379.822673][ T8160] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 379.828710][ T8160] kthread+0x2fa/0x390 [ 379.832808][ T8160] ? pr_cont_work+0x560/0x560 [ 379.837528][ T8160] ? kthread_blkcg+0xd0/0xd0 [ 379.842208][ T8160] ret_from_fork+0x48/0x80 [ 379.846683][ T8160] ? kthread_blkcg+0xd0/0xd0 [ 379.851350][ T8160] ret_from_fork_asm+0x11/0x20 [ 379.856193][ T8160] [ 379.859283][ T8160] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 379.866572][ T8160] CPU: 0 PID: 8160 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 379.874198][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.884254][ T8160] Workqueue: cfg80211 cfg80211_event_work [ 379.889980][ T8160] Call Trace: [ 379.893253][ T8160] [ 379.896180][ T8160] dump_stack_lvl+0x18c/0x250 [ 379.900856][ T8160] ? show_regs_print_info+0x20/0x20 [ 379.906046][ T8160] ? load_image+0x420/0x420 [ 379.910551][ T8160] panic+0x2dc/0x730 [ 379.914470][ T8160] ? bpf_jit_dump+0xd0/0xd0 [ 379.918982][ T8160] ? ret_from_fork_asm+0x11/0x20 [ 379.924097][ T8160] __warn+0x2e0/0x470 [ 379.928075][ T8160] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 379.933622][ T8160] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 379.939163][ T8160] report_bug+0x2be/0x4f0 [ 379.943506][ T8160] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 379.949052][ T8160] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 379.954594][ T8160] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 379.960138][ T8160] handle_bug+0xcf/0x120 [ 379.964377][ T8160] exc_invalid_op+0x1a/0x50 [ 379.968873][ T8160] asm_exc_invalid_op+0x1a/0x20 [ 379.973717][ T8160] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 379.979865][ T8160] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 c1 9e f7 0f 0b eb bb e8 9e c1 9e f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 c1 9e f7 0f 0b e9 e0 fd ff ff e8 [ 379.999503][ T8160] RSP: 0000:ffffc900054a7a20 EFLAGS: 00010293 [ 380.005569][ T8160] RAX: ffffffff89e869f2 RBX: dffffc0000000000 RCX: ffff888026170000 [ 380.013536][ T8160] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 380.021503][ T8160] RBP: ffffc900054a7af8 R08: ffffffff911cd56f R09: 1ffffffff2239aad [ 380.029466][ T8160] R10: dffffc0000000000 R11: fffffbfff2239aae R12: ffff88805da74d10 [ 380.037432][ T8160] R13: 1ffff92000a94f4c R14: ffff888079f63618 R15: 000000000000001f [ 380.045405][ T8160] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 380.050967][ T8160] ? mutex_lock_nested+0x20/0x20 [ 380.055902][ T8160] ? trace_rdev_return_void+0x1c0/0x1c0 [ 380.061466][ T8160] cfg80211_process_wdev_events+0x3bc/0x550 [ 380.067372][ T8160] cfg80211_process_rdev_events+0xa1/0x110 [ 380.073178][ T8160] cfg80211_event_work+0x2f/0x40 [ 380.078110][ T8160] ? process_scheduled_works+0x96f/0x15d0 [ 380.083825][ T8160] process_scheduled_works+0xa5d/0x15d0 [ 380.089390][ T8160] ? worker_attach_to_pool+0x380/0x380 [ 380.094846][ T8160] ? assign_work+0x3d2/0x5d0 [ 380.099436][ T8160] worker_thread+0xa55/0xfc0 [ 380.104021][ T8160] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 380.109914][ T8160] ? _raw_spin_unlock+0x40/0x40 [ 380.114760][ T8160] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 380.120668][ T8160] kthread+0x2fa/0x390 [ 380.124726][ T8160] ? pr_cont_work+0x560/0x560 [ 380.129401][ T8160] ? kthread_blkcg+0xd0/0xd0 [ 380.133981][ T8160] ret_from_fork+0x48/0x80 [ 380.138393][ T8160] ? kthread_blkcg+0xd0/0xd0 [ 380.142973][ T8160] ret_from_fork_asm+0x11/0x20 [ 380.147754][ T8160] [ 380.151028][ T8160] Kernel Offset: disabled [ 380.155401][ T8160] Rebooting in 86400 seconds..