last executing test programs: 9.40566358s ago: executing program 1 (id=4021): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$kcm(r1, 0x0, 0x24040810) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001040), 0x12) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 8.693411515s ago: executing program 3 (id=4024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002027732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000008b7030000000000287200000050000000851000000100000095000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050001000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r4, 0x8001}, 0xc) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r7, 0x0, 0xfefb) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000001c0)=0x10, 0x12) setsockopt$sock_attach_bpf(r5, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) sendmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18, 0x20048884}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x9, 0x4, 0x11d15, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xf, @void, @value, @value=r10}, 0x50) 8.645935476s ago: executing program 1 (id=4027): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 5.61265561s ago: executing program 3 (id=4031): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d81500010000000000000000000000ffff7a010401a80016002000", 0x36}], 0x1}, 0x400c044) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000e2850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ffff840000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001400)={0x7, 0x80, 0x8, 0x80, 0x81, 0x8, 0x0, 0xc, 0x82000, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x75d}, 0x100, 0x7ff, 0x9, 0x6, 0x9, 0x1, 0x0, 0x0, 0x200, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e22431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f5010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123fad5267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d409baeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d50000000000000001af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d5d40b88d2a810c489fc40e26af417fbd7754961841974230b98fe4c02cbc41eb1a61a4e9c19ab2362b2f0098b60cc1e4b25d5b3fe540a08e6153dd229c935846240ab79451fb359792b4c7103cd3307744477fa78dbb78512cf497dfef5d97245f4c3b34c6b89f072e381a35d1d7d3e0db5629985889ad49c5c9268d269d1e3c14c0ed4f390cd88353fd387fa"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="5486bbac43bbf8e44dcdd0e6b689", 0xfffffffffffffffd, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/149, 0x95}, {0x0}, {&(0x7f00000011c0)=""/182, 0xffffffffffffff56}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2040) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r4, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe21, 0x0, 0x0, 0x10, 0x320}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./cgroup/../file0/../file0\x00', r1, 0x4000, r5}, 0x18) 5.6113956s ago: executing program 0 (id=4039): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 5.100271771s ago: executing program 3 (id=4033): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000700)=')', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000000}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03700000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 5.098478781s ago: executing program 1 (id=4042): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 4.933369195s ago: executing program 2 (id=4034): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000c0000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) openat$cgroup_devices(r2, &(0x7f0000001140)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x0, &(0x7f00000011c0), &(0x7f0000001200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001240)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280), &(0x7f00000012c0), 0x10, 0x5}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x6, 0x87, 0x10, 0x0, 0x7f, 0x1004, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0xb}, 0x10, 0x4, 0x1ff, 0x6, 0x10, 0x7fffffff, 0x400, 0x0, 0x8, 0x0, 0x2}, r2, 0xa, 0xffffffffffffffff, 0xa) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x44ad1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0xd}, 0x106c48, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 4.591898592s ago: executing program 2 (id=4035): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.577811672s ago: executing program 0 (id=4036): socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) (async) r3 = syz_clone(0x2000, &(0x7f00000001c0)="d0a96103fc70f6bf1f0836eaeb0c526d6fd73aba8eafbc7de0ac33f636f4267165d3010b925e4c29ab597cdce19c89de73f9cf5361134d7c7e74f0557b9009016fd4e9ab858ae370", 0x48, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="ae4e55a86071f3865a880c6d901924b37efa87cb9658357db4041981f1e59a2d6c65c02782d13204fbe5820a70e52af5458877651477ee5e0ccbf07a90efeca0c4011f5ed5ee86780bdba44ec4b7a2a12a2497f25ac924875ed5fac241eed52e27f2411df60222947e0455885ea3e7ddd3817a8004d7a69fd1c8cb772c9e130378b0417b7f25c0c07bb024855214") perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x8, 0x8, 0x5, 0xff, 0x0, 0x5, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x7, 0x4}, 0x200, 0x8, 0xa, 0x4, 0x7, 0x1b02, 0x40, 0x0, 0x2, 0x0, 0x1}, r3, 0x3, r1, 0x5) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x91}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.004081324s ago: executing program 0 (id=4037): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300)}, 0x250a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2200, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000380)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001dc0)=""/4070, 0xfe6}, {&(0x7f0000000600)=""/192, 0xc0}], 0x2}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x4, 0x80, 0x1, 0x3, 0x2b, 0x9, 0x0, 0x2, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x10120, 0x0, 0x9, 0x0, 0x51, 0x738, 0xfff7, 0x0, 0x64a, 0x0, 0x5}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0) mkdirat$cgroup(r8, &(0x7f00000001c0)='syz0\x00', 0x1ff) r9 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, r9, 0x22, 0x0, 0x0, @void, @value=r4}, 0x20) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 3.591370144s ago: executing program 2 (id=4038): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.550191854s ago: executing program 1 (id=4040): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300)}, 0x250a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2200, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000380)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001dc0)=""/4070, 0xfe6}, {&(0x7f0000000600)=""/192, 0xc0}], 0x2}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x4, 0x80, 0x1, 0x3, 0x2b, 0x9, 0x0, 0x2, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x10120, 0x0, 0x9, 0x0, 0x51, 0x738, 0xfff7, 0x0, 0x64a, 0x0, 0x5}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0) mkdirat$cgroup(r8, &(0x7f00000001c0)='syz0\x00', 0x1ff) r9 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r10, r10, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, r9, 0x22, 0x0, 0x0, @void, @value=r4}, 0x20) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 1.251371963s ago: executing program 2 (id=4041): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000040), 0x3ff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f00000007c0), 0x7, r2}, 0x38) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r1, @ANYRESDEC=r7, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRES16=r6, @ANYBLOB="afb0ccb6878d6ae04214e7dc7a98cf495413fd015dd6d3bf64d07aaf0adec76e0f5a30a6a4b48833b539f747d36cd245f3d5ca121975c43611005fb86546a828cbe483dcd9dcb756c742b915479b8bcf24e0d9219ed9734cb2764374adcb", @ANYRES32=r1, @ANYRESDEC=r4, @ANYRESDEC=r2, @ANYRES16=r7], 0x48) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) close(r9) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r7, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x236}}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x8}}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x5f]}}, 0x0, 0x69, 0x0, 0x1, 0x7}, 0x28) 1.203274584s ago: executing program 0 (id=4043): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xf8) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000005c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000840)="9c", 0xfd}], 0x1}, 0x10) 1.184291744s ago: executing program 1 (id=4044): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x400c044) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000e2850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ffff840000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001400)={0x7, 0x80, 0x8, 0x80, 0x81, 0x8, 0x0, 0xc, 0x82000, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x75d}, 0x100, 0x7ff, 0x9, 0x6, 0x9, 0x1, 0x0, 0x0, 0x200, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="5486bbac43bbf8e44dcdd0e6b689", 0xfffffffffffffffd, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/149, 0x95}, {0x0}, {&(0x7f00000011c0)=""/182, 0xffffffffffffff56}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2040) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r4, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe21, 0x0, 0x0, 0x10, 0x320}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./cgroup/../file0/../file0\x00', r1, 0x4000, r5}, 0x18) 1.121188225s ago: executing program 3 (id=4045): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x79, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800}) socketpair(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0x0, 0x0, 0x8000}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 804.053923ms ago: executing program 3 (id=4046): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 667.322366ms ago: executing program 0 (id=4047): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x1000000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 562.226308ms ago: executing program 2 (id=4048): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 83.904067ms ago: executing program 3 (id=4049): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 82.686307ms ago: executing program 0 (id=4057): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 82.137367ms ago: executing program 1 (id=4050): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="0520000000000f00a69c63112200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x6}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305828, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40010120) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8917, 0x0) sendmsg$kcm(r7, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) setsockopt$sock_attach_bpf(r1, 0x0, 0x7, 0x0, 0x63) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800f7ffffffffffffff000000f9000018110000", @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000280)={r9, 0x0, 0xb4, 0x0, &(0x7f0000000180)="b8d9a0304914255ff3871a6a3cfd39de29b84b88801e2cd27bb22144fafa6d153f40ed5b8155a278a87b09d34419de3bc34ecf5987380b02a986798c0c6cd3940c3b4f802d87ab35072b16e7768e37282fe11c336a2a9c6f086cb3b1022f1e7648834b0e58083417773422febd021897545508729c388e8e467ad41067014c034d1bd4d3e0c515384e37795d8474cff2969739231c605ff35dd1c98f07c2de914dcbbf05fbb5f27e166eca22c316b46172f79ddf", 0x0, 0x5, 0x0, 0x13, 0x0, &(0x7f0000000240)="ee1bd3b0e8260ef258fc578acb20c4f683bab3", 0x0, 0x2, 0x0, 0x19}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003d63a00008000000000000080018", @ANYRES16=0x0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) 0s ago: executing program 2 (id=4051): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300)}, 0x250a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2200, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000380)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001dc0)=""/4070, 0xfe6}, {&(0x7f0000000600)=""/192, 0xc0}], 0x2}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x4, 0x80, 0x1, 0x3, 0x2b, 0x9, 0x0, 0x2, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x10120, 0x0, 0x9, 0x0, 0x51, 0x738, 0xfff7, 0x0, 0x64a, 0x0, 0x5}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0) mkdirat$cgroup(r8, &(0x7f00000001c0)='syz0\x00', 0x1ff) r9 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, r9, 0x22, 0x0, 0x0, @void, @value=r4}, 0x20) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) kernel console output (not intermixed with test programs): 87.222208][T15790] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 687.228082][T15790] tun_get_user+0xc84/0x3d70 [ 687.232738][T15790] ? trace_event_raw_event_lock+0x150/0x240 [ 687.238692][T15790] ? aa_file_perm+0x3e3/0xee0 [ 687.243422][T15790] ? rcu_read_unlock+0xa0/0xa0 [ 687.248257][T15790] ? tun_get+0x1c/0x2e0 [ 687.252467][T15790] ? __lock_acquire+0x7d80/0x7d80 [ 687.257605][T15790] ? tun_get+0x1c/0x2e0 [ 687.261822][T15790] tun_chr_write_iter+0x119/0x200 [ 687.266906][T15790] vfs_write+0x474/0x9a0 [ 687.271224][T15790] ? file_end_write+0x250/0x250 [ 687.276175][T15790] ? __fget_files+0x3fc/0x460 [ 687.280926][T15790] ? __fdget_pos+0x1d8/0x330 [ 687.285576][T15790] ? ksys_write+0x74/0x260 [ 687.290088][T15790] ksys_write+0x151/0x260 [ 687.294483][T15790] ? __ia32_sys_read+0x90/0x90 [ 687.299307][T15790] ? lockdep_hardirqs_on+0x98/0x150 [ 687.304559][T15790] do_syscall_64+0x55/0xb0 [ 687.309032][T15790] ? clear_bhb_loop+0x40/0x90 [ 687.313759][T15790] ? clear_bhb_loop+0x40/0x90 [ 687.318492][T15790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.324448][T15790] RIP: 0033:0x7fbafe59de59 [ 687.328918][T15790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.348578][T15790] RSP: 002b:00007fbaff53f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 687.357045][T15790] RAX: ffffffffffffffda RBX: 00007fbafe825fa0 RCX: 00007fbafe59de59 [ 687.365062][T15790] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 687.373077][T15790] RBP: 00007fbaff53f090 R08: 0000000000000000 R09: 0000000000000000 [ 687.381095][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.389124][T15790] R13: 00007fbafe826038 R14: 00007fbafe825fa0 R15: 00007ffc71da4ae8 [ 687.397165][T15790] [ 688.794006][T15802] netlink: 'syz.2.3033': attribute type 10 has an invalid length. [ 688.810384][T15802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3033'. [ 688.821586][T15802] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 688.837599][T15802] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.874204][T15802] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 690.721514][T15815] netlink: 'syz.1.3037': attribute type 10 has an invalid length. [ 691.377433][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 691.398329][ T9597] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 691.402948][T15821] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3039'. [ 691.445280][T15821] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3039'. [ 691.817827][T15831] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3044'. [ 692.534132][T15836] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 692.559405][T15836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3046'. [ 694.423819][T15844] netlink: 'syz.0.3047': attribute type 10 has an invalid length. [ 694.453318][T15844] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.3047'. [ 694.488543][T15844] openvswitch: netlink: Flow key attr not present in new flow. [ 694.704734][T15853] netlink: 'syz.3.3049': attribute type 10 has an invalid length. [ 695.999003][T15865] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3055'. [ 696.025042][T15865] bridge_slave_1: default FDB implementation only supports local addresses [ 696.693701][T15888] netlink: 'syz.3.3063': attribute type 21 has an invalid length. [ 696.702777][T15889] netlink: 'syz.1.3058': attribute type 10 has an invalid length. [ 696.744498][T15889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3058'. [ 697.014833][T15896] netlink: 'syz.0.3064': attribute type 10 has an invalid length. [ 697.939590][T15914] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3073'. [ 697.951606][T15914] bridge_slave_1: default FDB implementation only supports local addresses [ 698.666515][T15923] netlink: 'syz.2.3076': attribute type 21 has an invalid length. [ 699.426190][T15934] netlink: 'syz.1.3079': attribute type 10 has an invalid length. [ 699.854366][T15927] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 699.863262][T15927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3075'. [ 699.892235][T15927] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 699.912887][T15927] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.940880][T15927] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 700.169118][T15954] vcan0: entered allmulticast mode [ 700.178184][ T9264] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 700.412890][T15953] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3088'. [ 700.435563][T15953] bridge_slave_1: default FDB implementation only supports local addresses [ 701.091836][T15972] netlink: 'syz.3.3092': attribute type 10 has an invalid length. [ 702.122814][T15980] netlink: 'syz.1.3098': attribute type 39 has an invalid length. [ 702.903978][T16002] netlink: 'syz.1.3105': attribute type 10 has an invalid length. [ 703.792632][T16007] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3106'. [ 704.547698][T16024] vcan0: entered allmulticast mode [ 704.572656][T16024] netlink: 'syz.1.3111': attribute type 10 has an invalid length. [ 704.590142][T16024] veth0_macvtap: left promiscuous mode [ 704.922435][T16041] netlink: 'syz.2.3117': attribute type 10 has an invalid length. [ 704.944237][T16041] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3117'. [ 705.415111][T16057] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3120'. [ 705.575643][T16057] netlink: 'syz.1.3120': attribute type 10 has an invalid length. [ 705.625344][T16057] hsr0: entered promiscuous mode [ 705.697221][T16057] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 705.753023][T16057] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 705.764898][T16057] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 705.779840][T16057] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 705.787824][T16059] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3121'. [ 705.814831][T16059] FAULT_INJECTION: forcing a failure. [ 705.814831][T16059] name failslab, interval 1, probability 0, space 0, times 0 [ 705.853400][T16059] CPU: 1 PID: 16059 Comm: syz.0.3121 Not tainted syzkaller #0 [ 705.861003][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 705.871134][T16059] Call Trace: [ 705.874562][T16059] [ 705.877557][T16059] dump_stack_lvl+0x18c/0x250 [ 705.882312][T16059] ? show_regs_print_info+0x20/0x20 [ 705.887586][T16059] ? load_image+0x420/0x420 [ 705.892162][T16059] ? __might_sleep+0xe0/0xe0 [ 705.896813][T16059] ? __lock_acquire+0x7d80/0x7d80 [ 705.901919][T16059] should_fail_ex+0x394/0x4c0 [ 705.906677][T16059] should_failslab+0x9/0x20 [ 705.911278][T16059] slab_pre_alloc_hook+0x59/0x300 [ 705.916408][T16059] kmem_cache_alloc_node+0x5e/0x310 [ 705.921679][T16059] ? __alloc_skb+0x103/0x2c0 [ 705.926358][T16059] __alloc_skb+0x103/0x2c0 [ 705.930850][T16059] netlink_ack+0x377/0x1160 [ 705.935421][T16059] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 705.941579][T16059] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 705.947447][T16059] ? netlink_dump+0xec0/0xec0 [ 705.952188][T16059] ? perf_trace_lock+0x303/0x3b0 [ 705.957220][T16059] netlink_rcv_skb+0x2b3/0x4c0 [ 705.962053][T16059] ? rtnetlink_bind+0x80/0x80 [ 705.966789][T16059] ? netlink_ack+0x1160/0x1160 [ 705.971650][T16059] ? __lock_acquire+0x7d80/0x7d80 [ 705.976790][T16059] ? netlink_deliver_tap+0x2e/0x1b0 [ 705.982089][T16059] netlink_unicast+0x7b1/0x930 [ 705.986963][T16059] netlink_sendmsg+0x8d0/0xbf0 [ 705.991833][T16059] ? netlink_getsockopt+0x590/0x590 [ 705.997125][T16059] ? apparmor_socket_sendmsg+0x8e/0x330 [ 706.002743][T16059] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 706.008093][T16059] ? security_socket_sendmsg+0x80/0xa0 [ 706.013629][T16059] ? netlink_getsockopt+0x590/0x590 [ 706.018923][T16059] ____sys_sendmsg+0x61b/0x980 [ 706.023776][T16059] ? __asan_memset+0x22/0x40 [ 706.028457][T16059] ? __sys_sendmsg_sock+0x30/0x30 [ 706.033554][T16059] ? __import_iovec+0x3fa/0x850 [ 706.038498][T16059] ? import_iovec+0x73/0xa0 [ 706.043072][T16059] ___sys_sendmsg+0x2a6/0x360 [ 706.047839][T16059] ? __sys_sendmsg+0x2b0/0x2b0 [ 706.052727][T16059] ? __lock_acquire+0x7d80/0x7d80 [ 706.057899][T16059] __se_sys_sendmsg+0x1d0/0x2c0 [ 706.062830][T16059] ? __x64_sys_sendmsg+0x80/0x80 [ 706.067914][T16059] ? lockdep_hardirqs_on+0x98/0x150 [ 706.073178][T16059] do_syscall_64+0x55/0xb0 [ 706.077652][T16059] ? clear_bhb_loop+0x40/0x90 [ 706.082386][T16059] ? clear_bhb_loop+0x40/0x90 [ 706.087115][T16059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.093068][T16059] RIP: 0033:0x7fbafe59de59 [ 706.097535][T16059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.117206][T16059] RSP: 002b:00007fbaff53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.125678][T16059] RAX: ffffffffffffffda RBX: 00007fbafe825fa0 RCX: 00007fbafe59de59 [ 706.133700][T16059] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 706.141724][T16059] RBP: 00007fbaff53f090 R08: 0000000000000000 R09: 0000000000000000 [ 706.149744][T16059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.157761][T16059] R13: 00007fbafe826038 R14: 00007fbafe825fa0 R15: 00007ffc71da4ae8 [ 706.165859][T16059] [ 706.350645][T16062] netlink: 'syz.2.3122': attribute type 21 has an invalid length. [ 706.359167][T16062] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3122'. [ 706.487200][T16065] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3123'. [ 707.106740][T16070] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3125'. [ 707.191091][T16072] syzkaller0: entered promiscuous mode [ 707.196987][T16072] syzkaller0: entered allmulticast mode [ 707.569136][T16079] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3129'. [ 709.657863][T16101] netlink: 'syz.0.3134': attribute type 39 has an invalid length. [ 710.137730][T16114] netlink: 'syz.2.3140': attribute type 10 has an invalid length. [ 710.162759][T16114] veth0_macvtap: left promiscuous mode [ 710.600115][T16121] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3143'. [ 713.401716][T16129] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3146'. [ 713.429843][T16129] netlink: 'syz.3.3146': attribute type 1 has an invalid length. [ 713.454874][T16129] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.3146'. [ 713.497869][T16133] netlink: 'syz.1.3145': attribute type 13 has an invalid length. [ 714.157191][T16142] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3151'. [ 714.295033][T16148] FAULT_INJECTION: forcing a failure. [ 714.295033][T16148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.309021][T16148] CPU: 1 PID: 16148 Comm: syz.2.3154 Not tainted syzkaller #0 [ 714.316569][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 714.326685][T16148] Call Trace: [ 714.330040][T16148] [ 714.333057][T16148] dump_stack_lvl+0x18c/0x250 [ 714.337801][T16148] ? show_regs_print_info+0x20/0x20 [ 714.343053][T16148] ? load_image+0x420/0x420 [ 714.347625][T16148] ? __might_fault+0xaa/0x120 [ 714.352373][T16148] ? __lock_acquire+0x7d80/0x7d80 [ 714.357463][T16148] should_fail_ex+0x394/0x4c0 [ 714.362188][T16148] _copy_from_user+0x2f/0xe0 [ 714.366816][T16148] get_user_ifreq+0x6b/0x180 [ 714.371448][T16148] sock_ioctl+0x6f1/0x7e0 [ 714.375817][T16148] ? sock_poll+0x3e0/0x3e0 [ 714.380295][T16148] ? bpf_lsm_file_ioctl+0x9/0x10 [ 714.385267][T16148] ? security_file_ioctl+0x80/0xa0 [ 714.390420][T16148] ? sock_poll+0x3e0/0x3e0 [ 714.394878][T16148] __se_sys_ioctl+0xfd/0x170 [ 714.399526][T16148] do_syscall_64+0x55/0xb0 [ 714.403990][T16148] ? clear_bhb_loop+0x40/0x90 [ 714.408704][T16148] ? clear_bhb_loop+0x40/0x90 [ 714.413424][T16148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.419380][T16148] RIP: 0033:0x7fab5c39de59 [ 714.423836][T16148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.443504][T16148] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.451959][T16148] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 714.459972][T16148] RDX: 0000200000000080 RSI: 00000000000089f7 RDI: 0000000000000005 [ 714.467975][T16148] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 714.475983][T16148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.483983][T16148] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 714.492019][T16148] [ 714.676637][T16159] netlink: 'syz.3.3153': attribute type 10 has an invalid length. [ 714.686785][T16159] veth0_macvtap: left promiscuous mode [ 714.745558][T16153] vcan0: entered allmulticast mode [ 714.752839][T16156] syzkaller0: entered promiscuous mode [ 714.767016][T16156] syzkaller0: entered allmulticast mode [ 716.560981][T16188] FAULT_INJECTION: forcing a failure. [ 716.560981][T16188] name failslab, interval 1, probability 0, space 0, times 0 [ 716.604733][T16188] CPU: 1 PID: 16188 Comm: syz.1.3168 Not tainted syzkaller #0 [ 716.612299][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 716.622405][T16188] Call Trace: [ 716.625730][T16188] [ 716.628702][T16188] dump_stack_lvl+0x18c/0x250 [ 716.633454][T16188] ? show_regs_print_info+0x20/0x20 [ 716.638728][T16188] ? load_image+0x420/0x420 [ 716.643292][T16188] ? __might_sleep+0xe0/0xe0 [ 716.647951][T16188] ? __lock_acquire+0x7d80/0x7d80 [ 716.653055][T16188] should_fail_ex+0x394/0x4c0 [ 716.657780][T16188] should_failslab+0x9/0x20 [ 716.662332][T16188] slab_pre_alloc_hook+0x59/0x300 [ 716.667416][T16188] ? __lock_acquire+0x7d80/0x7d80 [ 716.672474][T16188] kmem_cache_alloc_node+0x5e/0x310 [ 716.677709][T16188] ? __alloc_skb+0x103/0x2c0 [ 716.682353][T16188] __alloc_skb+0x103/0x2c0 [ 716.687327][T16188] netlink_sendmsg+0x66a/0xbf0 [ 716.692133][T16188] ? netlink_getsockopt+0x590/0x590 [ 716.697375][T16188] ? apparmor_socket_sendmsg+0x8e/0x330 [ 716.702963][T16188] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 716.708287][T16188] ? security_socket_sendmsg+0x80/0xa0 [ 716.713797][T16188] ? netlink_getsockopt+0x590/0x590 [ 716.719042][T16188] ____sys_sendmsg+0x61b/0x980 [ 716.723848][T16188] ? __asan_memset+0x22/0x40 [ 716.728482][T16188] ? __sys_sendmsg_sock+0x30/0x30 [ 716.733541][T16188] ? __import_iovec+0x5f2/0x850 [ 716.738435][T16188] ? import_iovec+0x73/0xa0 [ 716.742976][T16188] ___sys_sendmsg+0x2a6/0x360 [ 716.747688][T16188] ? get_pid_task+0x20/0x1e0 [ 716.752320][T16188] ? __sys_sendmsg+0x2b0/0x2b0 [ 716.757141][T16188] ? __lock_acquire+0x7d80/0x7d80 [ 716.762214][T16188] __se_sys_sendmsg+0x1d0/0x2c0 [ 716.767108][T16188] ? __x64_sys_sendmsg+0x80/0x80 [ 716.772095][T16188] ? lockdep_hardirqs_on+0x98/0x150 [ 716.777340][T16188] do_syscall_64+0x55/0xb0 [ 716.781794][T16188] ? clear_bhb_loop+0x40/0x90 [ 716.786497][T16188] ? clear_bhb_loop+0x40/0x90 [ 716.791200][T16188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.797124][T16188] RIP: 0033:0x7f6bdb19de59 [ 716.801559][T16188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.821213][T16188] RSP: 002b:00007f6bdc017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.829649][T16188] RAX: ffffffffffffffda RBX: 00007f6bdb425fa0 RCX: 00007f6bdb19de59 [ 716.837647][T16188] RDX: ff0f000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 716.845647][T16188] RBP: 00007f6bdc017090 R08: 0000000000000000 R09: 0000000000000000 [ 716.853661][T16188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.861650][T16188] R13: 00007f6bdb426038 R14: 00007f6bdb425fa0 R15: 00007ffcab8f2468 [ 716.869669][T16188] [ 716.906758][T16192] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3170'. [ 718.135333][T16220] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3178'. [ 719.675723][T16238] netlink: 'syz.2.3187': attribute type 33 has an invalid length. [ 719.683605][T16238] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3187'. [ 719.745939][T16241] netlink: 'syz.2.3187': attribute type 33 has an invalid length. [ 719.753826][T16241] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3187'. [ 719.942279][T16249] netlink: 'syz.3.3188': attribute type 21 has an invalid length. [ 721.117548][T16276] Q±6ã`Ò˜: renamed from lo (while UP) [ 721.174800][T16278] netlink: 'syz.0.3200': attribute type 21 has an invalid length. [ 721.308485][T16284] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 721.916202][T16297] netlink: 'syz.2.3207': attribute type 4 has an invalid length. [ 723.212968][T16310] netlink: 'syz.1.3211': attribute type 21 has an invalid length. [ 723.382489][T16313] FAULT_INJECTION: forcing a failure. [ 723.382489][T16313] name failslab, interval 1, probability 0, space 0, times 0 [ 723.399911][T16313] CPU: 1 PID: 16313 Comm: syz.2.3212 Not tainted syzkaller #0 [ 723.407464][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.417597][T16313] Call Trace: [ 723.420944][T16313] [ 723.424080][T16313] dump_stack_lvl+0x18c/0x250 [ 723.428870][T16313] ? show_regs_print_info+0x20/0x20 [ 723.434161][T16313] ? load_image+0x420/0x420 [ 723.438758][T16313] ? __might_sleep+0xe0/0xe0 [ 723.443406][T16313] ? __lock_acquire+0x7d80/0x7d80 [ 723.448509][T16313] should_fail_ex+0x394/0x4c0 [ 723.453275][T16313] should_failslab+0x9/0x20 [ 723.457863][T16313] slab_pre_alloc_hook+0x59/0x300 [ 723.462970][T16313] ? __get_vm_area_node+0x125/0x370 [ 723.468237][T16313] __kmem_cache_alloc_node+0x53/0x250 [ 723.473687][T16313] ? __get_vm_area_node+0x125/0x370 [ 723.478949][T16313] kmalloc_node_trace+0x26/0xe0 [ 723.483891][T16313] __get_vm_area_node+0x125/0x370 [ 723.489023][T16313] __vmalloc_node_range+0x36f/0x1320 [ 723.494381][T16313] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 723.499997][T16313] ? __lock_acquire+0x7d80/0x7d80 [ 723.505084][T16313] ? mark_lock+0x94/0x320 [ 723.509503][T16313] ? trace_call_bpf+0xc3/0x6c0 [ 723.514329][T16313] ? trace_call_bpf+0x5e9/0x6c0 [ 723.519240][T16313] ? trace_call_bpf+0xc3/0x6c0 [ 723.524104][T16313] ? aa_get_newest_label+0xfd/0x5c0 [ 723.529370][T16313] ? free_vm_area+0x50/0x50 [ 723.533937][T16313] ? end_current_label_crit_section+0x170/0x170 [ 723.540249][T16313] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 723.545846][T16313] __vmalloc+0x7a/0x90 [ 723.550000][T16313] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 723.555598][T16313] bpf_prog_alloc_no_stats+0x46/0x430 [ 723.561036][T16313] bpf_prog_alloc+0x3d/0x1a0 [ 723.565690][T16313] bpf_prog_load+0x6b2/0x1610 [ 723.570450][T16313] ? map_freeze+0x420/0x420 [ 723.575017][T16313] ? __might_fault+0xaa/0x120 [ 723.579746][T16313] ? __lock_acquire+0x7d80/0x7d80 [ 723.584828][T16313] ? file_end_write+0x159/0x250 [ 723.589759][T16313] ? __might_fault+0xaa/0x120 [ 723.594478][T16313] ? __might_fault+0xc6/0x120 [ 723.599187][T16313] ? __might_fault+0xaa/0x120 [ 723.603922][T16313] ? bpf_lsm_bpf+0x9/0x10 [ 723.608311][T16313] ? security_bpf+0x7e/0xa0 [ 723.612878][T16313] __sys_bpf+0x5ba/0x890 [ 723.617184][T16313] ? bpf_link_show_fdinfo+0x390/0x390 [ 723.622642][T16313] ? lock_chain_count+0x20/0x20 [ 723.627576][T16313] __x64_sys_bpf+0x7c/0x90 [ 723.632038][T16313] do_syscall_64+0x55/0xb0 [ 723.636502][T16313] ? clear_bhb_loop+0x40/0x90 [ 723.641261][T16313] ? clear_bhb_loop+0x40/0x90 [ 723.645986][T16313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.651930][T16313] RIP: 0033:0x7fab5c39de59 [ 723.656393][T16313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.676048][T16313] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 723.684520][T16313] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 723.692538][T16313] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 723.700552][T16313] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 723.708572][T16313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.716583][T16313] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 723.724649][T16313] [ 723.746580][T16313] syz.2.3212: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 723.770040][T16313] CPU: 0 PID: 16313 Comm: syz.2.3212 Not tainted syzkaller #0 [ 723.777597][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.787717][T16313] Call Trace: [ 723.791053][T16313] [ 723.794052][T16313] dump_stack_lvl+0x18c/0x250 [ 723.798833][T16313] ? show_regs_print_info+0x20/0x20 [ 723.804120][T16313] ? load_image+0x420/0x420 [ 723.808719][T16313] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 723.815224][T16313] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 723.821835][T16313] warn_alloc+0x246/0x340 [ 723.826281][T16313] ? zone_watermark_ok_safe+0x230/0x230 [ 723.831935][T16313] ? __get_vm_area_node+0x356/0x370 [ 723.837242][T16313] __vmalloc_node_range+0x394/0x1320 [ 723.842610][T16313] ? __lock_acquire+0x7d80/0x7d80 [ 723.847717][T16313] ? mark_lock+0x94/0x320 [ 723.852162][T16313] ? trace_call_bpf+0xc3/0x6c0 [ 723.857031][T16313] ? trace_call_bpf+0x5e9/0x6c0 [ 723.862018][T16313] ? trace_call_bpf+0xc3/0x6c0 [ 723.866912][T16313] ? aa_get_newest_label+0xfd/0x5c0 [ 723.872188][T16313] ? free_vm_area+0x50/0x50 [ 723.876789][T16313] ? end_current_label_crit_section+0x170/0x170 [ 723.883136][T16313] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 723.888766][T16313] __vmalloc+0x7a/0x90 [ 723.892935][T16313] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 723.898575][T16313] bpf_prog_alloc_no_stats+0x46/0x430 [ 723.904067][T16313] bpf_prog_alloc+0x3d/0x1a0 [ 723.908767][T16313] bpf_prog_load+0x6b2/0x1610 [ 723.913569][T16313] ? map_freeze+0x420/0x420 [ 723.918202][T16313] ? __might_fault+0xaa/0x120 [ 723.922962][T16313] ? __lock_acquire+0x7d80/0x7d80 [ 723.928079][T16313] ? file_end_write+0x159/0x250 [ 723.933034][T16313] ? __might_fault+0xaa/0x120 [ 723.937804][T16313] ? __might_fault+0xc6/0x120 [ 723.942564][T16313] ? __might_fault+0xaa/0x120 [ 723.947325][T16313] ? bpf_lsm_bpf+0x9/0x10 [ 723.951738][T16313] ? security_bpf+0x7e/0xa0 [ 723.956322][T16313] __sys_bpf+0x5ba/0x890 [ 723.960650][T16313] ? bpf_link_show_fdinfo+0x390/0x390 [ 723.966164][T16313] ? lock_chain_count+0x20/0x20 [ 723.971130][T16313] __x64_sys_bpf+0x7c/0x90 [ 723.975629][T16313] do_syscall_64+0x55/0xb0 [ 723.980136][T16313] ? clear_bhb_loop+0x40/0x90 [ 723.984922][T16313] ? clear_bhb_loop+0x40/0x90 [ 723.989682][T16313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.995664][T16313] RIP: 0033:0x7fab5c39de59 [ 724.000165][T16313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.019854][T16313] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 724.028360][T16313] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 724.036412][T16313] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 724.044457][T16313] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 724.052499][T16313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.060540][T16313] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 724.068638][T16313] [ 724.107296][T16313] Mem-Info: [ 724.110760][T16313] active_anon:15692 inactive_anon:0 isolated_anon:0 [ 724.110760][T16313] active_file:18338 inactive_file:40195 isolated_file:0 [ 724.110760][T16313] unevictable:768 dirty:122 writeback:0 [ 724.110760][T16313] slab_reclaimable:10641 slab_unreclaimable:95453 [ 724.110760][T16313] mapped:25297 shmem:1361 pagetables:553 [ 724.110760][T16313] sec_pagetables:0 bounce:0 [ 724.110760][T16313] kernel_misc_reclaimable:0 [ 724.110760][T16313] free:1330974 free_pcp:9418 free_cma:0 [ 724.186751][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 724.194721][T16313] Node 0 active_anon:62468kB inactive_anon:0kB active_file:73352kB inactive_file:160580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100788kB dirty:488kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9920kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no [ 724.255863][T16313] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 724.324591][T16313] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.353093][T16313] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 724.359018][T16313] Node 0 DMA32 free:1407844kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:62912kB inactive_anon:0kB active_file:73352kB inactive_file:159752kB unevictable:1536kB writepending:516kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:21432kB local_pcp:17828kB free_cma:0kB [ 724.407328][T16313] lowmem_reserve[]: 0 0 0 0 0 [ 724.412231][T16313] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 724.477161][T16313] lowmem_reserve[]: 0 0 0 0 0 [ 724.489557][T16313] Node 1 Normal free:3900688kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15808kB local_pcp:11328kB free_cma:0kB [ 724.552951][T16313] lowmem_reserve[]: 0 0 0 0 0 [ 724.564948][T16313] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 724.591934][T16313] Node 0 DMA32: 40*4kB (M) 667*8kB (UME) 1133*16kB (UME) 725*32kB (UME) 352*64kB (UME) 159*128kB (UME) 50*256kB (UME) 41*512kB (UM) 8*1024kB (UM) 7*2048kB (UM) 308*4096kB (UME) = 1407592kB [ 724.618766][T16313] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 724.631420][T16313] Node 1 Normal: 252*4kB (UME) 58*8kB (UME) 47*16kB (UME) 177*32kB (UME) 49*64kB (UME) 10*128kB (UME) 1*256kB (M) 2*512kB (U) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3900688kB [ 724.655723][ T9597] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 724.669540][ T9264] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 724.681278][T16313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 724.696618][T16313] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 724.709878][T16313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 724.722130][T16313] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 724.734489][T16313] 59894 total pagecache pages [ 724.739302][T16313] 0 pages in swap cache [ 724.743561][T16313] Free swap = 124996kB [ 724.752176][T16313] Total swap = 124996kB [ 724.760224][T16313] 2097051 pages RAM [ 724.777763][T16313] 0 pages HighMem/MovableOnly [ 724.782511][T16313] 416953 pages reserved [ 724.792490][T16313] 0 pages cma reserved [ 725.167530][T16337] netlink: 'syz.3.3222': attribute type 21 has an invalid length. [ 726.826897][T16362] netlink: 'syz.1.3233': attribute type 21 has an invalid length. [ 727.008261][T16368] netlink: 'syz.3.3235': attribute type 10 has an invalid length. [ 727.065657][T16368] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 727.934955][T16389] netlink: 'syz.3.3245': attribute type 21 has an invalid length. [ 728.018826][T16393] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3247'. [ 728.143059][T16391] netlink: 'syz.1.3246': attribute type 29 has an invalid length. [ 728.167824][T16391] netlink: 'syz.1.3246': attribute type 29 has an invalid length. [ 728.436317][T16406] netlink: 'syz.2.3251': attribute type 21 has an invalid length. [ 728.445660][T16406] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3251'. [ 728.793442][T16411] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3253'. [ 728.945893][T16420] FAULT_INJECTION: forcing a failure. [ 728.945893][T16420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.970143][T16421] netlink: 'syz.0.3256': attribute type 21 has an invalid length. [ 728.982081][T16420] CPU: 0 PID: 16420 Comm: syz.1.3255 Not tainted syzkaller #0 [ 728.989626][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.999701][T16420] Call Trace: [ 729.002998][T16420] [ 729.005954][T16420] dump_stack_lvl+0x18c/0x250 [ 729.010691][T16420] ? show_regs_print_info+0x20/0x20 [ 729.015922][T16420] ? load_image+0x420/0x420 [ 729.020464][T16420] ? __lock_acquire+0x7d80/0x7d80 [ 729.025512][T16420] ? snprintf+0xe9/0x140 [ 729.029782][T16420] should_fail_ex+0x394/0x4c0 [ 729.034486][T16420] _copy_to_user+0x2f/0xa0 [ 729.038928][T16420] simple_read_from_buffer+0xe7/0x150 [ 729.044335][T16420] proc_fail_nth_read+0x1e8/0x260 [ 729.049387][T16420] ? proc_fault_inject_write+0x360/0x360 [ 729.055045][T16420] ? fsnotify_perm+0x271/0x5e0 [ 729.059844][T16420] ? proc_fault_inject_write+0x360/0x360 [ 729.065505][T16420] vfs_read+0x298/0x990 [ 729.069698][T16420] ? kernel_read+0x1e0/0x1e0 [ 729.074331][T16420] ? __fget_files+0x28/0x460 [ 729.078985][T16420] ? __fget_files+0x3fc/0x460 [ 729.083696][T16420] ? __fdget_pos+0x2a3/0x330 [ 729.088313][T16420] ? ksys_read+0x74/0x260 [ 729.092667][T16420] ksys_read+0x151/0x260 [ 729.096942][T16420] ? vfs_write+0x9a0/0x9a0 [ 729.101389][T16420] ? lockdep_hardirqs_on+0x98/0x150 [ 729.106613][T16420] do_syscall_64+0x55/0xb0 [ 729.111061][T16420] ? clear_bhb_loop+0x40/0x90 [ 729.115747][T16420] ? clear_bhb_loop+0x40/0x90 [ 729.120479][T16420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.126427][T16420] RIP: 0033:0x7f6bdb15e68e [ 729.130880][T16420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 729.150512][T16420] RSP: 002b:00007f6bdc016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.158950][T16420] RAX: ffffffffffffffda RBX: 00007f6bdc0176c0 RCX: 00007f6bdb15e68e [ 729.166946][T16420] RDX: 000000000000000f RSI: 00007f6bdc0170a0 RDI: 0000000000000005 [ 729.174951][T16420] RBP: 00007f6bdc017090 R08: 0000000000000000 R09: 0000000000000000 [ 729.182975][T16420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.190968][T16420] R13: 00007f6bdb426038 R14: 00007f6bdb425fa0 R15: 00007ffcab8f2468 [ 729.198993][T16420] [ 730.932169][T16447] netlink: 'syz.3.3267': attribute type 21 has an invalid length. [ 731.144585][T16449] netlink: 'syz.2.3268': attribute type 4 has an invalid length. [ 731.152441][T16449] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3268'. [ 731.198882][T16449] .`: renamed from bond0 (while UP) [ 731.369213][T16455] netlink: 'syz.1.3270': attribute type 10 has an invalid length. [ 731.529063][T16455] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 731.613326][ T9617] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 731.879496][T16479] FAULT_INJECTION: forcing a failure. [ 731.879496][T16479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.892745][T16479] CPU: 0 PID: 16479 Comm: syz.0.3279 Not tainted syzkaller #0 [ 731.900273][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.910398][T16479] Call Trace: [ 731.913726][T16479] [ 731.916698][T16479] dump_stack_lvl+0x18c/0x250 [ 731.921441][T16479] ? show_regs_print_info+0x20/0x20 [ 731.926696][T16479] ? load_image+0x420/0x420 [ 731.931253][T16479] ? __might_fault+0xaa/0x120 [ 731.935975][T16479] ? __lock_acquire+0x7d80/0x7d80 [ 731.941056][T16479] should_fail_ex+0x394/0x4c0 [ 731.945787][T16479] _copy_from_iter+0x1cd/0x1290 [ 731.950690][T16479] ? __might_fault+0xaa/0x120 [ 731.955446][T16479] ? copyout_mc+0x70/0x70 [ 731.959823][T16479] ? copyout_mc+0x70/0x70 [ 731.964199][T16479] ? __virt_addr_valid+0x10c/0x380 [ 731.969365][T16479] ? page_copy_sane+0x16a/0x270 [ 731.974270][T16479] copy_page_from_iter+0x7b/0x100 [ 731.979346][T16479] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 731.985212][T16479] tun_get_user+0xc84/0x3d70 [ 731.989860][T16479] ? aa_file_perm+0x3e3/0xee0 [ 731.994583][T16479] ? rcu_read_unlock+0xa0/0xa0 [ 731.999405][T16479] ? tun_get+0x1c/0x2e0 [ 732.003596][T16479] ? __lock_acquire+0x7d80/0x7d80 [ 732.008662][T16479] ? tun_get+0x1c/0x2e0 [ 732.012846][T16479] tun_chr_write_iter+0x119/0x200 [ 732.017894][T16479] vfs_write+0x474/0x9a0 [ 732.022175][T16479] ? file_end_write+0x250/0x250 [ 732.027060][T16479] ? __fget_files+0x3fc/0x460 [ 732.031772][T16479] ? __fdget_pos+0x1d8/0x330 [ 732.036396][T16479] ? ksys_write+0x74/0x260 [ 732.040844][T16479] ksys_write+0x151/0x260 [ 732.045212][T16479] ? __ia32_sys_read+0x90/0x90 [ 732.050016][T16479] ? lockdep_hardirqs_on+0x98/0x150 [ 732.055248][T16479] do_syscall_64+0x55/0xb0 [ 732.059698][T16479] ? clear_bhb_loop+0x40/0x90 [ 732.064409][T16479] ? clear_bhb_loop+0x40/0x90 [ 732.069112][T16479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.075036][T16479] RIP: 0033:0x7fbafe59de59 [ 732.079473][T16479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.099106][T16479] RSP: 002b:00007fbaff53f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.107549][T16479] RAX: ffffffffffffffda RBX: 00007fbafe825fa0 RCX: 00007fbafe59de59 [ 732.115555][T16479] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 732.123551][T16479] RBP: 00007fbaff53f090 R08: 0000000000000000 R09: 0000000000000000 [ 732.131567][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.139565][T16479] R13: 00007fbafe826038 R14: 00007fbafe825fa0 R15: 00007ffc71da4ae8 [ 732.147579][T16479] [ 732.583749][T16486] netlink: 'syz.1.3282': attribute type 33 has an invalid length. [ 732.609302][T16486] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3282'. [ 733.590697][T16504] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 733.740160][T16506] netlink: 'syz.0.3287': attribute type 10 has an invalid length. [ 733.766607][T16512] netlink: 'syz.3.3290': attribute type 29 has an invalid length. [ 733.883883][T16506] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 733.893960][T16512] netlink: 'syz.3.3290': attribute type 29 has an invalid length. [ 734.109071][T16518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.140844][T16518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.160487][T16518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.173913][T16518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.190476][T16518] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 734.200734][T16518] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 734.237498][T16518] bond0: (slave batadv0): Releasing backup interface [ 736.335045][ T9617] wlan1: Trigger new scan to find an IBSS to join [ 736.879332][T16572] netlink: 'syz.1.3312': attribute type 29 has an invalid length. [ 736.891127][T16572] netlink: 'syz.1.3312': attribute type 29 has an invalid length. [ 736.903732][T16572] FAULT_INJECTION: forcing a failure. [ 736.903732][T16572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.920725][T16572] CPU: 0 PID: 16572 Comm: syz.1.3312 Not tainted syzkaller #0 [ 736.928255][T16572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.938369][T16572] Call Trace: [ 736.941695][T16572] [ 736.944668][T16572] dump_stack_lvl+0x18c/0x250 [ 736.949418][T16572] ? show_regs_print_info+0x20/0x20 [ 736.954685][T16572] ? load_image+0x420/0x420 [ 736.959256][T16572] ? __might_fault+0xaa/0x120 [ 736.963983][T16572] should_fail_ex+0x394/0x4c0 [ 736.968721][T16572] copyout+0x1a/0x90 [ 736.972664][T16572] _copy_to_iter+0x42b/0x1110 [ 736.977382][T16572] ? __virt_addr_valid+0x10c/0x380 [ 736.982555][T16572] ? iov_iter_init+0x1e0/0x1e0 [ 736.987371][T16572] ? __virt_addr_valid+0x10c/0x380 [ 736.992522][T16572] ? __virt_addr_valid+0x10c/0x380 [ 736.997674][T16572] ? __virt_addr_valid+0x10c/0x380 [ 737.002849][T16572] ? __check_object_size+0x4fc/0xa40 [ 737.008176][T16572] __skb_datagram_iter+0xdb/0x780 [ 737.013250][T16572] ? skb_copy_datagram_iter+0x200/0x200 [ 737.018846][T16572] skb_copy_datagram_iter+0xb1/0x200 [ 737.024192][T16572] netlink_recvmsg+0x2d4/0xe60 [ 737.029013][T16572] ? netlink_sendmsg+0xbf0/0xbf0 [ 737.034004][T16572] ? aa_af_perm+0x330/0x330 [ 737.038564][T16572] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 737.043905][T16572] ? security_socket_recvmsg+0x89/0xb0 [ 737.049408][T16572] ? netlink_sendmsg+0xbf0/0xbf0 [ 737.054400][T16572] ____sys_recvmsg+0x2bd/0x5d0 [ 737.059211][T16572] ? __sys_recvmsg_sock+0x50/0x50 [ 737.064291][T16572] ? import_iovec+0x73/0xa0 [ 737.068852][T16572] ___sys_recvmsg+0x214/0x590 [ 737.073580][T16572] ? __sys_recvmsg+0x2a0/0x2a0 [ 737.078394][T16572] ? ksys_write+0x1d2/0x260 [ 737.082944][T16572] ? __fget_files+0x3fc/0x460 [ 737.087679][T16572] __x64_sys_recvmsg+0x21e/0x2f0 [ 737.092646][T16572] ? ___sys_recvmsg+0x590/0x590 [ 737.097539][T16572] ? lockdep_hardirqs_on+0x98/0x150 [ 737.102768][T16572] do_syscall_64+0x55/0xb0 [ 737.107248][T16572] ? clear_bhb_loop+0x40/0x90 [ 737.111954][T16572] ? clear_bhb_loop+0x40/0x90 [ 737.116681][T16572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.122618][T16572] RIP: 0033:0x7f6bdb19de59 [ 737.127067][T16572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.146708][T16572] RSP: 002b:00007f6bdc017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 737.155164][T16572] RAX: ffffffffffffffda RBX: 00007f6bdb425fa0 RCX: 00007f6bdb19de59 [ 737.163170][T16572] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 737.171169][T16572] RBP: 00007f6bdc017090 R08: 0000000000000000 R09: 0000000000000000 [ 737.179209][T16572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.187215][T16572] R13: 00007f6bdb426038 R14: 00007f6bdb425fa0 R15: 00007ffcab8f2468 [ 737.195261][T16572] [ 737.227956][T16572] netlink: 'syz.1.3312': attribute type 29 has an invalid length. [ 738.637120][T16594] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3320'. [ 739.106577][T16603] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 739.376592][ T9615] wlan1: Trigger new scan to find an IBSS to join [ 739.675072][T16626] netlink: 'syz.1.3331': attribute type 10 has an invalid length. [ 740.336392][ T9611] wlan1: Trigger new scan to find an IBSS to join [ 740.651431][T16634] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3336'. [ 741.148212][T16653] netlink: 'syz.0.3342': attribute type 10 has an invalid length. [ 741.382163][ T9611] wlan1: Trigger new scan to find an IBSS to join [ 741.848359][T16659] netlink: 'syz.0.3347': attribute type 5 has an invalid length. [ 742.033361][ T9615] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 742.290432][T16667] netlink: 'syz.2.3351': attribute type 21 has an invalid length. [ 743.077566][T16685] bridge_slave_1: left allmulticast mode [ 743.091638][T16685] bridge_slave_1: left promiscuous mode [ 743.108084][T16685] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.750359][T16685] bridge_slave_0: left allmulticast mode [ 743.762299][T16685] bridge_slave_0: left promiscuous mode [ 743.778060][T16685] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.018879][T16684] netlink: 'syz.2.3358': attribute type 2 has an invalid length. [ 744.028137][T16684] netlink: 'syz.2.3358': attribute type 8 has an invalid length. [ 744.036430][T16684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3358'. [ 744.047216][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'. [ 744.059986][T16693] netlink: 'syz.3.3362': attribute type 21 has an invalid length. [ 744.228430][T16698] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 744.340131][ T9264] wlan1: Trigger new scan to find an IBSS to join [ 744.586099][T16707] netlink: 'syz.0.3368': attribute type 4 has an invalid length. [ 744.593909][T16707] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3368'. [ 744.629775][T16707] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 744.971534][T16720] netlink: 'syz.3.3371': attribute type 10 has an invalid length. [ 745.119990][T16726] netlink: 'syz.2.3374': attribute type 21 has an invalid length. [ 745.297138][ T13] wlan1: Trigger new scan to find an IBSS to join [ 746.033184][ T9615] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 746.354530][ T9264] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 746.840676][T16755] netlink: 'syz.1.3384': attribute type 21 has an invalid length. [ 747.506267][T16765] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3387'. [ 747.701205][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.707733][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.848816][T16773] FAULT_INJECTION: forcing a failure. [ 747.848816][T16773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.866735][T16773] CPU: 0 PID: 16773 Comm: syz.1.3390 Not tainted syzkaller #0 [ 747.874260][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 747.884348][T16773] Call Trace: [ 747.887668][T16773] [ 747.890633][T16773] dump_stack_lvl+0x18c/0x250 [ 747.895370][T16773] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 747.901579][T16773] ? show_regs_print_info+0x20/0x20 [ 747.906838][T16773] ? load_image+0x420/0x420 [ 747.911407][T16773] should_fail_ex+0x394/0x4c0 [ 747.916139][T16773] _copy_to_user+0x2f/0xa0 [ 747.920609][T16773] generic_map_lookup_batch+0x85d/0xc60 [ 747.926230][T16773] ? bpf_map_update_value+0x710/0x710 [ 747.931654][T16773] ? __fdget+0x180/0x210 [ 747.935964][T16773] ? bpf_map_update_value+0x710/0x710 [ 747.941386][T16773] bpf_map_do_batch+0x2e3/0x600 [ 747.946290][T16773] ? bpf_lsm_bpf+0x9/0x10 [ 747.950675][T16773] ? security_bpf+0x7e/0xa0 [ 747.955236][T16773] __sys_bpf+0x7d7/0x890 [ 747.959530][T16773] ? bpf_link_show_fdinfo+0x390/0x390 [ 747.964969][T16773] ? lock_chain_count+0x20/0x20 [ 747.969881][T16773] __x64_sys_bpf+0x7c/0x90 [ 747.974347][T16773] do_syscall_64+0x55/0xb0 [ 747.978817][T16773] ? clear_bhb_loop+0x40/0x90 [ 747.983538][T16773] ? clear_bhb_loop+0x40/0x90 [ 747.988258][T16773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 747.994189][T16773] RIP: 0033:0x7f6bdb19de59 [ 747.998629][T16773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.018256][T16773] RSP: 002b:00007f6bdc017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.026695][T16773] RAX: ffffffffffffffda RBX: 00007f6bdb425fa0 RCX: 00007f6bdb19de59 [ 748.034698][T16773] RDX: 0000000000000039 RSI: 0000200000000000 RDI: 0000000000000018 [ 748.042702][T16773] RBP: 00007f6bdc017090 R08: 0000000000000000 R09: 0000000000000000 [ 748.050695][T16773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.058688][T16773] R13: 00007f6bdb426038 R14: 00007f6bdb425fa0 R15: 00007ffcab8f2468 [ 748.066694][T16773] [ 748.768271][T16786] netlink: 'syz.0.3395': attribute type 21 has an invalid length. [ 749.028438][T16796] FAULT_INJECTION: forcing a failure. [ 749.028438][T16796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.041809][T16796] CPU: 0 PID: 16796 Comm: syz.2.3398 Not tainted syzkaller #0 [ 749.049350][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 749.059489][T16796] Call Trace: [ 749.062816][T16796] [ 749.065804][T16796] dump_stack_lvl+0x18c/0x250 [ 749.070553][T16796] ? show_regs_print_info+0x20/0x20 [ 749.075902][T16796] ? load_image+0x420/0x420 [ 749.080481][T16796] ? __might_fault+0xaa/0x120 [ 749.085210][T16796] ? __lock_acquire+0x7d80/0x7d80 [ 749.090303][T16796] should_fail_ex+0x394/0x4c0 [ 749.095041][T16796] _copy_from_user+0x2f/0xe0 [ 749.099675][T16796] ___sys_sendmsg+0x1c7/0x360 [ 749.104406][T16796] ? get_pid_task+0x20/0x1e0 [ 749.109041][T16796] ? __sys_sendmsg+0x2b0/0x2b0 [ 749.113855][T16796] ? __lock_acquire+0x7d80/0x7d80 [ 749.118930][T16796] __se_sys_sendmsg+0x1d0/0x2c0 [ 749.123821][T16796] ? __x64_sys_sendmsg+0x80/0x80 [ 749.128815][T16796] ? lockdep_hardirqs_on+0x98/0x150 [ 749.134049][T16796] do_syscall_64+0x55/0xb0 [ 749.138501][T16796] ? clear_bhb_loop+0x40/0x90 [ 749.143197][T16796] ? clear_bhb_loop+0x40/0x90 [ 749.147897][T16796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.153828][T16796] RIP: 0033:0x7fab5c39de59 [ 749.158276][T16796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.177903][T16796] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.186339][T16796] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 749.194357][T16796] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 749.202348][T16796] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 749.210344][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.218361][T16796] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 749.226373][T16796] [ 749.443390][T16803] netlink: 'syz.0.3401': attribute type 1 has an invalid length. [ 749.463896][T16803] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3401'. [ 749.570448][T16805] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 750.044210][T16813] netlink: 'syz.2.3405': attribute type 21 has an invalid length. [ 750.104159][T16817] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 751.589375][T16838] netlink: 'syz.2.3411': attribute type 10 has an invalid length. [ 751.742633][T16842] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 751.937479][T16846] netlink: 'syz.3.3416': attribute type 21 has an invalid length. [ 752.459528][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3420'. [ 753.268116][T16870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 753.320233][T16876] netlink: 'syz.1.3427': attribute type 21 has an invalid length. [ 753.587052][T16885] netlink: 'syz.3.3429': attribute type 10 has an invalid length. [ 754.902095][T16894] Ÿë: port 1(veth0_to_team) entered blocking state [ 754.942751][T16894] Ÿë: port 1(veth0_to_team) entered disabled state [ 754.969713][T16894] veth0_to_team: entered allmulticast mode [ 754.980081][T16894] veth0_to_team: entered promiscuous mode [ 755.311029][T16912] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.3438'. [ 755.321979][T16909] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3436'. [ 755.351927][T16909] tc_dump_action: action bad kind [ 755.496736][T16916] netlink: 'syz.2.3439': attribute type 21 has an invalid length. [ 755.750247][T16922] netlink: 'syz.1.3441': attribute type 3 has an invalid length. [ 755.759784][T16922] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3441'. [ 756.376688][T16937] Ÿë: port 1(gretap0) entered blocking state [ 756.389968][T16937] Ÿë: port 1(gretap0) entered disabled state [ 756.398875][T16937] gretap0: entered allmulticast mode [ 756.408172][T16937] gretap0: entered promiscuous mode [ 756.516334][T16937] Ÿë: port 2(veth0_to_team) entered blocking state [ 756.548114][T16937] Ÿë: port 2(veth0_to_team) entered disabled state [ 756.565081][T16937] veth0_to_team: entered allmulticast mode [ 756.585618][T16937] veth0_to_team: entered promiscuous mode [ 757.096523][T16949] netlink: 'syz.2.3450': attribute type 21 has an invalid length. [ 757.145086][T16952] netlink: 'syz.3.3451': attribute type 16 has an invalid length. [ 757.185329][T16952] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3451'. [ 757.556293][T16960] FAULT_INJECTION: forcing a failure. [ 757.556293][T16960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.606820][T16960] CPU: 0 PID: 16960 Comm: syz.3.3454 Not tainted syzkaller #0 [ 757.614368][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.624474][T16960] Call Trace: [ 757.627799][T16960] [ 757.630768][T16960] dump_stack_lvl+0x18c/0x250 [ 757.635512][T16960] ? show_regs_print_info+0x20/0x20 [ 757.640749][T16960] ? load_image+0x420/0x420 [ 757.645291][T16960] ? __might_fault+0xaa/0x120 [ 757.650009][T16960] should_fail_ex+0x394/0x4c0 [ 757.654733][T16960] copyin+0x1a/0x90 [ 757.658593][T16960] _copy_from_iter+0x3ec/0x1290 [ 757.663490][T16960] ? copyout_mc+0x70/0x70 [ 757.667868][T16960] ? copyout_mc+0x70/0x70 [ 757.672241][T16960] ? __virt_addr_valid+0x10c/0x380 [ 757.677402][T16960] ? page_copy_sane+0x16a/0x270 [ 757.682283][T16960] copy_page_from_iter+0x7b/0x100 [ 757.687357][T16960] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 757.693216][T16960] unix_stream_sendmsg+0x562/0xbf0 [ 757.698391][T16960] ? unix_show_fdinfo+0x280/0x280 [ 757.703456][T16960] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 757.709916][T16960] ? apparmor_socket_sendmsg+0x8e/0x330 [ 757.715506][T16960] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 757.720834][T16960] ? security_socket_sendmsg+0x80/0xa0 [ 757.726351][T16960] ? unix_show_fdinfo+0x280/0x280 [ 757.731433][T16960] ____sys_sendmsg+0x61b/0x980 [ 757.736262][T16960] ? __sys_sendmsg_sock+0x30/0x30 [ 757.741330][T16960] ? __import_iovec+0x3fa/0x850 [ 757.746230][T16960] ? import_iovec+0x73/0xa0 [ 757.750776][T16960] ___sys_sendmsg+0x2a6/0x360 [ 757.755490][T16960] ? get_pid_task+0x20/0x1e0 [ 757.760128][T16960] ? __sys_sendmsg+0x2b0/0x2b0 [ 757.764941][T16960] ? __lock_acquire+0x7d80/0x7d80 [ 757.770024][T16960] __se_sys_sendmsg+0x1d0/0x2c0 [ 757.774916][T16960] ? perf_trace_preemptirq_template+0x269/0x330 [ 757.781207][T16960] ? __x64_sys_sendmsg+0x80/0x80 [ 757.786196][T16960] ? lockdep_hardirqs_on+0x98/0x150 [ 757.791428][T16960] do_syscall_64+0x55/0xb0 [ 757.795889][T16960] ? clear_bhb_loop+0x40/0x90 [ 757.800602][T16960] ? clear_bhb_loop+0x40/0x90 [ 757.805314][T16960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.811249][T16960] RIP: 0033:0x7fc2b819de59 [ 757.815706][T16960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.835352][T16960] RSP: 002b:00007fc2b8fce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.843803][T16960] RAX: ffffffffffffffda RBX: 00007fc2b8425fa0 RCX: 00007fc2b819de59 [ 757.851807][T16960] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000006 [ 757.859802][T16960] RBP: 00007fc2b8fce090 R08: 0000000000000000 R09: 0000000000000000 [ 757.867819][T16960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.875838][T16960] R13: 00007fc2b8426038 R14: 00007fc2b8425fa0 R15: 00007ffe71e49c68 [ 757.883867][T16960] [ 758.376391][T16968] Ÿë: port 1(gretap0) entered blocking state [ 758.391010][T16968] Ÿë: port 1(gretap0) entered disabled state [ 758.411637][T16968] gretap0: entered allmulticast mode [ 758.445688][T16968] gretap0: entered promiscuous mode [ 758.476907][T16973] Ÿë: port 2(veth0_to_team) entered blocking state [ 758.516355][T16973] Ÿë: port 2(veth0_to_team) entered disabled state [ 758.533516][T16973] veth0_to_team: entered allmulticast mode [ 758.551028][T16973] veth0_to_team: entered promiscuous mode [ 758.733887][T16977] syzkaller0: entered promiscuous mode [ 758.744790][T16977] syzkaller0: entered allmulticast mode [ 758.774902][T16982] netlink: 'syz.3.3461': attribute type 21 has an invalid length. [ 761.554007][T16995] netlink: 'syz.3.3467': attribute type 1 has an invalid length. [ 761.568592][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 761.886990][T17006] netlink: 'syz.1.3472': attribute type 21 has an invalid length. [ 763.164402][T17017] netlink: 'syz.2.3474': attribute type 1 has an invalid length. [ 763.172390][T17017] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3474'. [ 763.321969][T17020] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3475'. [ 763.341958][T17020] tc_dump_action: action bad kind [ 764.568703][T17045] netlink: 'syz.2.3481': attribute type 21 has an invalid length. [ 764.925548][T17052] FAULT_INJECTION: forcing a failure. [ 764.925548][T17052] name failslab, interval 1, probability 0, space 0, times 0 [ 764.951584][T17052] CPU: 0 PID: 17052 Comm: syz.3.3485 Not tainted syzkaller #0 [ 764.959137][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.969234][T17052] Call Trace: [ 764.972552][T17052] [ 764.975558][T17052] dump_stack_lvl+0x18c/0x250 [ 764.980314][T17052] ? show_regs_print_info+0x20/0x20 [ 764.985758][T17052] ? load_image+0x420/0x420 [ 764.990322][T17052] ? __might_sleep+0xe0/0xe0 [ 764.994982][T17052] ? __lock_acquire+0x7d80/0x7d80 [ 765.000068][T17052] should_fail_ex+0x394/0x4c0 [ 765.004802][T17052] should_failslab+0x9/0x20 [ 765.009359][T17052] slab_pre_alloc_hook+0x59/0x300 [ 765.014432][T17052] ? netdevice_event+0x3ab/0x890 [ 765.019438][T17052] __kmem_cache_alloc_node+0x53/0x250 [ 765.024852][T17052] ? netdevice_event+0x3ab/0x890 [ 765.029814][T17052] kmalloc_trace+0x2a/0xe0 [ 765.034260][T17052] netdevice_event+0x3ab/0x890 [ 765.039066][T17052] ? __up_read+0x2b8/0x6b0 [ 765.043507][T17052] ? inet6addr_event+0xd0/0xd0 [ 765.048300][T17052] ? netdevice_event+0x890/0x890 [ 765.053279][T17052] ? add_default_gids+0xe0/0xe0 [ 765.058163][T17052] ? is_ndev_for_default_gid_filter+0x2f0/0x2f0 [ 765.064429][T17052] ? enum_all_gids_of_dev_cb+0x290/0x290 [ 765.070088][T17052] ? netdev_upper_walk+0x210/0x210 [ 765.075231][T17052] ? add_default_gids+0xe0/0xe0 [ 765.080118][T17052] notifier_call_chain+0x18f/0x380 [ 765.085269][T17052] call_netdevice_notifiers+0x91/0xd0 [ 765.090667][T17052] ? netdev_adjacent_rename_links+0x500/0x500 [ 765.096759][T17052] ? dev_addr_mod+0x2c8/0x3c0 [ 765.101470][T17052] ipvlan_device_event+0x44c/0x910 [ 765.106620][T17052] ? ipvlan_get_link_net+0x70/0x70 [ 765.111770][T17052] ? igmp_netdev_event+0x7c/0x760 [ 765.116838][T17052] notifier_call_chain+0x18f/0x380 [ 765.122012][T17052] dev_set_mac_address+0x38e/0x4d0 [ 765.127187][T17052] ? dev_pre_changeaddr_notify+0x120/0x120 [ 765.133030][T17052] ? down_write+0x16e/0x200 [ 765.137582][T17052] dev_set_mac_address_user+0x31/0x50 [ 765.143002][T17052] dev_ioctl+0x7b4/0x1140 [ 765.147362][T17052] sock_do_ioctl+0x239/0x310 [ 765.151984][T17052] ? sock_show_fdinfo+0xb0/0xb0 [ 765.156883][T17052] sock_ioctl+0x5be/0x7e0 [ 765.161272][T17052] ? sock_poll+0x3e0/0x3e0 [ 765.165732][T17052] ? bpf_lsm_file_ioctl+0x9/0x10 [ 765.170696][T17052] ? security_file_ioctl+0x80/0xa0 [ 765.175834][T17052] ? sock_poll+0x3e0/0x3e0 [ 765.180275][T17052] __se_sys_ioctl+0xfd/0x170 [ 765.184893][T17052] do_syscall_64+0x55/0xb0 [ 765.189342][T17052] ? clear_bhb_loop+0x40/0x90 [ 765.194046][T17052] ? clear_bhb_loop+0x40/0x90 [ 765.198759][T17052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.204690][T17052] RIP: 0033:0x7fc2b819de59 [ 765.209123][T17052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.229206][T17052] RSP: 002b:00007fc2b8fad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.237653][T17052] RAX: ffffffffffffffda RBX: 00007fc2b8426090 RCX: 00007fc2b819de59 [ 765.245656][T17052] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000d [ 765.253670][T17052] RBP: 00007fc2b8fad090 R08: 0000000000000000 R09: 0000000000000000 [ 765.261679][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 765.269678][T17052] R13: 00007fc2b8426128 R14: 00007fc2b8426090 R15: 00007ffe71e49c68 [ 765.277694][T17052] [ 765.325622][T17052] veth0_vlan: left promiscuous mode [ 765.578602][T17063] netlink: 'syz.1.3491': attribute type 33 has an invalid length. [ 765.638266][T17063] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3491'. [ 765.940687][T17070] netlink: 'syz.0.3494': attribute type 21 has an invalid length. [ 768.155358][T17099] netlink: 'syz.0.3503': attribute type 21 has an invalid length. [ 768.756397][T17108] netlink: set zone limit has 8 unknown bytes [ 769.550743][T17118] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3509'. [ 771.713318][T17137] netlink: 'syz.2.3515': attribute type 21 has an invalid length. [ 772.061524][ T9264] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 774.039793][T17165] netlink: 'syz.3.3526': attribute type 10 has an invalid length. [ 774.658439][T17168] netlink: 'syz.2.3527': attribute type 21 has an invalid length. [ 775.685528][T17178] netlink: 'syz.1.3531': attribute type 10 has an invalid length. [ 775.726188][T17178] bond0: (slave batadv0): Releasing backup interface [ 775.784838][T17178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.819215][T17178] team0: Port device batadv0 added [ 776.895618][T17192] netlink: 'syz.2.3537': attribute type 21 has an invalid length. [ 778.187807][T17208] FAULT_INJECTION: forcing a failure. [ 778.187807][T17208] name failslab, interval 1, probability 0, space 0, times 0 [ 778.216182][T17208] CPU: 0 PID: 17208 Comm: syz.2.3543 Not tainted syzkaller #0 [ 778.223757][T17208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 778.233899][T17208] Call Trace: [ 778.237253][T17208] [ 778.240271][T17208] dump_stack_lvl+0x18c/0x250 [ 778.245058][T17208] ? show_regs_print_info+0x20/0x20 [ 778.250360][T17208] ? load_image+0x420/0x420 [ 778.254988][T17208] ? __might_sleep+0xe0/0xe0 [ 778.259668][T17208] ? __lock_acquire+0x7d80/0x7d80 [ 778.264809][T17208] should_fail_ex+0x394/0x4c0 [ 778.269601][T17208] should_failslab+0x9/0x20 [ 778.274189][T17208] slab_pre_alloc_hook+0x59/0x300 [ 778.279318][T17208] kmem_cache_alloc_node+0x5e/0x310 [ 778.284629][T17208] ? trace_call_bpf+0x5e9/0x6c0 [ 778.289558][T17208] ? __alloc_skb+0x103/0x2c0 [ 778.294304][T17208] __alloc_skb+0x103/0x2c0 [ 778.298845][T17208] __ip_append_data+0x2acf/0x3bf0 [ 778.304057][T17208] ? raw_send_hdrinc+0x1150/0x1150 [ 778.309301][T17208] ? mark_lock+0x94/0x320 [ 778.313747][T17208] ? ip_setup_cork+0x840/0x840 [ 778.318588][T17208] ? ipv4_mtu+0x313/0x430 [ 778.323023][T17208] ? ip_setup_cork+0x527/0x840 [ 778.327872][T17208] ? lockdep_hardirqs_on+0x98/0x150 [ 778.333170][T17208] ip_append_data+0x10d/0x180 [ 778.337967][T17208] ? raw_send_hdrinc+0x1150/0x1150 [ 778.343191][T17208] raw_sendmsg+0x155e/0x1ba0 [ 778.347927][T17208] ? compat_raw_ioctl+0x70/0x70 [ 778.352895][T17208] ? aa_sk_perm+0x83c/0x970 [ 778.357540][T17208] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 778.364081][T17208] ? aa_sock_msg_perm+0x94/0x150 [ 778.369105][T17208] ? sock_rps_record_flow+0x19/0x3f0 [ 778.374481][T17208] ? inet_sendmsg+0x7e/0x2a0 [ 778.379157][T17208] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 778.384520][T17208] ? inet_send_prepare+0x250/0x250 [ 778.389729][T17208] ____sys_sendmsg+0x61b/0x980 [ 778.394607][T17208] ? __asan_memset+0x22/0x40 [ 778.399319][T17208] ? __sys_sendmsg_sock+0x30/0x30 [ 778.404426][T17208] ? __import_iovec+0x3fa/0x850 [ 778.409393][T17208] ? import_iovec+0x73/0xa0 [ 778.414003][T17208] ___sys_sendmsg+0x2a6/0x360 [ 778.418792][T17208] ? __sys_sendmsg+0x2b0/0x2b0 [ 778.423736][T17208] ? __lock_acquire+0x7d80/0x7d80 [ 778.426481][ T9617] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.429111][T17208] __se_sys_sendmsg+0x1d0/0x2c0 [ 778.443940][T17208] ? __x64_sys_sendmsg+0x80/0x80 [ 778.449037][T17208] ? lockdep_hardirqs_on+0x98/0x150 [ 778.454331][T17208] do_syscall_64+0x55/0xb0 [ 778.454355][ T9609] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.469039][T17208] ? clear_bhb_loop+0x40/0x90 [ 778.473793][T17208] ? clear_bhb_loop+0x40/0x90 [ 778.478573][T17208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.484563][T17208] RIP: 0033:0x7fab5c39de59 [ 778.489057][T17208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.508745][T17208] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.517248][T17208] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 778.525302][T17208] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 778.533351][T17208] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 778.541396][T17208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.549440][T17208] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 778.557560][T17208] [ 779.837095][T17224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 780.013370][T17231] netlink: 'syz.0.3548': attribute type 21 has an invalid length. [ 781.279584][T17245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3554'. [ 781.336663][T17245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3554'. [ 781.427028][T17247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3554'. [ 783.969639][T17260] FAULT_INJECTION: forcing a failure. [ 783.969639][T17260] name failslab, interval 1, probability 0, space 0, times 0 [ 784.024773][T17260] CPU: 1 PID: 17260 Comm: syz.2.3560 Not tainted syzkaller #0 [ 784.032365][T17260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 784.042511][T17260] Call Trace: [ 784.045868][T17260] [ 784.048878][T17260] dump_stack_lvl+0x18c/0x250 [ 784.053700][T17260] ? sctp_sendmsg+0x1519/0x27b0 [ 784.058641][T17260] ? ___sys_sendmsg+0x2a6/0x360 [ 784.063588][T17260] ? show_regs_print_info+0x20/0x20 [ 784.068891][T17260] ? load_image+0x420/0x420 [ 784.073548][T17260] should_fail_ex+0x394/0x4c0 [ 784.078340][T17260] should_failslab+0x9/0x20 [ 784.082929][T17260] slab_pre_alloc_hook+0x59/0x300 [ 784.088053][T17260] ? sctp_add_bind_addr+0x8c/0x360 [ 784.093252][T17260] __kmem_cache_alloc_node+0x53/0x250 [ 784.098747][T17260] ? sctp_add_bind_addr+0x8c/0x360 [ 784.103948][T17260] kmalloc_trace+0x2a/0xe0 [ 784.108465][T17260] sctp_add_bind_addr+0x8c/0x360 [ 784.113500][T17260] sctp_copy_local_addr_list+0x31b/0x4e0 [ 784.119233][T17260] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 784.125043][T17260] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 784.131217][T17260] ? sctp_v4_is_any+0x35/0x60 [ 784.135974][T17260] ? sctp_copy_one_addr+0x8c/0x350 [ 784.141187][T17260] sctp_bind_addr_copy+0xb3/0x3c0 [ 784.146337][T17260] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 784.152779][T17260] sctp_connect_new_asoc+0x2f9/0x6a0 [ 784.158167][T17260] ? __sctp_connect+0xd80/0xd80 [ 784.163105][T17260] ? __local_bh_enable_ip+0x13a/0x1c0 [ 784.168588][T17260] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 784.174217][T17260] ? security_sctp_bind_connect+0x89/0xb0 [ 784.180039][T17260] sctp_sendmsg+0x1519/0x27b0 [ 784.184850][T17260] ? sctp_getsockopt+0xb60/0xb60 [ 784.189879][T17260] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 784.195828][T17260] ? aa_af_perm+0x330/0x330 [ 784.200453][T17260] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 784.206987][T17260] ? sock_rps_record_flow+0x19/0x3f0 [ 784.212379][T17260] ? inet_sendmsg+0xce/0x2a0 [ 784.217063][T17260] ? inet_send_prepare+0x250/0x250 [ 784.222282][T17260] ____sys_sendmsg+0x61b/0x980 [ 784.227184][T17260] ? __asan_memset+0x22/0x40 [ 784.231862][T17260] ? __sys_sendmsg_sock+0x30/0x30 [ 784.236971][T17260] ? __import_iovec+0x5f2/0x850 [ 784.241956][T17260] ? import_iovec+0x73/0xa0 [ 784.246567][T17260] ___sys_sendmsg+0x2a6/0x360 [ 784.251352][T17260] ? __sys_sendmsg+0x2b0/0x2b0 [ 784.256248][T17260] ? __lock_acquire+0x7d80/0x7d80 [ 784.261411][T17260] __se_sys_sendmsg+0x1d0/0x2c0 [ 784.266323][T17260] ? perf_trace_preemptirq_template+0x269/0x330 [ 784.272633][T17260] ? __x64_sys_sendmsg+0x80/0x80 [ 784.277693][T17260] ? lockdep_hardirqs_on+0x98/0x150 [ 784.282979][T17260] do_syscall_64+0x55/0xb0 [ 784.287479][T17260] ? clear_bhb_loop+0x40/0x90 [ 784.292218][T17260] ? clear_bhb_loop+0x40/0x90 [ 784.296961][T17260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.302917][T17260] RIP: 0033:0x7fab5c39de59 [ 784.307401][T17260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.327062][T17260] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.335547][T17260] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 784.343566][T17260] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 000000000000000a [ 784.351596][T17260] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 784.359618][T17260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.367638][T17260] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 784.375707][T17260] [ 785.274161][T17265] netlink: 'syz.0.3561': attribute type 21 has an invalid length. [ 787.104307][T17275] netlink: 'syz.2.3565': attribute type 2 has an invalid length. [ 787.112151][T17275] netlink: 'syz.2.3565': attribute type 8 has an invalid length. [ 787.147221][T17275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3565'. [ 788.088666][T17284] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3567'. [ 788.179832][T17285] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3567'. [ 788.508227][T17284] team0: Port device team_slave_0 removed [ 788.621697][T17284] veth0_to_team (unregistering): left allmulticast mode [ 788.641085][T17284] veth0_to_team (unregistering): left promiscuous mode [ 788.660226][T17284] Ÿë: port 2(veth0_to_team) entered disabled state [ 789.876119][T17310] netlink: 'syz.0.3576': attribute type 29 has an invalid length. [ 789.900444][T17310] netlink: 'syz.0.3576': attribute type 3 has an invalid length. [ 789.918879][T17310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3576'. [ 790.073145][T17312] netlink: 'syz.1.3577': attribute type 6 has an invalid length. [ 790.088783][T17312] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 790.104506][T17312] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3577'. [ 790.428728][T17313] netlink: 'syz.1.3577': attribute type 2 has an invalid length. [ 790.437234][T17313] netlink: 'syz.1.3577': attribute type 8 has an invalid length. [ 790.446582][T17313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3577'. [ 790.930668][T17329] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3582'. [ 791.045515][T17331] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3582'. [ 791.365160][T17329] team0: Port device team_slave_0 removed [ 791.480106][T17329] veth0_to_team (unregistering): left allmulticast mode [ 791.498164][T17329] veth0_to_team (unregistering): left promiscuous mode [ 791.514624][T17329] Ÿë: port 2(veth0_to_team) entered disabled state [ 792.142865][T17356] netlink: 'syz.3.3592': attribute type 6 has an invalid length. [ 792.167750][T17356] netlink: 'syz.3.3592': attribute type 1 has an invalid length. [ 792.180150][T17356] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3592'. [ 792.637967][T17359] netlink: 'syz.0.3593': attribute type 10 has an invalid length. [ 792.764761][T17359] team0: Port device wlan1 added [ 792.845532][T17356] netlink: 'syz.3.3592': attribute type 2 has an invalid length. [ 792.860069][T17356] netlink: 'syz.3.3592': attribute type 8 has an invalid length. [ 792.883320][T17356] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3592'. [ 793.165717][T17358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.438785][T17380] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3599'. [ 793.508157][T17383] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3599'. [ 793.698583][T17380] team0: Port device team_slave_0 removed [ 793.847694][T17380] veth0_to_team (unregistering): left allmulticast mode [ 793.875936][T17380] veth0_to_team (unregistering): left promiscuous mode [ 793.893969][T17380] Ÿë: port 1(veth0_to_team) entered disabled state [ 793.953538][T17382] netlink: 'syz.1.3600': attribute type 21 has an invalid length. [ 794.214917][T17392] netlink: 'syz.1.3611': attribute type 21 has an invalid length. [ 794.746125][T17409] netlink: 'syz.1.3608': attribute type 14 has an invalid length. [ 794.784340][T17409] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3608'. [ 794.940127][T17403] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3607'. [ 795.041236][T17403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3607'. [ 795.288434][T17413] FAULT_INJECTION: forcing a failure. [ 795.288434][T17413] name failslab, interval 1, probability 0, space 0, times 0 [ 795.301274][T17413] CPU: 1 PID: 17413 Comm: syz.2.3609 Not tainted syzkaller #0 [ 795.308806][T17413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.318941][T17413] Call Trace: [ 795.322284][T17413] [ 795.325284][T17413] dump_stack_lvl+0x18c/0x250 [ 795.330059][T17413] ? show_regs_print_info+0x20/0x20 [ 795.335349][T17413] ? load_image+0x420/0x420 [ 795.339957][T17413] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 795.346141][T17413] should_fail_ex+0x394/0x4c0 [ 795.350944][T17413] should_failslab+0x9/0x20 [ 795.355546][T17413] slab_pre_alloc_hook+0x59/0x300 [ 795.360734][T17413] kmem_cache_alloc+0x5a/0x2c0 [ 795.365583][T17413] ? skb_clone+0x1eb/0x370 [ 795.370100][T17413] skb_clone+0x1eb/0x370 [ 795.374439][T17413] bpf_clone_redirect+0x16d/0x4a0 [ 795.379576][T17413] bpf_prog_208b094576c80b22+0x5e/0x63 [ 795.385122][T17413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 795.391177][T17413] ? __lock_acquire+0x7d80/0x7d80 [ 795.396280][T17413] ? lock_chain_count+0x20/0x20 [ 795.401226][T17413] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 795.407540][T17413] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 795.412904][T17413] ? ktime_get+0x7f/0x280 [ 795.417292][T17413] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 795.423605][T17413] ? ktime_get_real_ts64+0x440/0x440 [ 795.428934][T17413] ? __x64_sys_bpf+0x7c/0x90 [ 795.433576][T17413] ? __local_bh_disable_ip+0x108/0x1a0 [ 795.439082][T17413] ? __cant_sleep+0x220/0x220 [ 795.443818][T17413] ? read_tsc+0x9/0x20 [ 795.447927][T17413] ? ktime_get+0x24b/0x280 [ 795.452404][T17413] ? bpf_test_run+0x174/0x870 [ 795.457131][T17413] bpf_test_run+0x2df/0x870 [ 795.461720][T17413] ? bpf_test_run+0x174/0x870 [ 795.466454][T17413] ? dst_hold+0x70/0x70 [ 795.470686][T17413] ? eth_get_headlen+0x210/0x210 [ 795.475700][T17413] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 795.481180][T17413] ? cpu_online+0x60/0x60 [ 795.485560][T17413] bpf_prog_test_run+0x31f/0x390 [ 795.490636][T17413] __sys_bpf+0x49d/0x890 [ 795.494942][T17413] ? bpf_link_show_fdinfo+0x390/0x390 [ 795.500416][T17413] ? lock_chain_count+0x20/0x20 [ 795.505342][T17413] __x64_sys_bpf+0x7c/0x90 [ 795.509855][T17413] do_syscall_64+0x55/0xb0 [ 795.514345][T17413] ? clear_bhb_loop+0x40/0x90 [ 795.519077][T17413] ? clear_bhb_loop+0x40/0x90 [ 795.523800][T17413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.529745][T17413] RIP: 0033:0x7fab5c39de59 [ 795.534208][T17413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.553853][T17413] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 795.562325][T17413] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 795.570346][T17413] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 795.578395][T17413] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 795.586411][T17413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.594422][T17413] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 795.602493][T17413] [ 795.608370][ T9264] wlan1: Trigger new scan to find an IBSS to join [ 795.750834][T17415] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 796.128629][T17431] validate_nla: 4 callbacks suppressed [ 796.128646][T17431] netlink: 'syz.0.3615': attribute type 10 has an invalid length. [ 796.836374][T17441] netlink: 'syz.1.3621': attribute type 10 has an invalid length. [ 796.878250][T17445] netlink: 'syz.3.3622': attribute type 1 has an invalid length. [ 796.891091][T17441] team0: Port device wlan1 added [ 796.894941][T17445] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3622'. [ 797.378434][T17440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.187556][T17473] syzkaller0: entered promiscuous mode [ 798.197930][T17473] syzkaller0: entered allmulticast mode [ 798.234820][T17480] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 798.343399][ T9264] wlan1: Trigger new scan to find an IBSS to join [ 799.296993][ T9264] wlan1: Trigger new scan to find an IBSS to join [ 800.204514][ T9615] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 800.360052][T17498] netlink: 'syz.2.3636': attribute type 10 has an invalid length. [ 800.412400][T17498] team0: Port device wlan1 added [ 800.421891][T17503] netlink: 'syz.3.3639': attribute type 3 has an invalid length. [ 800.430300][T17503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3639'. [ 800.445613][T17499] team0: entered promiscuous mode [ 800.451038][T17499] team_slave_1: entered promiscuous mode [ 800.463342][T17499] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 800.487494][T17499] team0: entered allmulticast mode [ 800.493219][T17499] team_slave_1: entered allmulticast mode [ 800.517184][T17499] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 800.795437][T17497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.272349][T17529] FAULT_INJECTION: forcing a failure. [ 801.272349][T17529] name failslab, interval 1, probability 0, space 0, times 0 [ 801.304422][T17529] CPU: 0 PID: 17529 Comm: syz.3.3649 Not tainted syzkaller #0 [ 801.311985][T17529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.322096][T17529] Call Trace: [ 801.325425][T17529] [ 801.328403][T17529] dump_stack_lvl+0x18c/0x250 [ 801.333155][T17529] ? show_regs_print_info+0x20/0x20 [ 801.338420][T17529] ? load_image+0x420/0x420 [ 801.342990][T17529] ? __might_sleep+0xe0/0xe0 [ 801.347637][T17529] ? __lock_acquire+0x7d80/0x7d80 [ 801.352708][T17529] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 801.358745][T17529] should_fail_ex+0x394/0x4c0 [ 801.363501][T17529] should_failslab+0x9/0x20 [ 801.368083][T17529] slab_pre_alloc_hook+0x59/0x300 [ 801.373166][T17529] ? __ns_get_path+0x2e/0x5f0 [ 801.377902][T17529] kmem_cache_alloc_lru+0x4d/0x2b0 [ 801.383070][T17529] ? new_inode_pseudo+0x82/0x1d0 [ 801.388066][T17529] new_inode_pseudo+0x82/0x1d0 [ 801.392898][T17529] __ns_get_path+0x249/0x5f0 [ 801.397551][T17529] ns_get_path+0x54/0x90 [ 801.401847][T17529] proc_ns_get_link+0xf8/0x240 [ 801.406666][T17529] ? proc_ns_instantiate+0xf0/0xf0 [ 801.411827][T17529] ? try_to_unlazy+0x33e/0x5c0 [ 801.416637][T17529] ? proc_ns_instantiate+0xf0/0xf0 [ 801.421791][T17529] pick_link+0x666/0xdd0 [ 801.426086][T17529] step_into+0xc18/0xee0 [ 801.430376][T17529] ? pid_revalidate+0x22/0x260 [ 801.435204][T17529] ? set_root+0x3a0/0x3a0 [ 801.439608][T17529] ? pid_revalidate+0x20d/0x260 [ 801.444507][T17529] ? lookup_fast+0x494/0x4c0 [ 801.449163][T17529] path_openat+0x1656/0x3270 [ 801.453839][T17529] ? do_sys_openat2+0xda/0x1d0 [ 801.458677][T17529] ? __x64_sys_openat+0x139/0x160 [ 801.463762][T17529] ? verify_lock_unused+0x140/0x140 [ 801.469011][T17529] ? do_filp_open+0x430/0x430 [ 801.473762][T17529] do_filp_open+0x1f2/0x430 [ 801.478327][T17529] ? vfs_tmpfile+0x480/0x480 [ 801.482988][T17529] ? _raw_spin_unlock+0x28/0x40 [ 801.487892][T17529] ? alloc_fd+0x590/0x640 [ 801.492288][T17529] do_sys_openat2+0x134/0x1d0 [ 801.497027][T17529] ? do_sys_open+0xe0/0xe0 [ 801.501510][T17529] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 801.507549][T17529] ? lock_chain_count+0x20/0x20 [ 801.512456][T17529] __x64_sys_openat+0x139/0x160 [ 801.517375][T17529] do_syscall_64+0x55/0xb0 [ 801.521851][T17529] ? clear_bhb_loop+0x40/0x90 [ 801.526575][T17529] ? clear_bhb_loop+0x40/0x90 [ 801.531306][T17529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.537264][T17529] RIP: 0033:0x7fc2b815e68e [ 801.541729][T17529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.561388][T17529] RSP: 002b:00007fc2b8fcdec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 801.569862][T17529] RAX: ffffffffffffffda RBX: 00007fc2b8fce6c0 RCX: 00007fc2b815e68e [ 801.577890][T17529] RDX: 0000000000000000 RSI: 00007fc2b8fcdf90 RDI: ffffffffffffff9c [ 801.585912][T17529] RBP: 00007fc2b8fce090 R08: 0000000000000000 R09: 0000000000000000 [ 801.593948][T17529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.601999][T17529] R13: 00007fc2b8426038 R14: 00007fc2b8425fa0 R15: 00007ffe71e49c68 [ 801.610037][T17529] [ 801.934878][T17541] team0: entered promiscuous mode [ 801.946800][T17541] team_slave_1: entered promiscuous mode [ 801.969094][T17541] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 801.988784][T17541] team0: entered allmulticast mode [ 802.004024][T17541] team_slave_1: entered allmulticast mode [ 802.022471][T17541] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 802.908655][T17574] team0: entered promiscuous mode [ 802.920748][T17574] team_slave_0: entered promiscuous mode [ 802.935404][T17574] team_slave_1: entered promiscuous mode [ 802.991674][T17574] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 803.007263][T17574] batadv0: entered promiscuous mode [ 803.030263][T17574] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 803.063170][T17574] team0: entered allmulticast mode [ 803.069086][T17574] team_slave_0: entered allmulticast mode [ 803.081399][T17574] team_slave_1: entered allmulticast mode [ 803.093182][T17574] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 803.101222][T17574] batadv0: entered allmulticast mode [ 803.107349][T17574] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 803.379155][ T9264] wlan1: Trigger new scan to find an IBSS to join [ 803.398169][T17576] netlink: 'syz.2.3668': attribute type 1 has an invalid length. [ 803.411064][T17576] netlink: 'syz.2.3668': attribute type 4 has an invalid length. [ 803.421932][T17576] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3668'. [ 804.243746][T17600] FAULT_INJECTION: forcing a failure. [ 804.243746][T17600] name failslab, interval 1, probability 0, space 0, times 0 [ 804.262047][T17600] CPU: 0 PID: 17600 Comm: syz.0.3679 Not tainted syzkaller #0 [ 804.269595][T17600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 804.279695][T17600] Call Trace: [ 804.281905][T17607] FAULT_INJECTION: forcing a failure. [ 804.281905][T17607] name failslab, interval 1, probability 0, space 0, times 0 [ 804.282998][T17600] [ 804.283011][T17600] dump_stack_lvl+0x18c/0x250 [ 804.283055][T17600] ? show_regs_print_info+0x20/0x20 [ 804.283092][T17600] ? load_image+0x420/0x420 [ 804.283125][T17600] ? __might_sleep+0xe0/0xe0 [ 804.317796][T17600] ? __lock_acquire+0x7d80/0x7d80 [ 804.322887][T17600] should_fail_ex+0x394/0x4c0 [ 804.327620][T17600] should_failslab+0x9/0x20 [ 804.332173][T17600] slab_pre_alloc_hook+0x59/0x300 [ 804.337258][T17600] ? _raw_spin_unlock+0x40/0x40 [ 804.342159][T17600] ? string+0x257/0x290 [ 804.346368][T17600] ? __request_module+0x2d1/0x600 [ 804.351460][T17600] __kmem_cache_alloc_node+0x53/0x250 [ 804.356900][T17600] ? __request_module+0x2d1/0x600 [ 804.361983][T17600] kmalloc_trace+0x2a/0xe0 [ 804.366464][T17600] __request_module+0x2d1/0x600 [ 804.371387][T17600] ? module_enforce_rwx_sections+0x150/0x150 [ 804.377427][T17600] ? module_enforce_rwx_sections+0x150/0x150 [ 804.383478][T17600] ? apparmor_capable+0x137/0x1a0 [ 804.388580][T17600] ? dev_load+0x21/0x1f0 [ 804.392876][T17600] dev_ioctl+0x837/0x1140 [ 804.397270][T17600] sock_ioctl+0x74c/0x7e0 [ 804.401664][T17600] ? sock_poll+0x3e0/0x3e0 [ 804.406139][T17600] ? bpf_lsm_file_ioctl+0x9/0x10 [ 804.411125][T17600] ? security_file_ioctl+0x80/0xa0 [ 804.416299][T17600] ? sock_poll+0x3e0/0x3e0 [ 804.420761][T17600] __se_sys_ioctl+0xfd/0x170 [ 804.425407][T17600] do_syscall_64+0x55/0xb0 [ 804.429888][T17600] ? clear_bhb_loop+0x40/0x90 [ 804.434607][T17600] ? clear_bhb_loop+0x40/0x90 [ 804.439327][T17600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.445274][T17600] RIP: 0033:0x7fbafe59de59 [ 804.449743][T17600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.469402][T17600] RSP: 002b:00007fbaff53f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.477879][T17600] RAX: ffffffffffffffda RBX: 00007fbafe825fa0 RCX: 00007fbafe59de59 [ 804.485913][T17600] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 804.493948][T17600] RBP: 00007fbaff53f090 R08: 0000000000000000 R09: 0000000000000000 [ 804.501964][T17600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.509996][T17600] R13: 00007fbafe826038 R14: 00007fbafe825fa0 R15: 00007ffc71da4ae8 [ 804.518040][T17600] [ 804.521146][T17607] CPU: 1 PID: 17607 Comm: syz.1.3681 Not tainted syzkaller #0 [ 804.528664][T17607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 804.538768][T17607] Call Trace: [ 804.542092][T17607] [ 804.545065][T17607] dump_stack_lvl+0x18c/0x250 [ 804.549806][T17607] ? show_regs_print_info+0x20/0x20 [ 804.555059][T17607] ? load_image+0x420/0x420 [ 804.559604][T17607] ? __might_sleep+0xe0/0xe0 [ 804.564240][T17607] ? __lock_acquire+0x7d80/0x7d80 [ 804.569298][T17607] should_fail_ex+0x394/0x4c0 [ 804.574019][T17607] should_failslab+0x9/0x20 [ 804.578556][T17607] slab_pre_alloc_hook+0x59/0x300 [ 804.583624][T17607] ? kvmalloc_node+0x70/0x180 [ 804.588332][T17607] ? kvmalloc_node+0x70/0x180 [ 804.593068][T17607] __kmem_cache_alloc_node+0x53/0x250 [ 804.598478][T17607] ? kvmalloc_node+0x70/0x180 [ 804.603185][T17607] __kmalloc_node+0xa6/0x240 [ 804.607804][T17607] ? mark_lock+0x94/0x320 [ 804.612161][T17607] kvmalloc_node+0x70/0x180 [ 804.616695][T17607] alloc_netdev_mqs+0x87/0x1040 [ 804.621575][T17607] ? synproxy_pernet+0x270/0x270 [ 804.626548][T17607] ? dev_valid_name+0x207/0x2f0 [ 804.631423][T17607] vti6_locate+0x5d2/0x770 [ 804.635876][T17607] ? vti6_parm_from_user+0x250/0x250 [ 804.641193][T17607] ? vti6_siocdevprivate+0x6cf/0xb80 [ 804.646517][T17607] vti6_siocdevprivate+0x82b/0xb80 [ 804.651664][T17607] ? vti6_tnl_xmit+0x19c0/0x19c0 [ 804.656639][T17607] ? __mutex_lock+0x30d/0xc80 [ 804.661355][T17607] ? dev_ioctl+0x83c/0x1140 [ 804.665895][T17607] ? dev_ifsioc+0x957/0xc40 [ 804.670433][T17607] dev_ioctl+0x84c/0x1140 [ 804.674803][T17607] sock_ioctl+0x74c/0x7e0 [ 804.679160][T17607] ? sock_poll+0x3e0/0x3e0 [ 804.683617][T17607] ? bpf_lsm_file_ioctl+0x9/0x10 [ 804.688581][T17607] ? security_file_ioctl+0x80/0xa0 [ 804.693729][T17607] ? sock_poll+0x3e0/0x3e0 [ 804.698174][T17607] __se_sys_ioctl+0xfd/0x170 [ 804.702805][T17607] do_syscall_64+0x55/0xb0 [ 804.707252][T17607] ? clear_bhb_loop+0x40/0x90 [ 804.711965][T17607] ? clear_bhb_loop+0x40/0x90 [ 804.716667][T17607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.722592][T17607] RIP: 0033:0x7f6bdb19de59 [ 804.727041][T17607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.746671][T17607] RSP: 002b:00007f6bdc017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.755113][T17607] RAX: ffffffffffffffda RBX: 00007f6bdb425fa0 RCX: 00007f6bdb19de59 [ 804.763111][T17607] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 804.771113][T17607] RBP: 00007f6bdc017090 R08: 0000000000000000 R09: 0000000000000000 [ 804.779107][T17607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.787100][T17607] R13: 00007f6bdb426038 R14: 00007f6bdb425fa0 R15: 00007ffcab8f2468 [ 804.795193][T17607] [ 804.803192][ T9597] wlan1: Trigger new scan to find an IBSS to join [ 804.855891][ T9611] wlan1: Trigger new scan to find an IBSS to join [ 805.025734][T17618] netlink: 'syz.0.3685': attribute type 2 has an invalid length. [ 805.042545][T17618] netlink: 'syz.0.3685': attribute type 8 has an invalid length. [ 805.052834][T17618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3685'. [ 805.070857][T17618] netlink: 'syz.0.3685': attribute type 2 has an invalid length. [ 805.079640][T17618] netlink: 'syz.0.3685': attribute type 8 has an invalid length. [ 805.087962][T17618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3685'. [ 806.355729][T17652] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3700'. [ 806.417451][T17659] netlink: 'syz.2.3703': attribute type 3 has an invalid length. [ 806.445188][T17659] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3703'. [ 806.690532][T17667] netlink: 'syz.3.3704': attribute type 10 has an invalid length. [ 807.374483][ T9615] wlan1: Trigger new scan to find an IBSS to join [ 807.409406][T17674] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 807.560722][T17682] netlink: 'syz.0.3710': attribute type 10 has an invalid length. [ 807.583969][T17682] syz_tun: entered promiscuous mode [ 807.676870][T17682] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 808.335231][ T13] wlan1: Trigger new scan to find an IBSS to join [ 808.344862][ T9615] wlan1: Trigger new scan to find an IBSS to join [ 808.565392][ T9264] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 808.746728][T17709] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 809.111480][T17719] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 809.155834][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.162254][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.271025][ T13] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 809.295810][T17719] batadv0: left promiscuous mode [ 809.328844][T17719] batadv0: left allmulticast mode [ 809.382490][T17719] team0: Port device batadv0 removed [ 809.417574][T17719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.427986][T17719] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 809.456839][T17724] netlink: 'syz.2.3723': attribute type 10 has an invalid length. [ 809.462907][T17720] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 809.497153][T17724] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3723'. [ 810.468132][T17753] netlink: 'syz.1.3731': attribute type 3 has an invalid length. [ 810.478012][T17753] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3731'. [ 810.508156][T17753] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3731'. [ 810.538736][T17753] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3731'. [ 811.042870][T17794] netlink: 'syz.2.3738': attribute type 29 has an invalid length. [ 811.051890][T17794] netlink: 'syz.2.3738': attribute type 3 has an invalid length. [ 811.067945][T17794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3738'. [ 811.196885][T17796] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 811.256355][T17800] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3740'. [ 811.374587][T17786] wlan1: Trigger new scan to find an IBSS to join [ 812.231712][T17824] netlink: 'syz.2.3749': attribute type 29 has an invalid length. [ 812.243289][T17824] netlink: 'syz.2.3749': attribute type 3 has an invalid length. [ 812.252025][T17824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3749'. [ 812.269496][T17825] netlink: 'syz.0.3750': attribute type 3 has an invalid length. [ 812.280969][T17825] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3750'. [ 812.297730][T17828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3750'. [ 812.322245][T17828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3750'. [ 812.344221][T17786] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 812.602861][T17834] FAULT_INJECTION: forcing a failure. [ 812.602861][T17834] name failslab, interval 1, probability 0, space 0, times 0 [ 812.621098][T17834] CPU: 1 PID: 17834 Comm: syz.2.3752 Not tainted syzkaller #0 [ 812.628649][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.638770][T17834] Call Trace: [ 812.642112][T17834] [ 812.645104][T17834] dump_stack_lvl+0x18c/0x250 [ 812.649873][T17834] ? show_regs_print_info+0x20/0x20 [ 812.655150][T17834] ? load_image+0x420/0x420 [ 812.659735][T17834] ? __might_sleep+0xe0/0xe0 [ 812.664401][T17834] ? __lock_acquire+0x7d80/0x7d80 [ 812.669511][T17834] should_fail_ex+0x394/0x4c0 [ 812.674271][T17834] should_failslab+0x9/0x20 [ 812.678848][T17834] slab_pre_alloc_hook+0x59/0x300 [ 812.683968][T17834] ? sctp_has_association+0x2f/0x1e0 [ 812.689315][T17834] ? sctp_association_new+0x89/0x25b0 [ 812.694732][T17834] __kmem_cache_alloc_node+0x53/0x250 [ 812.700157][T17834] ? sctp_association_new+0x89/0x25b0 [ 812.705575][T17834] kmalloc_trace+0x2a/0xe0 [ 812.710049][T17834] sctp_association_new+0x89/0x25b0 [ 812.715294][T17834] ? sctp_has_association+0x2f/0x1e0 [ 812.721172][T17834] sctp_connect_new_asoc+0x2de/0x6a0 [ 812.726509][T17834] ? __sctp_connect+0xd80/0xd80 [ 812.731399][T17834] ? __local_bh_enable_ip+0x13a/0x1c0 [ 812.736811][T17834] ? _local_bh_enable+0xa0/0xa0 [ 812.741731][T17834] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 812.747573][T17834] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 812.753439][T17834] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 812.759030][T17834] ? security_sctp_bind_connect+0x89/0xb0 [ 812.764801][T17834] sctp_sendmsg+0x1519/0x27b0 [ 812.769557][T17834] ? sctp_getsockopt+0xb60/0xb60 [ 812.774551][T17834] ? aa_af_perm+0x330/0x330 [ 812.779105][T17834] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 812.785573][T17834] ? sock_rps_record_flow+0x19/0x3f0 [ 812.790908][T17834] ? inet_sendmsg+0x7e/0x2a0 [ 812.795549][T17834] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 812.800880][T17834] ? inet_send_prepare+0x250/0x250 [ 812.806039][T17834] ____sys_sendmsg+0x61b/0x980 [ 812.810874][T17834] ? __asan_memset+0x22/0x40 [ 812.815512][T17834] ? __sys_sendmsg_sock+0x30/0x30 [ 812.820598][T17834] ? __import_iovec+0x5f2/0x850 [ 812.825514][T17834] ? import_iovec+0x73/0xa0 [ 812.830069][T17834] ___sys_sendmsg+0x2a6/0x360 [ 812.834820][T17834] ? __sys_sendmsg+0x2b0/0x2b0 [ 812.839683][T17834] ? __lock_acquire+0x7d80/0x7d80 [ 812.844806][T17834] __se_sys_sendmsg+0x1d0/0x2c0 [ 812.849719][T17834] ? __x64_sys_sendmsg+0x80/0x80 [ 812.854740][T17834] ? lockdep_hardirqs_on+0x98/0x150 [ 812.859991][T17834] do_syscall_64+0x55/0xb0 [ 812.864449][T17834] ? clear_bhb_loop+0x40/0x90 [ 812.870124][T17834] ? clear_bhb_loop+0x40/0x90 [ 812.874852][T17834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.880795][T17834] RIP: 0033:0x7fab5c39de59 [ 812.885259][T17834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.904903][T17834] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.913358][T17834] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 812.921373][T17834] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000008 [ 812.929380][T17834] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 812.937385][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.945394][T17834] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 812.953440][T17834] [ 813.230714][T17844] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 813.256894][T17847] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 813.458143][T17854] netlink: 'syz.0.3761': attribute type 29 has an invalid length. [ 813.482042][T17854] netlink: 'syz.0.3761': attribute type 3 has an invalid length. [ 813.491813][T17854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3761'. [ 813.576613][T17859] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3762'. [ 813.633413][T17859] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3762'. [ 813.660080][T17859] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3762'. [ 813.726804][T17858] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 813.813035][T17864] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3763'. [ 814.380244][T17873] FAULT_INJECTION: forcing a failure. [ 814.380244][T17873] name failslab, interval 1, probability 0, space 0, times 0 [ 814.404323][T17873] CPU: 1 PID: 17873 Comm: syz.3.3766 Not tainted syzkaller #0 [ 814.411869][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.421974][T17873] Call Trace: [ 814.425309][T17873] [ 814.428286][T17873] dump_stack_lvl+0x18c/0x250 [ 814.433033][T17873] ? show_regs_print_info+0x20/0x20 [ 814.438300][T17873] ? load_image+0x420/0x420 [ 814.442868][T17873] ? __might_sleep+0xe0/0xe0 [ 814.447524][T17873] ? __lock_acquire+0x7d80/0x7d80 [ 814.452598][T17873] ? __might_fault+0xc6/0x120 [ 814.457336][T17873] should_fail_ex+0x394/0x4c0 [ 814.462071][T17873] should_failslab+0x9/0x20 [ 814.466643][T17873] slab_pre_alloc_hook+0x59/0x300 [ 814.471729][T17873] ? copyout_mc+0x70/0x70 [ 814.476118][T17873] kmem_cache_alloc_node+0x5e/0x310 [ 814.481370][T17873] ? __alloc_skb+0x103/0x2c0 [ 814.486018][T17873] __alloc_skb+0x103/0x2c0 [ 814.490500][T17873] __ip6_append_data+0x2be0/0x3d40 [ 814.495710][T17873] ? udpv6_sendmsg+0x2350/0x2350 [ 814.500737][T17873] ? ip6_setup_cork+0xff0/0xff0 [ 814.505657][T17873] ? __local_bh_enable_ip+0x13a/0x1c0 [ 814.511090][T17873] ip6_append_data+0x1b0/0x350 [ 814.515915][T17873] ? udpv6_sendmsg+0x2350/0x2350 [ 814.520921][T17873] udpv6_sendmsg+0xc34/0x2350 [ 814.525666][T17873] ? udpv6_sendmsg+0x2350/0x2350 [ 814.530658][T17873] ? __might_sleep+0xe0/0xe0 [ 814.535305][T17873] ? udp_v6_early_demux+0xf90/0xf90 [ 814.540610][T17873] ? aa_af_perm+0x330/0x330 [ 814.545174][T17873] ? sock_rps_record_flow+0x19/0x3f0 [ 814.550521][T17873] ? inet_send_prepare+0x5b/0x250 [ 814.555607][T17873] ? inet6_sendmsg+0x5f/0xd0 [ 814.560263][T17873] sock_write_iter+0x2dc/0x420 [ 814.565086][T17873] ? sock_read_iter+0x3f0/0x3f0 [ 814.569992][T17873] ? common_file_perm+0x198/0x1f0 [ 814.575071][T17873] vfs_write+0x474/0x9a0 [ 814.579387][T17873] ? file_end_write+0x250/0x250 [ 814.584304][T17873] ? __fget_files+0x3fc/0x460 [ 814.589059][T17873] ? __fdget_pos+0x1d8/0x330 [ 814.593700][T17873] ? ksys_write+0x74/0x260 [ 814.598177][T17873] ksys_write+0x151/0x260 [ 814.602574][T17873] ? __ia32_sys_read+0x90/0x90 [ 814.607393][T17873] ? lockdep_hardirqs_on+0x98/0x150 [ 814.612634][T17873] do_syscall_64+0x55/0xb0 [ 814.617091][T17873] ? clear_bhb_loop+0x40/0x90 [ 814.621798][T17873] ? clear_bhb_loop+0x40/0x90 [ 814.626507][T17873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.632447][T17873] RIP: 0033:0x7fc2b819de59 [ 814.636895][T17873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.656525][T17873] RSP: 002b:00007fc2b8fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 814.664973][T17873] RAX: ffffffffffffffda RBX: 00007fc2b8425fa0 RCX: 00007fc2b819de59 [ 814.672976][T17873] RDX: 000000000000fe33 RSI: 0000200000000300 RDI: 0000000000000005 [ 814.680967][T17873] RBP: 00007fc2b8fce090 R08: 0000000000000000 R09: 0000000000000000 [ 814.688976][T17873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 814.697058][T17873] R13: 00007fc2b8426038 R14: 00007fc2b8425fa0 R15: 00007ffe71e49c68 [ 814.705067][T17873] [ 814.874243][T17885] validate_nla: 2 callbacks suppressed [ 814.874262][T17885] netlink: 'syz.2.3772': attribute type 29 has an invalid length. [ 814.888356][T17885] netlink: 'syz.2.3772': attribute type 3 has an invalid length. [ 814.897315][T17885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3772'. [ 815.153053][T17888] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 815.782963][T17902] netlink: 'syz.3.3779': attribute type 19 has an invalid length. [ 815.793265][T17902] netlink: 'syz.3.3779': attribute type 5 has an invalid length. [ 816.281965][T17916] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 816.426881][T17922] FAULT_INJECTION: forcing a failure. [ 816.426881][T17922] name failslab, interval 1, probability 0, space 0, times 0 [ 816.454156][T17922] CPU: 1 PID: 17922 Comm: syz.0.3788 Not tainted syzkaller #0 [ 816.461703][T17922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.470847][T17920] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 816.471786][T17922] Call Trace: [ 816.471799][T17922] [ 816.471810][T17922] dump_stack_lvl+0x18c/0x250 [ 816.471855][T17922] ? show_regs_print_info+0x20/0x20 [ 816.497112][T17922] ? load_image+0x420/0x420 [ 816.501678][T17922] ? __might_sleep+0xe0/0xe0 [ 816.506311][T17922] ? __lock_acquire+0x7d80/0x7d80 [ 816.511376][T17922] should_fail_ex+0x394/0x4c0 [ 816.516095][T17922] should_failslab+0x9/0x20 [ 816.520648][T17922] slab_pre_alloc_hook+0x59/0x300 [ 816.525709][T17922] ? sctp_association_new+0x89/0x25b0 [ 816.531105][T17922] __kmem_cache_alloc_node+0x53/0x250 [ 816.536516][T17922] ? sctp_association_new+0x89/0x25b0 [ 816.541929][T17922] kmalloc_trace+0x2a/0xe0 [ 816.546381][T17922] sctp_association_new+0x89/0x25b0 [ 816.551619][T17922] sctp_connect_new_asoc+0x2de/0x6a0 [ 816.556935][T17922] ? __sctp_connect+0xd80/0xd80 [ 816.561813][T17922] ? __local_bh_enable_ip+0x13a/0x1c0 [ 816.567222][T17922] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 816.572797][T17922] ? security_sctp_bind_connect+0x89/0xb0 [ 816.578544][T17922] sctp_sendmsg+0x1519/0x27b0 [ 816.583258][T17922] ? sctp_getsockopt+0xb60/0xb60 [ 816.588225][T17922] ? aa_af_perm+0x330/0x330 [ 816.592758][T17922] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 816.599214][T17922] ? sock_rps_record_flow+0x19/0x3f0 [ 816.604534][T17922] ? inet_sendmsg+0xce/0x2a0 [ 816.609170][T17922] ? inet_send_prepare+0x250/0x250 [ 816.614315][T17922] ____sys_sendmsg+0x61b/0x980 [ 816.619135][T17922] ? __asan_memset+0x22/0x40 [ 816.623764][T17922] ? __sys_sendmsg_sock+0x30/0x30 [ 816.628820][T17922] ? __import_iovec+0x5f2/0x850 [ 816.633711][T17922] ? import_iovec+0x73/0xa0 [ 816.638247][T17922] ___sys_sendmsg+0x2a6/0x360 [ 816.642959][T17922] ? get_pid_task+0x20/0x1e0 [ 816.647585][T17922] ? __sys_sendmsg+0x2b0/0x2b0 [ 816.652404][T17922] ? __lock_acquire+0x7d80/0x7d80 [ 816.657474][T17922] __se_sys_sendmsg+0x1d0/0x2c0 [ 816.662363][T17922] ? __x64_sys_sendmsg+0x80/0x80 [ 816.667352][T17922] ? lockdep_hardirqs_on+0x98/0x150 [ 816.672583][T17922] do_syscall_64+0x55/0xb0 [ 816.677037][T17922] ? clear_bhb_loop+0x40/0x90 [ 816.681742][T17922] ? clear_bhb_loop+0x40/0x90 [ 816.686444][T17922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.692372][T17922] RIP: 0033:0x7fbafe59de59 [ 816.696812][T17922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.716443][T17922] RSP: 002b:00007fbaff53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.724900][T17922] RAX: ffffffffffffffda RBX: 00007fbafe825fa0 RCX: 00007fbafe59de59 [ 816.732899][T17922] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 816.740898][T17922] RBP: 00007fbaff53f090 R08: 0000000000000000 R09: 0000000000000000 [ 816.748890][T17922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.756880][T17922] R13: 00007fbafe826038 R14: 00007fbafe825fa0 R15: 00007ffc71da4ae8 [ 816.764922][T17922] [ 817.656947][T17943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 818.124120][T17957] FAULT_INJECTION: forcing a failure. [ 818.124120][T17957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.144930][T17957] CPU: 0 PID: 17957 Comm: syz.0.3802 Not tainted syzkaller #0 [ 818.152507][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.162609][T17957] Call Trace: [ 818.166023][T17957] [ 818.168990][T17957] dump_stack_lvl+0x18c/0x250 [ 818.173727][T17957] ? show_regs_print_info+0x20/0x20 [ 818.178982][T17957] ? load_image+0x420/0x420 [ 818.183540][T17957] ? __might_fault+0xaa/0x120 [ 818.188266][T17957] ? __lock_acquire+0x7d80/0x7d80 [ 818.193343][T17957] should_fail_ex+0x394/0x4c0 [ 818.198076][T17957] _copy_from_iter+0x1cd/0x1290 [ 818.203066][T17957] ? rep_movs_alternative+0x4a/0x90 [ 818.208322][T17957] ? copyout_mc+0x70/0x70 [ 818.212721][T17957] ? copyout_mc+0x70/0x70 [ 818.217102][T17957] ? __virt_addr_valid+0x10c/0x380 [ 818.222277][T17957] ? page_copy_sane+0x16a/0x270 [ 818.227177][T17957] copy_page_from_iter+0x7b/0x100 [ 818.232250][T17957] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 818.238116][T17957] tun_get_user+0xc84/0x3d70 [ 818.242793][T17957] ? trace_event_raw_event_lock+0x150/0x240 [ 818.248749][T17957] ? aa_file_perm+0x3e3/0xee0 [ 818.253487][T17957] ? rcu_read_unlock+0xa0/0xa0 [ 818.258314][T17957] ? tun_get+0x1c/0x2e0 [ 818.262525][T17957] ? __lock_acquire+0x7d80/0x7d80 [ 818.267602][T17957] ? tun_get+0x1c/0x2e0 [ 818.271820][T17957] tun_chr_write_iter+0x119/0x200 [ 818.276893][T17957] vfs_write+0x474/0x9a0 [ 818.281189][T17957] ? file_end_write+0x250/0x250 [ 818.286097][T17957] ? __fget_files+0x3fc/0x460 [ 818.290847][T17957] ? __fdget_pos+0x1d8/0x330 [ 818.295518][T17957] ? ksys_write+0x74/0x260 [ 818.299994][T17957] ksys_write+0x151/0x260 [ 818.304522][T17957] ? __ia32_sys_read+0x90/0x90 [ 818.309362][T17957] ? lockdep_hardirqs_on+0x98/0x150 [ 818.314651][T17957] do_syscall_64+0x55/0xb0 [ 818.319151][T17957] ? clear_bhb_loop+0x40/0x90 [ 818.323878][T17957] ? clear_bhb_loop+0x40/0x90 [ 818.328612][T17957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.334582][T17957] RIP: 0033:0x7fbafe59de59 [ 818.339052][T17957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.358713][T17957] RSP: 002b:00007fbaff53f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.367175][T17957] RAX: ffffffffffffffda RBX: 00007fbafe825fa0 RCX: 00007fbafe59de59 [ 818.375192][T17957] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 818.383203][T17957] RBP: 00007fbaff53f090 R08: 0000000000000000 R09: 0000000000000000 [ 818.391217][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 818.399227][T17957] R13: 00007fbafe826038 R14: 00007fbafe825fa0 R15: 00007ffc71da4ae8 [ 818.407258][T17957] [ 818.682158][T17963] pim6reg0: tun_chr_ioctl cmd 1074025698 [ 818.695323][T17965] __nla_validate_parse: 2 callbacks suppressed [ 818.695342][T17965] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3804'. [ 818.712706][T17963] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 818.777943][T17965] netlink: 'syz.3.3804': attribute type 33 has an invalid length. [ 818.787565][T17965] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3804'. [ 818.942262][T17971] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 819.081228][T17983] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3811'. [ 819.138958][T17983] netlink: 'syz.2.3811': attribute type 10 has an invalid length. [ 819.158433][T17983] hsr0: entered promiscuous mode [ 819.189660][T17983] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 819.218453][T17983] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 819.256602][T17983] .`: (slave hsr0): Error -95 calling set_mac_address [ 820.441817][T18021] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3824'. [ 821.060023][T18029] FAULT_INJECTION: forcing a failure. [ 821.060023][T18029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.084312][T18029] CPU: 0 PID: 18029 Comm: syz.2.3827 Not tainted syzkaller #0 [ 821.091860][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 821.101953][T18029] Call Trace: [ 821.105257][T18029] [ 821.108240][T18029] dump_stack_lvl+0x18c/0x250 [ 821.112959][T18029] ? show_regs_print_info+0x20/0x20 [ 821.118199][T18029] ? load_image+0x420/0x420 [ 821.122736][T18029] ? __might_fault+0xaa/0x120 [ 821.127447][T18029] ? __lock_acquire+0x7d80/0x7d80 [ 821.132534][T18029] should_fail_ex+0x394/0x4c0 [ 821.137248][T18029] _copy_from_iter+0x1cd/0x1290 [ 821.142129][T18029] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 821.148320][T18029] ? copyout_mc+0x70/0x70 [ 821.152681][T18029] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 821.158878][T18029] ? __check_object_size+0x8a/0xa40 [ 821.164115][T18029] ping_common_sendmsg+0xbc/0x2a0 [ 821.169177][T18029] ping_v6_sendmsg+0x1fd/0x1130 [ 821.174066][T18029] ? ping_v6_pre_connect+0x30/0x30 [ 821.179216][T18029] ? inet_sendmsg+0x10d/0x2a0 [ 821.183927][T18029] ? __local_bh_enable_ip+0x13a/0x1c0 [ 821.189328][T18029] ? lockdep_hardirqs_on+0x98/0x150 [ 821.194565][T18029] ? _local_bh_enable+0xa0/0xa0 [ 821.199439][T18029] ? do_raw_spin_unlock+0x121/0x230 [ 821.204677][T18029] ? inet_sendmsg+0x10d/0x2a0 [ 821.209392][T18029] ? inet_sendmsg+0x10d/0x2a0 [ 821.214105][T18029] ? inet_send_prepare+0x250/0x250 [ 821.219245][T18029] ____sys_sendmsg+0x61b/0x980 [ 821.224061][T18029] ? __asan_memset+0x22/0x40 [ 821.228689][T18029] ? __sys_sendmsg_sock+0x30/0x30 [ 821.233743][T18029] ? __import_iovec+0x5f2/0x850 [ 821.238635][T18029] ? import_iovec+0x73/0xa0 [ 821.243168][T18029] ___sys_sendmsg+0x2a6/0x360 [ 821.247878][T18029] ? __sys_sendmsg+0x2b0/0x2b0 [ 821.252711][T18029] __se_sys_sendmsg+0x1d0/0x2c0 [ 821.257645][T18029] ? __x64_sys_sendmsg+0x80/0x80 [ 821.262634][T18029] ? syscall_enter_from_user_mode+0x2e/0x80 [ 821.268564][T18029] do_syscall_64+0x55/0xb0 [ 821.273010][T18029] ? clear_bhb_loop+0x40/0x90 [ 821.277706][T18029] ? clear_bhb_loop+0x40/0x90 [ 821.282403][T18029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.288329][T18029] RIP: 0033:0x7fab5c39de59 [ 821.292793][T18029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.312430][T18029] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.320872][T18029] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 821.328869][T18029] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000007 [ 821.336863][T18029] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 821.344859][T18029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.352853][T18029] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 821.360867][T18029] [ 821.727119][T18037] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 821.920031][T18044] netlink: 'syz.3.3835': attribute type 9 has an invalid length. [ 821.928778][T18044] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3835'. [ 822.263256][T18051] netlink: 'syz.2.3838': attribute type 3 has an invalid length. [ 822.306734][T18051] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3838'. [ 822.795547][T18064] netlink: 'syz.3.3843': attribute type 29 has an invalid length. [ 823.060085][T18064] netlink: 'syz.3.3843': attribute type 29 has an invalid length. [ 823.248435][T18078] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3846'. [ 823.377788][T18078] netlink: 'syz.3.3846': attribute type 10 has an invalid length. [ 823.426211][T18078] hsr0: entered promiscuous mode [ 823.439254][T18078] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 823.524193][T18078] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 823.554496][T18078] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 823.584469][T18078] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 824.530588][T18102] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 826.157892][T18133] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 826.313449][T18146] netlink: 'syz.2.3875': attribute type 10 has an invalid length. [ 826.473486][T18148] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3877'. [ 826.549724][T18148] netlink: 'syz.0.3877': attribute type 10 has an invalid length. [ 826.575034][T18148] hsr0: entered promiscuous mode [ 826.601039][T18148] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 826.641245][T18148] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 826.662456][T18148] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 826.694217][T18148] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 827.282104][T18175] netlink: 'syz.3.3889': attribute type 10 has an invalid length. [ 827.811488][T18181] netlink: 'syz.1.3892': attribute type 10 has an invalid length. [ 828.394046][T18185] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 828.443956][T18183] netlink: 'syz.1.3892': attribute type 10 has an invalid length. [ 828.460260][T18183] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 828.468503][T18183] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 828.541533][T18183] team0: Port device netdevsim0 removed [ 828.568571][T18183] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 828.810088][T18189] netlink: 'syz.3.3895': attribute type 9 has an invalid length. [ 828.820871][T18189] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3895'. [ 829.155283][T18201] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3900'. [ 829.259452][T18199] netlink: 'syz.0.3899': attribute type 10 has an invalid length. [ 829.353668][T18199] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 829.388699][T18199] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 829.420360][T18199] team0: Port device netdevsim0 added [ 829.442235][T18203] netlink: 'syz.0.3899': attribute type 10 has an invalid length. [ 829.473098][T18203] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 829.497823][T18203] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 830.512352][T18203] team0: Port device netdevsim0 removed [ 830.543898][T18203] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 830.557955][T18210] netlink: 'syz.3.3903': attribute type 10 has an invalid length. [ 831.159235][T18231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3911'. [ 831.454824][ T5781] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 832.079813][T18234] syzkaller0: entered promiscuous mode [ 832.115630][T18234] syzkaller0: entered allmulticast mode [ 833.547487][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 834.617832][T18246] netlink: 'syz.1.3915': attribute type 10 has an invalid length. [ 834.633953][T18252] veth0_vlan: entered promiscuous mode [ 834.644748][T18254] FAULT_INJECTION: forcing a failure. [ 834.644748][T18254] name failslab, interval 1, probability 0, space 0, times 0 [ 834.684057][T18254] CPU: 0 PID: 18254 Comm: syz.2.3918 Not tainted syzkaller #0 [ 834.691602][T18254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 834.701700][T18254] Call Trace: [ 834.705031][T18254] [ 834.707998][T18254] dump_stack_lvl+0x18c/0x250 [ 834.712741][T18254] ? show_regs_print_info+0x20/0x20 [ 834.717997][T18254] ? load_image+0x420/0x420 [ 834.722564][T18254] ? __might_sleep+0xe0/0xe0 [ 834.727209][T18254] ? __lock_acquire+0x7d80/0x7d80 [ 834.732275][T18254] should_fail_ex+0x394/0x4c0 [ 834.736998][T18254] should_failslab+0x9/0x20 [ 834.741550][T18254] slab_pre_alloc_hook+0x59/0x300 [ 834.746616][T18254] ? finish_task_switch+0x262/0x8f0 [ 834.751869][T18254] ? rtnl_newlink+0x10d/0x2170 [ 834.756667][T18254] __kmem_cache_alloc_node+0x53/0x250 [ 834.762075][T18254] ? rtnl_newlink+0x10d/0x2170 [ 834.766873][T18254] kmalloc_trace+0x2a/0xe0 [ 834.771324][T18254] rtnl_newlink+0x10d/0x2170 [ 834.775953][T18254] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 834.782156][T18254] ? __mutex_lock+0x919/0xc80 [ 834.786861][T18254] ? __lock_acquire+0x7d80/0x7d80 [ 834.791908][T18254] ? do_raw_spin_lock+0x11f/0x2b0 [ 834.796969][T18254] ? rtnl_setlink+0x4e0/0x4e0 [ 834.801687][T18254] ? __rwlock_init+0x150/0x150 [ 834.806483][T18254] ? do_raw_spin_unlock+0x121/0x230 [ 834.811716][T18254] ? __mutex_lock+0x923/0xc80 [ 834.816417][T18254] ? __mutex_lock+0x4d2/0xc80 [ 834.821129][T18254] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 834.826272][T18254] ? mutex_lock_nested+0x20/0x20 [ 834.831244][T18254] ? rtnl_setlink+0x4e0/0x4e0 [ 834.835956][T18254] rtnetlink_rcv_msg+0x843/0xf90 [ 834.840916][T18254] ? rtnetlink_rcv_msg+0x220/0xf90 [ 834.846057][T18254] ? rtnetlink_bind+0x80/0x80 [ 834.850761][T18254] ? perf_trace_preemptirq_template+0xac/0x330 [ 834.856948][T18254] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 834.862960][T18254] ? lock_chain_count+0x20/0x20 [ 834.867842][T18254] ? __local_bh_enable_ip+0x13a/0x1c0 [ 834.873240][T18254] ? lockdep_hardirqs_on+0x98/0x150 [ 834.878468][T18254] ? __local_bh_enable_ip+0x13a/0x1c0 [ 834.883861][T18254] ? _local_bh_enable+0xa0/0xa0 [ 834.888742][T18254] ? __dev_queue_xmit+0x275/0x3630 [ 834.893886][T18254] ? __dev_queue_xmit+0x1bc2/0x3630 [ 834.899123][T18254] ? __dev_queue_xmit+0x275/0x3630 [ 834.904281][T18254] ? ref_tracker_free+0x686/0x830 [ 834.909349][T18254] netlink_rcv_skb+0x235/0x4c0 [ 834.914148][T18254] ? rtnetlink_bind+0x80/0x80 [ 834.918847][T18254] ? netlink_ack+0x1160/0x1160 [ 834.923649][T18254] ? __lock_acquire+0x7d80/0x7d80 [ 834.928707][T18254] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.933947][T18254] netlink_unicast+0x7b1/0x930 [ 834.938761][T18254] netlink_sendmsg+0x8d0/0xbf0 [ 834.943567][T18254] ? netlink_getsockopt+0x590/0x590 [ 834.948799][T18254] ? apparmor_socket_sendmsg+0x8e/0x330 [ 834.954375][T18254] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 834.959689][T18254] ? security_socket_sendmsg+0x80/0xa0 [ 834.965176][T18254] ? netlink_getsockopt+0x590/0x590 [ 834.970412][T18254] ____sys_sendmsg+0x61b/0x980 [ 834.975215][T18254] ? __asan_memset+0x22/0x40 [ 834.979842][T18254] ? __sys_sendmsg_sock+0x30/0x30 [ 834.984897][T18254] ? __import_iovec+0x5f2/0x850 [ 834.989787][T18254] ? import_iovec+0x73/0xa0 [ 834.994321][T18254] ___sys_sendmsg+0x2a6/0x360 [ 834.999033][T18254] ? get_pid_task+0x20/0x1e0 [ 835.003657][T18254] ? __sys_sendmsg+0x2b0/0x2b0 [ 835.008477][T18254] ? __lock_acquire+0x7d80/0x7d80 [ 835.013552][T18254] __se_sys_sendmsg+0x1d0/0x2c0 [ 835.018456][T18254] ? __x64_sys_sendmsg+0x80/0x80 [ 835.023460][T18254] ? lockdep_hardirqs_on+0x98/0x150 [ 835.028692][T18254] do_syscall_64+0x55/0xb0 [ 835.033145][T18254] ? clear_bhb_loop+0x40/0x90 [ 835.037862][T18254] ? clear_bhb_loop+0x40/0x90 [ 835.042580][T18254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.048525][T18254] RIP: 0033:0x7fab5c39de59 [ 835.053003][T18254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.072636][T18254] RSP: 002b:00007fab5d34e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.081086][T18254] RAX: ffffffffffffffda RBX: 00007fab5c625fa0 RCX: 00007fab5c39de59 [ 835.089088][T18254] RDX: 0000000000000840 RSI: 0000200000000940 RDI: 0000000000000003 [ 835.097081][T18254] RBP: 00007fab5d34e090 R08: 0000000000000000 R09: 0000000000000000 [ 835.105098][T18254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.113101][T18254] R13: 00007fab5c626038 R14: 00007fab5c625fa0 R15: 00007ffe3cc494d8 [ 835.121123][T18254] [ 835.282265][T18258] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 835.482419][T18264] netlink: 'syz.2.3923': attribute type 9 has an invalid length. [ 835.494239][T18264] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3923'. [ 836.796962][T18289] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3929'. [ 836.829452][T18289] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3929'. [ 836.849248][T18290] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3929'. [ 839.051241][T18327] netlink: 'syz.1.3944': attribute type 10 has an invalid length. [ 839.295001][T17785] wlan1: Trigger new scan to find an IBSS to join [ 843.304548][T17786] wlan1: Trigger new scan to find an IBSS to join [ 844.279005][T18415] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 844.334221][T17785] wlan1: Trigger new scan to find an IBSS to join [ 844.340822][T17785] wlan1: Trigger new scan to find an IBSS to join [ 845.031597][T18419] syzkaller0: entered promiscuous mode [ 845.057426][T18419] syzkaller0: entered allmulticast mode [ 845.415010][T17784] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 845.798126][T18445] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3987'. [ 845.926782][T18445] netlink: 'syz.2.3987': attribute type 29 has an invalid length. [ 846.336028][T17775] wlan1: Trigger new scan to find an IBSS to join [ 847.228740][T17786] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 847.473233][T18445] netlink: 'syz.2.3987': attribute type 29 has an invalid length. [ 847.482748][T18449] netlink: 'syz.2.3987': attribute type 29 has an invalid length. [ 847.652085][T18461] netlink: 'syz.1.3992': attribute type 10 has an invalid length. [ 847.678170][T18461] bond0: (slave netdevsim0): Releasing backup interface [ 847.703549][T18461] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 847.740614][T18461] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 847.761453][T18455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 847.773148][T18461] team0: Port device netdevsim0 added [ 847.959771][T18463] netlink: 'syz.1.3992': attribute type 10 has an invalid length. [ 847.978750][T18463] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 847.992847][T18463] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 848.016896][T18463] team0: Port device netdevsim0 removed [ 848.036969][T18463] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 848.239164][T18470] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 848.369376][T18477] netlink: 'syz.1.3998': attribute type 10 has an invalid length. [ 848.379501][T18477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3998'. [ 848.390535][T18477] dummy0: entered promiscuous mode [ 848.398323][T18477] dummy0: entered allmulticast mode [ 848.405250][T18477] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 849.297518][T17786] wlan1: Trigger new scan to find an IBSS to join [ 849.414750][T18493] netlink: 'syz.0.4003': attribute type 10 has an invalid length. [ 849.487610][T18493] team0: Device hsr_slave_0 failed to register rx_handler [ 850.284523][T18499] netlink: 'syz.1.4006': attribute type 10 has an invalid length. [ 850.312031][T18499] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 850.336228][T17785] wlan1: Trigger new scan to find an IBSS to join [ 850.349433][T18501] netlink: 'syz.1.4006': attribute type 39 has an invalid length. [ 850.375983][T17785] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 850.551461][T18519] netlink: 'syz.2.4011': attribute type 12 has an invalid length. [ 850.593174][T18519] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.4011'. [ 852.369556][T18554] netlink: 'syz.1.4021': attribute type 10 has an invalid length. [ 852.432244][T18554] team0: Device hsr_slave_0 failed to register rx_handler [ 852.684967][T18564] netlink: 212808 bytes leftover after parsing attributes in process `syz.0.4026'. [ 853.375033][T18571] sit0: left promiscuous mode [ 853.550741][T18567] sit0: entered promiscuous mode [ 854.346913][T17786] wlan1: Trigger new scan to find an IBSS to join [ 855.374340][T17782] wlan1: Trigger new scan to find an IBSS to join [ 856.334267][T17780] wlan1: Trigger new scan to find an IBSS to join [ 856.657307][T17780] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 856.907597][T18595] syzkaller0: entered promiscuous mode [ 856.947842][T18595] syzkaller0: entered allmulticast mode [ 858.345709][T17785] wlan1: Trigger new scan to find an IBSS to join [ 859.347770][T17785] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 860.368761][T17782] wlan1: Trigger new scan to find an IBSS to join [ 862.072392][T17785] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:db:5b [ 862.121209][T17782] ------------[ cut here ]------------ [ 862.127537][T17782] WARNING: CPU: 1 PID: 17782 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 862.137660][T17782] Modules linked in: [ 862.141613][T17782] CPU: 1 PID: 17782 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 862.149460][T17782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 862.159843][T17782] Workqueue: cfg80211 cfg80211_event_work [ 862.165688][T17782] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 862.171902][T17782] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fe b6 9a f7 0f 0b eb bf e8 f5 b6 9a f7 <0f> 0b eb b6 e8 ec b6 9a f7 0f 0b e9 e2 fd ff ff e8 e0 b6 9a f7 0f [ 862.191881][T17782] RSP: 0018:ffffc9000f6bfa40 EFLAGS: 00010293 [ 862.198215][T17782] RAX: ffffffff89ec2e7b RBX: dffffc0000000000 RCX: ffff888024a78000 [ 862.206306][T17782] RDX: 0000000000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 862.214552][T17782] RBP: ffffc9000f6bfaf8 R08: ffffffff911e756f R09: 1ffffffff223cead [ 862.222572][T17782] R10: dffffc0000000000 R11: fffffbfff223ceae R12: ffff8880606d4d10 [ 862.230646][T17782] R13: ffff88805962b618 R14: 1ffff92001ed7f4c R15: 000000000000001f [ 862.238717][T17782] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 862.248098][T17782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 862.254842][T17782] CR2: 0000001b2f421ff8 CR3: 000000003c7cc000 CR4: 00000000003506e0 [ 862.262868][T17782] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 862.270945][T17782] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 862.279027][T17782] Call Trace: [ 862.282348][T17782] [ 862.285404][T17782] ? trace_rdev_return_void+0x1c0/0x1c0 [ 862.291026][T17782] cfg80211_process_wdev_events+0x396/0x500 [ 862.297036][T17782] cfg80211_process_rdev_events+0xa1/0x110 [ 862.302902][T17782] cfg80211_event_work+0x2f/0x40 [ 862.307973][T17782] ? process_scheduled_works+0x975/0x1600 [ 862.313754][T17782] process_scheduled_works+0xa60/0x1600 [ 862.319440][T17782] ? worker_attach_to_pool+0x370/0x370 [ 862.325033][T17782] ? assign_work+0x3cc/0x5d0 [ 862.328412][T18651] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.4050'. [ 862.329671][T17782] worker_thread+0xa5e/0xfe0 [ 862.339403][T17780] wlan1: Trigger new scan to find an IBSS to join [ 862.343753][T17782] kthread+0x2fa/0x390 [ 862.354333][T17782] ? pr_cont_work+0x550/0x550 [ 862.359067][T17782] ? kthread_blkcg+0xd0/0xd0 [ 862.363713][T17782] ret_from_fork+0x48/0x80 [ 862.368267][T17782] ? kthread_blkcg+0xd0/0xd0 [ 862.372906][T17782] ret_from_fork_asm+0x11/0x20 [ 862.377798][T17782] [ 862.380865][T17782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 862.388176][T17782] CPU: 1 PID: 17782 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 862.395930][T17782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 862.406019][T17782] Workqueue: cfg80211 cfg80211_event_work [ 862.411787][T17782] Call Trace: [ 862.415126][T17782] [ 862.418097][T17782] dump_stack_lvl+0x18c/0x250 [ 862.422855][T17782] ? show_regs_print_info+0x20/0x20 [ 862.428109][T17782] ? load_image+0x420/0x420 [ 862.432766][T17782] panic+0x2ca/0x720 [ 862.436737][T17782] ? bpf_jit_dump+0xd0/0xd0 [ 862.441286][T17782] ? ret_from_fork_asm+0x11/0x20 [ 862.446261][T17782] __warn+0x2e0/0x470 [ 862.450269][T17782] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 862.455838][T17782] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 862.461402][T17782] report_bug+0x2be/0x4f0 [ 862.465780][T17782] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 862.471362][T17782] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 862.476944][T17782] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 862.482532][T17782] handle_bug+0xcf/0x120 [ 862.486807][T17782] exc_invalid_op+0x1a/0x50 [ 862.491336][T17782] asm_exc_invalid_op+0x1a/0x20 [ 862.496217][T17782] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 862.502400][T17782] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fe b6 9a f7 0f 0b eb bf e8 f5 b6 9a f7 <0f> 0b eb b6 e8 ec b6 9a f7 0f 0b e9 e2 fd ff ff e8 e0 b6 9a f7 0f [ 862.522032][T17782] RSP: 0018:ffffc9000f6bfa40 EFLAGS: 00010293 [ 862.528134][T17782] RAX: ffffffff89ec2e7b RBX: dffffc0000000000 RCX: ffff888024a78000 [ 862.536135][T17782] RDX: 0000000000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 862.544128][T17782] RBP: ffffc9000f6bfaf8 R08: ffffffff911e756f R09: 1ffffffff223cead [ 862.552125][T17782] R10: dffffc0000000000 R11: fffffbfff223ceae R12: ffff8880606d4d10 [ 862.560128][T17782] R13: ffff88805962b618 R14: 1ffff92001ed7f4c R15: 000000000000001f [ 862.568132][T17782] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 862.573726][T17782] ? trace_rdev_return_void+0x1c0/0x1c0 [ 862.579305][T17782] cfg80211_process_wdev_events+0x396/0x500 [ 862.585231][T17782] cfg80211_process_rdev_events+0xa1/0x110 [ 862.591094][T17782] cfg80211_event_work+0x2f/0x40 [ 862.596051][T17782] ? process_scheduled_works+0x975/0x1600 [ 862.601822][T17782] process_scheduled_works+0xa60/0x1600 [ 862.607416][T17782] ? worker_attach_to_pool+0x370/0x370 [ 862.612931][T17782] ? assign_work+0x3cc/0x5d0 [ 862.617557][T17782] worker_thread+0xa5e/0xfe0 [ 862.622192][T17782] kthread+0x2fa/0x390 [ 862.626279][T17782] ? pr_cont_work+0x550/0x550 [ 862.630983][T17782] ? kthread_blkcg+0xd0/0xd0 [ 862.635620][T17782] ret_from_fork+0x48/0x80 [ 862.640087][T17782] ? kthread_blkcg+0xd0/0xd0 [ 862.644727][T17782] ret_from_fork_asm+0x11/0x20 [ 862.649574][T17782] [ 862.653214][T17782] Kernel Offset: disabled [ 862.657633][T17782] Rebooting in 86400 seconds..