last executing test programs: 6.369286559s ago: executing program 3 (id=1311): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff99, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030010000b05d25a806c8c6f94f90324fc601000010020000000053582fb8f51c18fffd99b8e8bc137153e37", 0x33fe0}], 0x1}, 0x40040) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = getpid() r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x3, 0x0, 0x0, 0x0, 0x2009}, r4, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESDEC=r4], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x3f) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x1e, 0x4, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(0xffffffffffffffff, 0x0, 0x10182) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=""/61, 0x169, 0x3d, 0x1, 0x58b3, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r10, &(0x7f0000000b00)="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", &(0x7f0000000780)=""/90}, 0x20) 5.271521421s ago: executing program 0 (id=1316): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r2, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x6, 0x7, 0x10, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ec9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100508, 0x400, 0x2, 0x6, 0x8, 0x7, 0x9, 0x0, 0x800, 0x0, 0x80}, r4, 0x8, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) 5.26765162s ago: executing program 3 (id=1317): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffa, 0x0, @perf_bp={0x0}, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) 5.210593811s ago: executing program 1 (id=1318): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000458c35d43ae7040019b06e5454f20a698b65cbec40bf1ac6553202c7b5f9bfd104ca34461bafca4d413462534c61b18de64b3de09bbcc585e72ffe304c4740fac1c352129526701ee9552a176601000000010000001e96d2296e7a8d828e2034924e79631c55765929b07b2ff2c144f9c717b3eac18d692b50", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0xb) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000001100), 0x2, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20720033e3e8"], 0x8) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000010c0)='memory.low\x00', 0x2, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000033c0)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4130, 0x1022}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/183, 0xb7}], 0x4}, 0x40002120) 4.978561576s ago: executing program 0 (id=1321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000010e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x100, 0x0, 0x2009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x3e, 0x0, 0x2e4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='1\x00\x00\x00\b\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0ce7e3", @ANYRES64=r4], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x6}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.866228119s ago: executing program 3 (id=1322): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffddc, &(0x7f0000003940)=[{&(0x7f0000002500)=""/4070, 0xff6}], 0x1}, 0x400120a1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000940), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x4000080) close(r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef) r8 = socket$kcm(0x29, 0x7, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000003c0)={r6, r9}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x29, 0x7, 0x0) 4.782277476s ago: executing program 1 (id=1323): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x10000) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000015006b03004e21000af32c6e020675f80025030040010000002c740e17d34460bc24eab5fac905251e6182949a36c23d3b48dfd8cdbf9364c9f8ffffffffffffffd0bdd70000b6c0504bb9189d5208eddedf0cd7ecc1c31b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0xaa922e4c6e980b57, &(0x7f0000000040)=[{0x64, 0x8, 0x0, 0xfffff021}]}) 3.882335117s ago: executing program 0 (id=1325): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffddc, &(0x7f0000003940)=[{&(0x7f0000002500)=""/4070, 0xff6}], 0x1}, 0x400120a1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000940), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x4000080) close(r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef) r8 = socket$kcm(0x2d, 0x7, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000003c0)={r6, r9}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x29, 0x7, 0x0) 3.750393427s ago: executing program 3 (id=1327): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffddc, &(0x7f0000003940)=[{&(0x7f0000002500)=""/4070, 0xff6}], 0x1}, 0x400120a1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000940), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x2d, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x4000080) close(r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef) r8 = socket$kcm(0x29, 0x7, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000003c0)={r6, r9}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x29, 0x7, 0x0) 3.749712847s ago: executing program 1 (id=1328): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r3) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, 0x0, &(0x7f00000002c0)=""/34}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r5 = gettid() perf_event_open(0x0, r5, 0x6, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x6, 0x7, 0x10, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ec9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100508, 0x400, 0x2, 0x6, 0x8, 0x7, 0x9, 0x0, 0x800, 0x0, 0x80}, r7, 0x8, r0, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 3.57304261s ago: executing program 2 (id=1329): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r2, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x6, 0x7, 0x10, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ec9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100508, 0x400, 0x2, 0x6, 0x8, 0x7, 0x9, 0x0, 0x800, 0x0, 0x80}, r4, 0x8, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) 3.140120953s ago: executing program 2 (id=1330): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffa, 0x0, @perf_bp={0x0}, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) 2.975853878s ago: executing program 1 (id=1331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r1}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="27031c00160014000000002f01ee0b80558ddbba9b3786dd37a518fc9c5be50eaf07c365059600"/53, 0x35}], 0x1}, 0x4000004) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000100000080"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x1b, &(0x7f00000005c0)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000880), 0x8, 0x60, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @broadcast}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x14, [@broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xf2, 0x0, 0x9, [0x2, 0x200]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @remote}}}], 0xb8}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b70572c51d46e60000000000007910a80000000000920a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x80000, 0x0) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000b80)) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 2.918491019s ago: executing program 0 (id=1332): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x3, 0xb}, 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x1003fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1a, 0x5}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000001200)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1807000000000000000000000000000085000000890000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) 2.912817918s ago: executing program 3 (id=1333): r0 = gettid() r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018ca1c327106729b3cb8ca9c65000000000000000c0000000c0000000900000042c336df987931c9736d3895bd113497a9eaec066f3a0800df553a3b55000000000000071c000000002e"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="f3b16fda136d2b113d997afde983af772ffb85760c84e398e520b2200f0200000000000000d746a3682a58a86a20e7ee691978b987ead412a379b65fbfbfd22bb29f8896b517398755dc432a8afd5dea27f6af97ceeeb518ad9ca13e491199c9946ff4342d6d87c2cb1bf2f57f3eeaa7136bf98dded7fb2a090b6a0b7981f72a8477f84dccef38b608051727c573ec96960d524d5b684015ab465545d1f7e3bce6e7ff147e8124bb585239831e11285fe245a44c73d99a5e930ad741143e5732a1d2d987aa8134dd69fcae310fbf1a3f1b", @ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="ae03066515ff0d3f513327024dcf3c97a9"], 0x50) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r8 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x176, &(0x7f00000009c0)='@\x04\xdd\xa8\xd3}\xde\x06\xb2\x97\x95\xf6\xcb\xca\xd1\x18\xd1\x98b\xa44\xeb\"_@%\x1c\xdb\x91\x88\xac\x91[\xa1]Rd\x13\xe3b\xa0\x02\xcf\x8ay\xbb \x85\xde\x1cM\x12\x1e\x02\xc3\xc6\x93l=\xa7<\x110xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1f, 0x445}, 0x10, 0x5, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10140) 725.583372ms ago: executing program 2 (id=1335): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580), 0x7, r2, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 447.875139ms ago: executing program 2 (id=1336): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000458c35d43ae7040019b06e5454f20a698b65cbec40bf1ac6553202c7b5f9bfd104ca34461bafca4d413462534c61b18de64b3de09bbcc585e72ffe304c4740fac1c352129526701ee9552a176601000000010000001e96d2296e7a8d828e2034924e79631c55765929b07b2ff2c144f9c717b3eac18d692b50", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0xb) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000001100), 0x2, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20720033e3e8"], 0x8) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000010c0)='memory.low\x00', 0x2, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000033c0)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4130, 0x1022}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/183, 0xb7}], 0x4}, 0x40002120) 446.015839ms ago: executing program 0 (id=1344): r0 = gettid() r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018ca1c327106729b3cb8ca9c65000000000000000c0000000c0000000900000042c336df987931c9736d3895bd113497a9eaec066f3a0800df553a3b55000000000000071c000000002e"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="f3b16fda136d2b113d997afde983af772ffb85760c84e398e520b2200f0200000000000000d746a3682a58a86a20e7ee691978b987ead412a379b65fbfbfd22bb29f8896b517398755dc432a8afd5dea27f6af97ceeeb518ad9ca13e491199c9946ff4342d6d87c2cb1bf2f57f3eeaa7136bf98dded7fb2a090b6a0b7981f72a8477f84dccef38b608051727c573ec96960d524d5b684015ab465545d1f7e3bce6e7ff147e8124bb585239831e11285fe245a44c73d99a5e930ad741143e5732a1d2d987aa8134dd69fcae310fbf1a3f1b", @ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="ae03066515ff0d3f513327024dcf3c97a9"], 0x50) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r8 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x176, &(0x7f00000009c0)='@\x04\xdd\xa8\xd3}\xde\x06\xb2\x97\x95\xf6\xcb\xca\xd1\x18\xd1\x98b\xa44\xeb\"_@%\x1c\xdb\x91\x88\xac\x91[\xa1]Rd\x13\xe3b\xa0\x02\xcf\x8ay\xbb \x85\xde\x1cM\x12\x1e\x02\xc3\xc6\x93l=\xa7<\x110x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x1b, &(0x7f00000005c0)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000880), 0x8, 0x60, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @broadcast}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x14, [@broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xf2, 0x0, 0x9, [0x2, 0x200]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @remote}}}], 0xb8}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b70572c51d46e60000000000007910a80000000000920a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x80000, 0x0) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000b80)) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 202.371831ms ago: executing program 0 (id=1337): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r2 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r2, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x6, 0x7, 0x10, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ec9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100508, 0x400, 0x2, 0x6, 0x8, 0x7, 0x9, 0x0, 0x800, 0x0, 0x80}, r4, 0x8, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) 174.539057ms ago: executing program 1 (id=1338): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r2, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x6, 0x7, 0x10, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ec9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100508, 0x400, 0x2, 0x6, 0x8, 0x7, 0x9, 0x0, 0x800, 0x0, 0x80}, r4, 0x8, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) 0s ago: executing program 2 (id=1339): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r3) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, 0x0, &(0x7f00000002c0)=""/34}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r5 = gettid() perf_event_open(0x0, r5, 0x6, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x6, 0x7, 0x10, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ec9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100508, 0x400, 0x2, 0x6, 0x8, 0x7, 0x9, 0x0, 0x800, 0x0, 0x80}, r7, 0x8, r0, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) kernel console output (not intermixed with test programs): _loop+0x40/0x90 [ 327.087860][ T8580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.094102][ T8580] RIP: 0033:0x7fc096b5cece [ 327.098571][ T8580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 327.118246][ T8580] RSP: 002b:00007fc097ad5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.126735][ T8580] RAX: ffffffffffffffda RBX: 00007fc097ad66c0 RCX: 00007fc096b5cece [ 327.134798][ T8580] RDX: 0000000000000001 RSI: 00007fc097ad60a0 RDI: 0000000000000009 [ 327.142835][ T8580] RBP: 00007fc097ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.150876][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.158914][ T8580] R13: 00007fc096e16038 R14: 00007fc096e15fa0 R15: 00007ffebb790988 [ 327.167020][ T8580] [ 327.438340][ T8587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.539781][ T8590] FAULT_INJECTION: forcing a failure. [ 327.539781][ T8590] name failslab, interval 1, probability 0, space 0, times 0 [ 327.564710][ T8590] CPU: 1 PID: 8590 Comm: syz.0.809 Not tainted syzkaller #0 [ 327.572127][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.582332][ T8590] Call Trace: [ 327.585666][ T8590] [ 327.588660][ T8590] dump_stack_lvl+0x18c/0x250 [ 327.593416][ T8590] ? show_regs_print_info+0x20/0x20 [ 327.598697][ T8590] ? load_image+0x400/0x400 [ 327.603290][ T8590] ? __might_sleep+0xe0/0xe0 [ 327.607938][ T8590] ? __lock_acquire+0x7d40/0x7d40 [ 327.613012][ T8590] should_fail_ex+0x39d/0x4d0 [ 327.617737][ T8590] should_failslab+0x9/0x20 [ 327.622288][ T8590] slab_pre_alloc_hook+0x59/0x310 [ 327.627362][ T8590] ? trace_call_bpf+0x5e9/0x6c0 [ 327.632265][ T8590] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 327.638107][ T8590] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 327.643903][ T8590] __kmem_cache_alloc_node+0x53/0x250 [ 327.649480][ T8590] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 327.655257][ T8590] __kmalloc+0xa4/0x230 [ 327.659551][ T8590] tomoyo_realpath_from_path+0xe3/0x5d0 [ 327.665142][ T8590] tomoyo_path_number_perm+0x248/0x620 [ 327.670639][ T8590] ? tomoyo_path_number_perm+0x217/0x620 [ 327.676318][ T8590] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 327.681830][ T8590] ? ksys_write+0x1c4/0x260 [ 327.686409][ T8590] ? __fget_files+0x28/0x4b0 [ 327.691040][ T8590] ? __fget_files+0x28/0x4b0 [ 327.695709][ T8590] security_file_ioctl+0x70/0xa0 [ 327.700710][ T8590] __se_sys_ioctl+0x48/0x170 [ 327.705435][ T8590] do_syscall_64+0x55/0xa0 [ 327.709924][ T8590] ? clear_bhb_loop+0x40/0x90 [ 327.714644][ T8590] ? clear_bhb_loop+0x40/0x90 [ 327.719364][ T8590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.725294][ T8590] RIP: 0033:0x7f8f8659c629 [ 327.729750][ T8590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.749579][ T8590] RSP: 002b:00007f8f87523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.758043][ T8590] RAX: ffffffffffffffda RBX: 00007f8f86815fa0 RCX: 00007f8f8659c629 [ 327.766138][ T8590] RDX: 0000200000000000 RSI: 0000000000008b05 RDI: 0000000000000003 [ 327.774149][ T8590] RBP: 00007f8f87523090 R08: 0000000000000000 R09: 0000000000000000 [ 327.782431][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.790694][ T8590] R13: 00007f8f86816038 R14: 00007f8f86815fa0 R15: 00007fffce172e98 [ 327.798715][ T8590] [ 327.839738][ T8590] ERROR: Out of memory at tomoyo_realpath_from_path. [ 328.062845][ T8596] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 328.080701][ T8596] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.814'. [ 328.142092][ T8600] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 328.187192][ T8600] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.812'. [ 328.240590][ T8604] netlink: 'syz.1.812': attribute type 12 has an invalid length. [ 328.291275][ T8604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.812'. [ 328.496875][ T8607] netlink: 'syz.3.815': attribute type 12 has an invalid length. [ 328.510097][ T8607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.815'. [ 328.547601][ T8603] netlink: 'syz.3.815': attribute type 3 has an invalid length. [ 328.579171][ T8603] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.815'. [ 330.311205][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 331.559679][ T8620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.467085][ T8626] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 332.604838][ T8626] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.823'. [ 332.706658][ T8626] netlink: 9 bytes leftover after parsing attributes in process `syz.2.823'. [ 332.889938][ T8634] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.959439][ T8634] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.825'. [ 333.035542][ T8634] netlink: 'syz.0.825': attribute type 12 has an invalid length. [ 333.070310][ T8634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.825'. [ 333.446287][ T8641] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 333.456568][ T8641] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.828'. [ 333.504990][ T8637] netlink: 'syz.3.826': attribute type 3 has an invalid length. [ 333.514718][ T8637] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.826'. [ 333.615600][ T8643] netlink: 'syz.3.826': attribute type 12 has an invalid length. [ 333.657232][ T8643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.826'. [ 333.897178][ T8649] netlink: 'syz.1.830': attribute type 3 has an invalid length. [ 333.905335][ T8649] netlink: 'syz.1.830': attribute type 5 has an invalid length. [ 336.899449][ T8659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.170638][ T8664] netlink: 'syz.3.835': attribute type 4 has an invalid length. [ 337.187864][ T8664] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.835'. [ 337.552365][ T8671] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.591854][ T8673] netlink: 'syz.3.839': attribute type 3 has an invalid length. [ 337.608767][ T8673] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.839'. [ 337.698228][ T8676] netlink: 'syz.3.839': attribute type 12 has an invalid length. [ 337.750744][ T8676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.839'. [ 337.785254][ T8671] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.838'. [ 337.863370][ T8678] netlink: 'syz.2.838': attribute type 12 has an invalid length. [ 337.879461][ T8678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.838'. [ 338.043278][ T8684] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 338.091157][ T8684] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.841'. [ 340.389656][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 341.189838][ T8697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.420335][ T8705] FAULT_INJECTION: forcing a failure. [ 341.420335][ T8705] name failslab, interval 1, probability 0, space 0, times 0 [ 341.439496][ T8705] CPU: 1 PID: 8705 Comm: syz.1.848 Not tainted syzkaller #0 [ 341.446908][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.457138][ T8705] Call Trace: [ 341.460578][ T8705] [ 341.463586][ T8705] dump_stack_lvl+0x18c/0x250 [ 341.468375][ T8705] ? show_regs_print_info+0x20/0x20 [ 341.473855][ T8705] ? load_image+0x400/0x400 [ 341.478461][ T8705] ? __might_sleep+0xe0/0xe0 [ 341.483146][ T8705] ? __lock_acquire+0x7d40/0x7d40 [ 341.488278][ T8705] ? perf_tp_event+0x1450/0x1450 [ 341.493491][ T8705] should_fail_ex+0x39d/0x4d0 [ 341.498274][ T8705] should_failslab+0x9/0x20 [ 341.503039][ T8705] slab_pre_alloc_hook+0x59/0x310 [ 341.508155][ T8705] ? __get_vm_area_node+0x125/0x370 [ 341.513441][ T8705] __kmem_cache_alloc_node+0x53/0x250 [ 341.519788][ T8705] ? __get_vm_area_node+0x125/0x370 [ 341.526393][ T8705] kmalloc_node_trace+0x26/0xe0 [ 341.531688][ T8705] __get_vm_area_node+0x125/0x370 [ 341.537001][ T8705] __vmalloc_node_range+0x36e/0x1330 [ 341.542474][ T8705] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 341.548350][ T8705] ? free_vm_area+0x50/0x50 [ 341.552988][ T8705] ? end_current_label_crit_section+0x170/0x170 [ 341.559919][ T8705] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 341.565721][ T8705] __vmalloc+0x7a/0x90 [ 341.569875][ T8705] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 341.575509][ T8705] bpf_prog_alloc_no_stats+0x47/0x440 [ 341.580961][ T8705] ? bpf_prog_alloc+0x2b/0x1a0 [ 341.585901][ T8705] bpf_prog_alloc+0x3d/0x1a0 [ 341.590573][ T8705] bpf_prog_load+0x6eb/0x1670 [ 341.595344][ T8705] ? map_freeze+0x420/0x420 [ 341.599941][ T8705] ? __might_fault+0xaa/0x120 [ 341.604695][ T8705] ? __lock_acquire+0x7d40/0x7d40 [ 341.609799][ T8705] ? file_end_write+0x159/0x250 [ 341.614823][ T8705] ? __might_fault+0xaa/0x120 [ 341.619570][ T8705] ? __might_fault+0xc6/0x120 [ 341.624374][ T8705] ? __might_fault+0xaa/0x120 [ 341.629145][ T8705] ? bpf_lsm_bpf+0x9/0x10 [ 341.633549][ T8705] ? security_bpf+0x7e/0xa0 [ 341.638136][ T8705] __sys_bpf+0x5ba/0x890 [ 341.642460][ T8705] ? bpf_link_show_fdinfo+0x390/0x390 [ 341.648027][ T8705] ? lock_chain_count+0x20/0x20 [ 341.652955][ T8705] __x64_sys_bpf+0x7c/0x90 [ 341.657448][ T8705] do_syscall_64+0x55/0xa0 [ 341.661989][ T8705] ? clear_bhb_loop+0x40/0x90 [ 341.666728][ T8705] ? clear_bhb_loop+0x40/0x90 [ 341.671479][ T8705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.677525][ T8705] RIP: 0033:0x7f78e779c629 [ 341.682003][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.701689][ T8705] RSP: 002b:00007f78e85b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.710287][ T8705] RAX: ffffffffffffffda RBX: 00007f78e7a15fa0 RCX: 00007f78e779c629 [ 341.718373][ T8705] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 341.726502][ T8705] RBP: 00007f78e85b7090 R08: 0000000000000000 R09: 0000000000000000 [ 341.734554][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.742592][ T8705] R13: 00007f78e7a16038 R14: 00007f78e7a15fa0 R15: 00007ffd97264788 [ 341.751613][ T8705] [ 341.801721][ T8705] syz.1.848: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 341.819414][ T8705] CPU: 1 PID: 8705 Comm: syz.1.848 Not tainted syzkaller #0 [ 341.826899][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.837037][ T8705] Call Trace: [ 341.840397][ T8705] [ 341.843393][ T8705] dump_stack_lvl+0x18c/0x250 [ 341.848177][ T8705] ? show_regs_print_info+0x20/0x20 [ 341.853480][ T8705] ? load_image+0x400/0x400 [ 341.858083][ T8705] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 341.864680][ T8705] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 341.871288][ T8705] warn_alloc+0x246/0x340 [ 341.875712][ T8705] ? __get_vm_area_node+0x125/0x370 [ 341.881001][ T8705] ? zone_watermark_ok_safe+0x230/0x230 [ 341.886641][ T8705] ? rcu_is_watching+0x15/0xb0 [ 341.891532][ T8705] ? __get_vm_area_node+0x356/0x370 [ 341.896865][ T8705] __vmalloc_node_range+0x393/0x1330 [ 341.902310][ T8705] ? free_vm_area+0x50/0x50 [ 341.906991][ T8705] ? end_current_label_crit_section+0x170/0x170 [ 341.913423][ T8705] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 341.919188][ T8705] __vmalloc+0x7a/0x90 [ 341.923353][ T8705] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 341.928973][ T8705] bpf_prog_alloc_no_stats+0x47/0x440 [ 341.934531][ T8705] ? bpf_prog_alloc+0x2b/0x1a0 [ 341.939507][ T8705] bpf_prog_alloc+0x3d/0x1a0 [ 341.944252][ T8705] bpf_prog_load+0x6eb/0x1670 [ 341.949090][ T8705] ? map_freeze+0x420/0x420 [ 341.953789][ T8705] ? __might_fault+0xaa/0x120 [ 341.958555][ T8705] ? __lock_acquire+0x7d40/0x7d40 [ 341.963682][ T8705] ? file_end_write+0x159/0x250 [ 341.968676][ T8705] ? __might_fault+0xaa/0x120 [ 341.973438][ T8705] ? __might_fault+0xc6/0x120 [ 341.978277][ T8705] ? __might_fault+0xaa/0x120 [ 341.983081][ T8705] ? bpf_lsm_bpf+0x9/0x10 [ 341.987490][ T8705] ? security_bpf+0x7e/0xa0 [ 341.992075][ T8705] __sys_bpf+0x5ba/0x890 [ 341.996393][ T8705] ? bpf_link_show_fdinfo+0x390/0x390 [ 342.001868][ T8705] ? lock_chain_count+0x20/0x20 [ 342.006818][ T8705] __x64_sys_bpf+0x7c/0x90 [ 342.011412][ T8705] do_syscall_64+0x55/0xa0 [ 342.015915][ T8705] ? clear_bhb_loop+0x40/0x90 [ 342.020675][ T8705] ? clear_bhb_loop+0x40/0x90 [ 342.025418][ T8705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.031373][ T8705] RIP: 0033:0x7f78e779c629 [ 342.035929][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.055768][ T8705] RSP: 002b:00007f78e85b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.064272][ T8705] RAX: ffffffffffffffda RBX: 00007f78e7a15fa0 RCX: 00007f78e779c629 [ 342.072400][ T8705] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 342.080441][ T8705] RBP: 00007f78e85b7090 R08: 0000000000000000 R09: 0000000000000000 [ 342.088571][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.096628][ T8705] R13: 00007f78e7a16038 R14: 00007f78e7a15fa0 R15: 00007ffd97264788 [ 342.104723][ T8705] [ 342.129750][ T8705] Mem-Info: [ 342.133590][ T8705] active_anon:5016 inactive_anon:0 isolated_anon:0 [ 342.133590][ T8705] active_file:14535 inactive_file:40024 isolated_file:0 [ 342.133590][ T8705] unevictable:768 dirty:225 writeback:0 [ 342.133590][ T8705] slab_reclaimable:9784 slab_unreclaimable:91107 [ 342.133590][ T8705] mapped:24725 shmem:1361 pagetables:547 [ 342.133590][ T8705] sec_pagetables:0 bounce:0 [ 342.133590][ T8705] kernel_misc_reclaimable:0 [ 342.133590][ T8705] free:1353897 free_pcp:8641 free_cma:0 [ 342.181688][ T8705] Node 0 active_anon:20064kB inactive_anon:0kB active_file:58140kB inactive_file:159892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98900kB dirty:896kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10540kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no [ 342.225342][ T8705] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 342.295999][ T8705] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.334347][ T8705] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 342.342831][ T8705] Node 0 DMA32 free:1505952kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20168kB inactive_anon:0kB active_file:58140kB inactive_file:159068kB unevictable:1536kB writepending:908kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:13584kB local_pcp:8716kB free_cma:0kB [ 342.370372][ T8709] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 342.441197][ T8709] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.850'. [ 342.454618][ T8705] lowmem_reserve[]: 0 0 0 0 0 [ 342.469112][ T8705] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 342.544359][ T8709] netlink: 'syz.3.850': attribute type 12 has an invalid length. [ 342.554344][ T8705] lowmem_reserve[]: 0 0 0 0 0 [ 342.554436][ T8705] Node 1 Normal free:3894276kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20832kB local_pcp:8800kB free_cma:0kB [ 342.554510][ T8705] lowmem_reserve[]: 0 0 0 0 0 [ 342.554588][ T8705] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 342.554843][ T8705] Node 0 DMA32: 1152*4kB (UME) 1146*8kB (UME) 1273*16kB (UME) 709*32kB (UME) 475*64kB (UME) 184*128kB (UME) 77*256kB (UM) 24*512kB (UME) 7*1024kB (UME) 4*2048kB (ME) 329*4096kB (M) = 1505728kB [ 342.555164][ T8705] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 342.555361][ T8705] Node 1 Normal: 235*4kB (UME) 65*8kB (UME) 47*16kB (UME) 111*32kB (UME) 36*64kB (UE) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3894276kB [ 342.555689][ T8705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.555713][ T8705] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.555735][ T8705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.555757][ T8705] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.555785][ T8705] 55922 total pagecache pages [ 342.555803][ T8705] 0 pages in swap cache [ 342.555820][ T8705] Free swap = 124996kB [ 342.555833][ T8705] Total swap = 124996kB [ 342.555847][ T8705] 2097051 pages RAM [ 342.555914][ T8705] 0 pages HighMem/MovableOnly [ 342.555927][ T8705] 416922 pages reserved [ 342.555939][ T8705] 0 pages cma reserved [ 342.890452][ T8709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.850'. [ 343.022031][ T8713] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 343.095169][ T8714] netlink: 'syz.2.851': attribute type 3 has an invalid length. [ 343.128843][ T8714] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.851'. [ 343.161868][ T8715] netlink: 'syz.2.851': attribute type 12 has an invalid length. [ 343.181463][ T8720] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 343.190410][ T8715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.851'. [ 343.211162][ T8720] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.853'. [ 343.712675][ T8733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.942648][ T8739] FAULT_INJECTION: forcing a failure. [ 343.942648][ T8739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.956314][ T8739] CPU: 0 PID: 8739 Comm: syz.0.859 Not tainted syzkaller #0 [ 343.963667][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.973769][ T8739] Call Trace: [ 343.977098][ T8739] [ 343.980115][ T8739] dump_stack_lvl+0x18c/0x250 [ 343.984865][ T8739] ? show_regs_print_info+0x20/0x20 [ 343.990102][ T8739] ? load_image+0x400/0x400 [ 343.994652][ T8739] ? __might_fault+0xaa/0x120 [ 343.999536][ T8739] ? __lock_acquire+0x7d40/0x7d40 [ 344.004598][ T8739] should_fail_ex+0x39d/0x4d0 [ 344.009406][ T8739] _copy_from_iter+0x1d9/0x12e0 [ 344.014569][ T8739] ? dev_get_by_index+0x22/0x2d0 [ 344.019546][ T8739] ? __lock_acquire+0x7d40/0x7d40 [ 344.024615][ T8739] ? copyout_mc+0x70/0x70 [ 344.028987][ T8739] ? verify_lock_unused+0x140/0x140 [ 344.034234][ T8739] ? dev_get_by_index+0x22/0x2d0 [ 344.039227][ T8739] ? dev_get_by_index+0x22/0x2d0 [ 344.044220][ T8739] packet_sendmsg+0x2e23/0x4d70 [ 344.049128][ T8739] ? aa_sk_perm+0x970/0x970 [ 344.053697][ T8739] ? __might_sleep+0xe0/0xe0 [ 344.058408][ T8739] ? verify_lock_unused+0x140/0x140 [ 344.063643][ T8739] ? mark_lock+0x94/0x320 [ 344.068098][ T8739] ? __lock_acquire+0x1273/0x7d40 [ 344.073160][ T8739] ? aa_sk_perm+0x83c/0x970 [ 344.077735][ T8739] ? packet_getsockopt+0xad0/0xad0 [ 344.082930][ T8739] ? aa_sock_msg_perm+0x94/0x150 [ 344.087954][ T8739] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 344.093311][ T8739] ? security_socket_sendmsg+0x80/0xa0 [ 344.098900][ T8739] ? packet_getsockopt+0xad0/0xad0 [ 344.104077][ T8739] ____sys_sendmsg+0x5ba/0x960 [ 344.108912][ T8739] ? __lock_acquire+0x7d40/0x7d40 [ 344.113992][ T8739] ? __asan_memset+0x22/0x40 [ 344.118627][ T8739] ? __sys_sendmsg_sock+0x30/0x30 [ 344.123688][ T8739] ? __import_iovec+0x5f2/0x850 [ 344.128604][ T8739] ? import_iovec+0x73/0xa0 [ 344.133160][ T8739] ___sys_sendmsg+0x2a6/0x360 [ 344.137890][ T8739] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.142925][ T8739] ? __lock_acquire+0x7d40/0x7d40 [ 344.148122][ T8739] __se_sys_sendmsg+0x1c2/0x2b0 [ 344.153024][ T8739] ? __x64_sys_sendmsg+0x80/0x80 [ 344.158021][ T8739] ? lockdep_hardirqs_on+0x98/0x150 [ 344.163267][ T8739] do_syscall_64+0x55/0xa0 [ 344.167729][ T8739] ? clear_bhb_loop+0x40/0x90 [ 344.172446][ T8739] ? clear_bhb_loop+0x40/0x90 [ 344.177253][ T8739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.183183][ T8739] RIP: 0033:0x7f8f8659c629 [ 344.187633][ T8739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.207388][ T8739] RSP: 002b:00007f8f87523028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.215856][ T8739] RAX: ffffffffffffffda RBX: 00007f8f86815fa0 RCX: 00007f8f8659c629 [ 344.223986][ T8739] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 344.232418][ T8739] RBP: 00007f8f87523090 R08: 0000000000000000 R09: 0000000000000000 [ 344.240545][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.248556][ T8739] R13: 00007f8f86816038 R14: 00007f8f86815fa0 R15: 00007fffce172e98 [ 344.256665][ T8739] [ 344.390557][ T59] wlan1: Trigger new scan to find an IBSS to join [ 345.349249][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 346.605382][ T8746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.861'. [ 346.621490][ T8746] delete_channel: no stack [ 346.626759][ T8746] delete_channel: no stack [ 346.704055][ T8747] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.735289][ T8749] netlink: 'syz.3.863': attribute type 3 has an invalid length. [ 346.746095][ T8749] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.863'. [ 346.774006][ T8747] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.862'. [ 346.859195][ T8753] netlink: 'syz.2.862': attribute type 12 has an invalid length. [ 346.879378][ T8753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'. [ 346.897930][ T8749] netlink: 'syz.3.863': attribute type 12 has an invalid length. [ 346.936522][ T8749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.863'. [ 346.963143][ T8757] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 347.009209][ T8757] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.865'. [ 347.194229][ T8766] FAULT_INJECTION: forcing a failure. [ 347.194229][ T8766] name failslab, interval 1, probability 0, space 0, times 0 [ 347.246793][ T8765] FAULT_INJECTION: forcing a failure. [ 347.246793][ T8765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.275531][ T8766] CPU: 0 PID: 8766 Comm: syz.1.866 Not tainted syzkaller #0 [ 347.282924][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.293100][ T8766] Call Trace: [ 347.296422][ T8766] [ 347.299395][ T8766] dump_stack_lvl+0x18c/0x250 [ 347.304123][ T8766] ? show_regs_print_info+0x20/0x20 [ 347.309365][ T8766] ? load_image+0x400/0x400 [ 347.313992][ T8766] ? __might_sleep+0xe0/0xe0 [ 347.318618][ T8766] ? __lock_acquire+0x7d40/0x7d40 [ 347.323784][ T8766] should_fail_ex+0x39d/0x4d0 [ 347.328601][ T8766] should_failslab+0x9/0x20 [ 347.333207][ T8766] slab_pre_alloc_hook+0x59/0x310 [ 347.338274][ T8766] ? sctp_association_new+0x89/0x25c0 [ 347.343693][ T8766] __kmem_cache_alloc_node+0x53/0x250 [ 347.349106][ T8766] ? sctp_association_new+0x89/0x25c0 [ 347.354557][ T8766] kmalloc_trace+0x2a/0xe0 [ 347.359149][ T8766] sctp_association_new+0x89/0x25c0 [ 347.364398][ T8766] ? sctp_has_association+0x1cd/0x1e0 [ 347.369992][ T8766] ? sctp_has_association+0x2f/0x1e0 [ 347.375360][ T8766] sctp_connect_new_asoc+0x2de/0x6a0 [ 347.380683][ T8766] ? __sctp_connect+0xd80/0xd80 [ 347.385826][ T8766] ? __local_bh_enable_ip+0x13a/0x1c0 [ 347.391501][ T8766] ? _local_bh_enable+0xa0/0xa0 [ 347.396397][ T8766] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 347.402278][ T8766] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 347.408288][ T8766] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 347.413970][ T8766] ? security_sctp_bind_connect+0x89/0xb0 [ 347.419738][ T8766] sctp_sendmsg+0x1575/0x28c0 [ 347.424459][ T8766] ? sctp_getsockopt+0xb60/0xb60 [ 347.429431][ T8766] ? aa_sk_perm+0x83c/0x970 [ 347.433986][ T8766] ? aa_af_perm+0x330/0x330 [ 347.438540][ T8766] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 347.445121][ T8766] ? sock_rps_record_flow+0x19/0x3f0 [ 347.450462][ T8766] ? inet_sendmsg+0x7c/0x2f0 [ 347.455096][ T8766] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 347.460460][ T8766] ? security_socket_sendmsg+0x80/0xa0 [ 347.465951][ T8766] ? inet_send_prepare+0x260/0x260 [ 347.471101][ T8766] ____sys_sendmsg+0x5ba/0x960 [ 347.475899][ T8766] ? __lock_acquire+0x7d40/0x7d40 [ 347.481060][ T8766] ? __asan_memset+0x22/0x40 [ 347.485691][ T8766] ? __sys_sendmsg_sock+0x30/0x30 [ 347.490757][ T8766] ? __import_iovec+0x5f2/0x850 [ 347.495667][ T8766] ? import_iovec+0x73/0xa0 [ 347.500387][ T8766] ___sys_sendmsg+0x2a6/0x360 [ 347.505098][ T8766] ? get_pid_task+0x20/0x1e0 [ 347.509829][ T8766] ? __sys_sendmsg+0x2a0/0x2a0 [ 347.514641][ T8766] ? __lock_acquire+0x7d40/0x7d40 [ 347.519782][ T8766] __se_sys_sendmsg+0x1c2/0x2b0 [ 347.524813][ T8766] ? __x64_sys_sendmsg+0x80/0x80 [ 347.529912][ T8766] ? lockdep_hardirqs_on+0x98/0x150 [ 347.535173][ T8766] do_syscall_64+0x55/0xa0 [ 347.539643][ T8766] ? clear_bhb_loop+0x40/0x90 [ 347.544355][ T8766] ? clear_bhb_loop+0x40/0x90 [ 347.549073][ T8766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.554999][ T8766] RIP: 0033:0x7f78e779c629 [ 347.559446][ T8766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.579090][ T8766] RSP: 002b:00007f78e8575028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.587535][ T8766] RAX: ffffffffffffffda RBX: 00007f78e7a16180 RCX: 00007f78e779c629 [ 347.595537][ T8766] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 347.603620][ T8766] RBP: 00007f78e8575090 R08: 0000000000000000 R09: 0000000000000000 [ 347.611639][ T8766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.619639][ T8766] R13: 00007f78e7a16218 R14: 00007f78e7a16180 R15: 00007ffd97264788 [ 347.627660][ T8766] [ 347.637508][ T8765] CPU: 0 PID: 8765 Comm: syz.3.868 Not tainted syzkaller #0 [ 347.644910][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.655109][ T8765] Call Trace: [ 347.658465][ T8765] [ 347.661462][ T8765] dump_stack_lvl+0x18c/0x250 [ 347.666230][ T8765] ? show_regs_print_info+0x20/0x20 [ 347.671513][ T8765] ? load_image+0x400/0x400 [ 347.676107][ T8765] ? __might_fault+0xaa/0x120 [ 347.681113][ T8765] ? __lock_acquire+0x7d40/0x7d40 [ 347.686643][ T8765] should_fail_ex+0x39d/0x4d0 [ 347.691398][ T8765] _copy_from_user+0x2f/0xe0 [ 347.696144][ T8765] bpf_prog_test_run_skb+0x266/0x12b0 [ 347.701674][ T8765] ? __fget_files+0x28/0x4b0 [ 347.706348][ T8765] ? __fget_files+0x28/0x4b0 [ 347.710997][ T8765] ? __fget_files+0x43d/0x4b0 [ 347.715720][ T8765] ? cpu_online+0x60/0x60 [ 347.720253][ T8765] bpf_prog_test_run+0x321/0x390 [ 347.725232][ T8765] __sys_bpf+0x49d/0x890 [ 347.729512][ T8765] ? bpf_link_show_fdinfo+0x390/0x390 [ 347.734939][ T8765] ? lock_chain_count+0x20/0x20 [ 347.739829][ T8765] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 347.745853][ T8765] __x64_sys_bpf+0x7c/0x90 [ 347.750306][ T8765] do_syscall_64+0x55/0xa0 [ 347.754856][ T8765] ? clear_bhb_loop+0x40/0x90 [ 347.759591][ T8765] ? clear_bhb_loop+0x40/0x90 [ 347.764322][ T8765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.770267][ T8765] RIP: 0033:0x7f89ab99c629 [ 347.774814][ T8765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.794484][ T8765] RSP: 002b:00007f89ac94c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.803104][ T8765] RAX: ffffffffffffffda RBX: 00007f89abc15fa0 RCX: 00007f89ab99c629 [ 347.811122][ T8765] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 347.819137][ T8765] RBP: 00007f89ac94c090 R08: 0000000000000000 R09: 0000000000000000 [ 347.827146][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.835145][ T8765] R13: 00007f89abc16038 R14: 00007f89abc15fa0 R15: 00007ffc0d3786f8 [ 347.843178][ T8765] [ 348.017497][ T8771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.253812][ T8776] FAULT_INJECTION: forcing a failure. [ 348.253812][ T8776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.298637][ T8776] CPU: 1 PID: 8776 Comm: syz.2.872 Not tainted syzkaller #0 [ 348.306035][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.316148][ T8776] Call Trace: [ 348.319478][ T8776] [ 348.322474][ T8776] dump_stack_lvl+0x18c/0x250 [ 348.327398][ T8776] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.333602][ T8776] ? show_regs_print_info+0x20/0x20 [ 348.338853][ T8776] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.345055][ T8776] ? dump_stack+0x9/0x20 [ 348.349351][ T8776] should_fail_ex+0x39d/0x4d0 [ 348.354080][ T8776] _copy_from_user+0x2f/0xe0 [ 348.358714][ T8776] bpf_prog_test_run_skb+0x266/0x12b0 [ 348.364166][ T8776] ? lockdep_hardirqs_on+0x98/0x150 [ 348.369679][ T8776] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.375874][ T8776] ? cpu_online+0x60/0x60 [ 348.380341][ T8776] bpf_prog_test_run+0x321/0x390 [ 348.385324][ T8776] __sys_bpf+0x49d/0x890 [ 348.389704][ T8776] ? bpf_link_show_fdinfo+0x390/0x390 [ 348.395177][ T8776] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.401376][ T8776] __x64_sys_bpf+0x7c/0x90 [ 348.405826][ T8776] do_syscall_64+0x55/0xa0 [ 348.410291][ T8776] ? clear_bhb_loop+0x40/0x90 [ 348.415034][ T8776] ? clear_bhb_loop+0x40/0x90 [ 348.419751][ T8776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.425684][ T8776] RIP: 0033:0x7fc096b9c629 [ 348.430157][ T8776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.449902][ T8776] RSP: 002b:00007fc097ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.458441][ T8776] RAX: ffffffffffffffda RBX: 00007fc096e15fa0 RCX: 00007fc096b9c629 [ 348.466456][ T8776] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 348.474455][ T8776] RBP: 00007fc097ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 348.482455][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.490539][ T8776] R13: 00007fc096e16038 R14: 00007fc096e15fa0 R15: 00007ffebb790988 [ 348.498675][ T8776] [ 348.501986][ T59] wlan1: Trigger new scan to find an IBSS to join [ 348.891792][ T8786] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 348.915565][ T8783] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.875'. [ 348.964465][ T8783] netlink: 'syz.2.875': attribute type 12 has an invalid length. [ 348.989806][ T8783] netlink: 132 bytes leftover after parsing attributes in process `syz.2.875'. [ 349.172254][ T8791] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 349.214886][ T8791] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.877'. [ 349.245547][ T8788] netlink: 'syz.3.876': attribute type 3 has an invalid length. [ 349.269413][ T8788] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.876'. [ 349.457325][ T8795] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.879'. [ 349.494191][ T8788] netlink: 'syz.3.876': attribute type 12 has an invalid length. [ 349.509770][ T8788] netlink: 132 bytes leftover after parsing attributes in process `syz.3.876'. [ 349.530740][ T2908] wlan1: Creating new IBSS network, BSSID be:19:5d:8a:88:87 [ 349.760344][ T8803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.400015][ T8821] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 350.439057][ T8821] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.889'. [ 351.277913][ T8822] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.324270][ T8824] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.888'. [ 351.344740][ T8825] netlink: 'syz.3.888': attribute type 12 has an invalid length. [ 351.360718][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 351.383170][ T8825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.888'. [ 351.418799][ T8828] netlink: 'syz.1.890': attribute type 3 has an invalid length. [ 351.458646][ T8828] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.890'. [ 351.484374][ T8829] netlink: 'syz.1.890': attribute type 12 has an invalid length. [ 351.809403][ T8840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.285700][ T8847] netlink: 'syz.1.897': attribute type 3 has an invalid length. [ 352.496675][ T8850] FAULT_INJECTION: forcing a failure. [ 352.496675][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 352.519010][ T8850] CPU: 1 PID: 8850 Comm: syz.0.898 Not tainted syzkaller #0 [ 352.526409][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.536839][ T8850] Call Trace: [ 352.540191][ T8850] [ 352.543182][ T8850] dump_stack_lvl+0x18c/0x250 [ 352.547955][ T8850] ? show_regs_print_info+0x20/0x20 [ 352.553242][ T8850] ? load_image+0x400/0x400 [ 352.557904][ T8850] ? __might_sleep+0xe0/0xe0 [ 352.562567][ T8850] ? __lock_acquire+0x7d40/0x7d40 [ 352.567689][ T8850] should_fail_ex+0x39d/0x4d0 [ 352.572546][ T8850] should_failslab+0x9/0x20 [ 352.577117][ T8850] slab_pre_alloc_hook+0x59/0x310 [ 352.582221][ T8850] ? __get_vm_area_node+0x125/0x370 [ 352.587501][ T8850] __kmem_cache_alloc_node+0x53/0x250 [ 352.592981][ T8850] ? __get_vm_area_node+0x125/0x370 [ 352.598424][ T8850] kmalloc_node_trace+0x26/0xe0 [ 352.603361][ T8850] __get_vm_area_node+0x125/0x370 [ 352.608584][ T8850] __vmalloc_node_range+0x36e/0x1330 [ 352.613946][ T8850] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 352.620262][ T8850] ? perf_trace_preemptirq_template+0xac/0x330 [ 352.626598][ T8850] ? lock_chain_count+0x20/0x20 [ 352.631624][ T8850] ? free_vm_area+0x50/0x50 [ 352.636378][ T8850] ? lockdep_hardirqs_on+0x98/0x150 [ 352.641774][ T8850] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 352.647652][ T8850] __vmalloc+0x7a/0x90 [ 352.651949][ T8850] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 352.657578][ T8850] bpf_prog_alloc_no_stats+0x47/0x440 [ 352.663014][ T8850] ? bpf_prog_alloc+0x2b/0x1a0 [ 352.667837][ T8850] bpf_prog_alloc+0x3d/0x1a0 [ 352.672495][ T8850] bpf_prog_load+0x6eb/0x1670 [ 352.677257][ T8850] ? map_freeze+0x420/0x420 [ 352.681833][ T8850] ? __might_fault+0xaa/0x120 [ 352.686577][ T8850] ? __lock_acquire+0x7d40/0x7d40 [ 352.691851][ T8850] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 352.698167][ T8850] ? ktime_get_real_ts64+0x440/0x440 [ 352.703540][ T8850] ? __might_fault+0xaa/0x120 [ 352.708277][ T8850] ? __might_fault+0xc6/0x120 [ 352.713003][ T8850] ? __might_fault+0xaa/0x120 [ 352.717745][ T8850] ? bpf_lsm_bpf+0x9/0x10 [ 352.722139][ T8850] ? security_bpf+0x7e/0xa0 [ 352.726717][ T8850] __sys_bpf+0x5ba/0x890 [ 352.731022][ T8850] ? bpf_link_show_fdinfo+0x390/0x390 [ 352.736628][ T8850] ? lock_chain_count+0x20/0x20 [ 352.741541][ T8850] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 352.748038][ T8850] __x64_sys_bpf+0x7c/0x90 [ 352.752523][ T8850] do_syscall_64+0x55/0xa0 [ 352.757000][ T8850] ? clear_bhb_loop+0x40/0x90 [ 352.761817][ T8850] ? clear_bhb_loop+0x40/0x90 [ 352.766562][ T8850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.772625][ T8850] RIP: 0033:0x7f8f8659c629 [ 352.777102][ T8850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.797212][ T8850] RSP: 002b:00007f8f87523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.805782][ T8850] RAX: ffffffffffffffda RBX: 00007f8f86815fa0 RCX: 00007f8f8659c629 [ 352.813820][ T8850] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 0000000000000005 [ 352.821847][ T8850] RBP: 00007f8f87523090 R08: 0000000000000000 R09: 0000000000000000 [ 352.829894][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.838016][ T8850] R13: 00007f8f86816038 R14: 00007f8f86815fa0 R15: 00007fffce172e98 [ 352.846237][ T8850] [ 352.895004][ T8850] syz.0.898: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 352.912831][ T8850] CPU: 0 PID: 8850 Comm: syz.0.898 Not tainted syzkaller #0 [ 352.920307][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.930511][ T8850] Call Trace: [ 352.933932][ T8850] [ 352.936912][ T8850] dump_stack_lvl+0x18c/0x250 [ 352.941665][ T8850] ? show_regs_print_info+0x20/0x20 [ 352.947029][ T8850] ? load_image+0x400/0x400 [ 352.951620][ T8850] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 352.958115][ T8850] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 352.964693][ T8850] warn_alloc+0x246/0x340 [ 352.969189][ T8850] ? __get_vm_area_node+0x125/0x370 [ 352.974465][ T8850] ? zone_watermark_ok_safe+0x230/0x230 [ 352.980099][ T8850] ? rcu_is_watching+0x15/0xb0 [ 352.985041][ T8850] ? __get_vm_area_node+0x356/0x370 [ 352.990408][ T8850] __vmalloc_node_range+0x393/0x1330 [ 352.995789][ T8850] ? perf_trace_preemptirq_template+0xac/0x330 [ 353.002229][ T8850] ? lock_chain_count+0x20/0x20 [ 353.007199][ T8850] ? free_vm_area+0x50/0x50 [ 353.011799][ T8850] ? lockdep_hardirqs_on+0x98/0x150 [ 353.017069][ T8850] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 353.022850][ T8850] __vmalloc+0x7a/0x90 [ 353.027023][ T8850] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 353.032784][ T8850] bpf_prog_alloc_no_stats+0x47/0x440 [ 353.038355][ T8850] ? bpf_prog_alloc+0x2b/0x1a0 [ 353.043220][ T8850] bpf_prog_alloc+0x3d/0x1a0 [ 353.047892][ T8850] bpf_prog_load+0x6eb/0x1670 [ 353.052669][ T8850] ? map_freeze+0x420/0x420 [ 353.057251][ T8850] ? __might_fault+0xaa/0x120 [ 353.062008][ T8850] ? __lock_acquire+0x7d40/0x7d40 [ 353.067123][ T8850] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 353.073542][ T8850] ? ktime_get_real_ts64+0x440/0x440 [ 353.078977][ T8850] ? __might_fault+0xaa/0x120 [ 353.083739][ T8850] ? __might_fault+0xc6/0x120 [ 353.088480][ T8850] ? __might_fault+0xaa/0x120 [ 353.093263][ T8850] ? bpf_lsm_bpf+0x9/0x10 [ 353.097680][ T8850] ? security_bpf+0x7e/0xa0 [ 353.102263][ T8850] __sys_bpf+0x5ba/0x890 [ 353.106613][ T8850] ? bpf_link_show_fdinfo+0x390/0x390 [ 353.112054][ T8850] ? lock_chain_count+0x20/0x20 [ 353.116967][ T8850] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 353.123027][ T8850] __x64_sys_bpf+0x7c/0x90 [ 353.127502][ T8850] do_syscall_64+0x55/0xa0 [ 353.131981][ T8850] ? clear_bhb_loop+0x40/0x90 [ 353.137062][ T8850] ? clear_bhb_loop+0x40/0x90 [ 353.141976][ T8850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.148118][ T8850] RIP: 0033:0x7f8f8659c629 [ 353.152602][ T8850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.172273][ T8850] RSP: 002b:00007f8f87523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.180752][ T8850] RAX: ffffffffffffffda RBX: 00007f8f86815fa0 RCX: 00007f8f8659c629 [ 353.188783][ T8850] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 0000000000000005 [ 353.196806][ T8850] RBP: 00007f8f87523090 R08: 0000000000000000 R09: 0000000000000000 [ 353.204835][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.212866][ T8850] R13: 00007f8f86816038 R14: 00007f8f86815fa0 R15: 00007fffce172e98 [ 353.221000][ T8850] [ 353.240940][ T8850] Mem-Info: [ 353.244496][ T8850] active_anon:5036 inactive_anon:0 isolated_anon:0 [ 353.244496][ T8850] active_file:14535 inactive_file:40028 isolated_file:0 [ 353.244496][ T8850] unevictable:768 dirty:294 writeback:0 [ 353.244496][ T8850] slab_reclaimable:9799 slab_unreclaimable:90742 [ 353.244496][ T8850] mapped:24730 shmem:1361 pagetables:521 [ 353.244496][ T8850] sec_pagetables:0 bounce:0 [ 353.244496][ T8850] kernel_misc_reclaimable:0 [ 353.244496][ T8850] free:1349773 free_pcp:14521 free_cma:0 [ 353.312175][ T8850] Node 0 active_anon:20244kB inactive_anon:0kB active_file:58140kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99020kB dirty:1172kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10576kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 353.316946][ T8856] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 353.353447][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 353.380519][ T8850] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 353.412966][ T8850] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.444865][ T8850] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 353.451418][ T8850] Node 0 DMA32 free:1489200kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20220kB inactive_anon:0kB active_file:58140kB inactive_file:159088kB unevictable:1536kB writepending:1172kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:36320kB local_pcp:15344kB free_cma:0kB [ 353.558235][ T8850] lowmem_reserve[]: 0 0 0 0 0 [ 353.569021][ T8850] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 353.667575][ T8850] lowmem_reserve[]: 0 0 0 0 0 [ 353.682625][ T8850] Node 1 Normal free:3894276kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20832kB local_pcp:8800kB free_cma:0kB [ 353.760571][ T8850] lowmem_reserve[]: 0 0 0 0 0 [ 353.796118][ T8850] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 353.816524][ T8850] Node 0 DMA32: 338*4kB (ME) 801*8kB (UME) 684*16kB (UME) 1038*32kB (UM) 294*64kB (UME) 186*128kB (UME) 76*256kB (UM) 24*512kB (UME) 7*1024kB (UME) 4*2048kB (ME) 329*4096kB (M) = 1489232kB [ 353.852969][ T8862] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.889781][ T8850] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 353.910019][ T8850] Node 1 Normal: 235*4kB (UME) 65*8kB (UME) 47*16kB (UME) 111*32kB (UME) 36*64kB (UE) 7*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3894276kB [ 353.937219][ T8850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.979497][ T8850] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.989302][ T8862] __nla_validate_parse: 3 callbacks suppressed [ 353.989351][ T8862] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.902'. [ 354.016546][ T8850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.035995][ T8850] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.051297][ T8850] 55926 total pagecache pages [ 354.057480][ T8850] 0 pages in swap cache [ 354.062620][ T8850] Free swap = 124996kB [ 354.067080][ T8850] Total swap = 124996kB [ 354.082002][ T8850] 2097051 pages RAM [ 354.090046][ T8866] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 354.099200][ T8850] 0 pages HighMem/MovableOnly [ 354.099216][ T8850] 416922 pages reserved [ 354.099225][ T8850] 0 pages cma reserved [ 354.224340][ T8866] netlink: 'syz.2.903': attribute type 3 has an invalid length. [ 354.237438][ T8866] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.903'. [ 354.262376][ T8862] netlink: 'syz.3.902': attribute type 12 has an invalid length. [ 354.286148][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.902'. [ 354.332521][ T8867] netlink: 'syz.2.903': attribute type 12 has an invalid length. [ 354.372019][ T8867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.903'. [ 354.741756][ T8872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.006773][ T8885] netlink: 'syz.1.910': attribute type 1 has an invalid length. [ 355.017309][ T8885] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.910'. [ 356.284369][ T8902] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.352944][ T8902] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.914'. [ 356.389900][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 356.506156][ T8902] netlink: 'syz.3.914': attribute type 12 has an invalid length. [ 356.579291][ T8902] netlink: 132 bytes leftover after parsing attributes in process `syz.3.914'. [ 358.314536][ T59] wlan1: Trigger new scan to find an IBSS to join [ 358.443208][ T8905] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.487183][ T8911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.533546][ T8905] netlink: 'syz.1.915': attribute type 3 has an invalid length. [ 358.605917][ T8905] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.915'. [ 358.687239][ T8913] netlink: 'syz.1.915': attribute type 12 has an invalid length. [ 358.727997][ T8913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.915'. [ 360.323622][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 361.377709][ T3472] wlan1: Creating new IBSS network, BSSID 22:b1:e6:ce:da:62 [ 361.690718][ T8923] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 361.722955][ T8923] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.922'. [ 361.783744][ T8925] netlink: 156 bytes leftover after parsing attributes in process `syz.2.923'. [ 362.389488][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 365.370135][ T8937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.455728][ T8940] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.519735][ T8940] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.926'. [ 365.599132][ T8940] netlink: 'syz.3.926': attribute type 12 has an invalid length. [ 365.622101][ T8940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.926'. [ 365.764410][ T8950] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.801245][ T8950] netlink: 'syz.2.930': attribute type 3 has an invalid length. [ 365.860171][ T8950] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.930'. [ 365.949784][ T8950] netlink: 'syz.2.930': attribute type 12 has an invalid length. [ 365.969231][ T8950] netlink: 132 bytes leftover after parsing attributes in process `syz.2.930'. [ 366.252589][ T8960] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 366.271458][ T8960] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.935'. [ 366.352761][ T8963] FAULT_INJECTION: forcing a failure. [ 366.352761][ T8963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.368194][ T8963] CPU: 1 PID: 8963 Comm: syz.0.936 Not tainted syzkaller #0 [ 366.375583][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.385884][ T8963] Call Trace: [ 366.389245][ T8963] [ 366.392347][ T8963] dump_stack_lvl+0x18c/0x250 [ 366.397640][ T8963] ? show_regs_print_info+0x20/0x20 [ 366.403008][ T8963] ? load_image+0x400/0x400 [ 366.407572][ T8963] ? __might_fault+0xaa/0x120 [ 366.412564][ T8963] ? __lock_acquire+0x7d40/0x7d40 [ 366.417662][ T8963] ? unix_ioctl+0x261/0x670 [ 366.422242][ T8963] should_fail_ex+0x39d/0x4d0 [ 366.427083][ T8963] _copy_from_user+0x2f/0xe0 [ 366.431730][ T8963] sock_do_ioctl+0x190/0x310 [ 366.436400][ T8963] ? sock_show_fdinfo+0xb0/0xb0 [ 366.441350][ T8963] sock_ioctl+0x5ba/0x7e0 [ 366.445772][ T8963] ? sock_poll+0x3e0/0x3e0 [ 366.450271][ T8963] ? bpf_lsm_file_ioctl+0x9/0x10 [ 366.455285][ T8963] ? security_file_ioctl+0x80/0xa0 [ 366.460811][ T8963] ? sock_poll+0x3e0/0x3e0 [ 366.465285][ T8963] __se_sys_ioctl+0xfd/0x170 [ 366.469953][ T8963] do_syscall_64+0x55/0xa0 [ 366.474544][ T8963] ? clear_bhb_loop+0x40/0x90 [ 366.479459][ T8963] ? clear_bhb_loop+0x40/0x90 [ 366.484401][ T8963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.490378][ T8963] RIP: 0033:0x7f8f8659c629 [ 366.495014][ T8963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.514950][ T8963] RSP: 002b:00007f8f87523028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.523615][ T8963] RAX: ffffffffffffffda RBX: 00007f8f86815fa0 RCX: 00007f8f8659c629 [ 366.531734][ T8963] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 366.539772][ T8963] RBP: 00007f8f87523090 R08: 0000000000000000 R09: 0000000000000000 [ 366.547806][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.555836][ T8963] R13: 00007f8f86816038 R14: 00007f8f86815fa0 R15: 00007fffce172e98 [ 366.563936][ T8963] [ 367.349981][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 368.309535][ T2946] wlan1: Trigger new scan to find an IBSS to join [ 369.213580][ T13] wlan1: Creating new IBSS network, BSSID b2:c7:f1:a6:f0:d0 [ 369.253896][ T8974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.476389][ T8979] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.508234][ T8979] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.941'. [ 369.611747][ T8979] netlink: 'syz.3.941': attribute type 12 has an invalid length. [ 369.690171][ T8979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.941'. [ 369.815965][ T8985] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.856102][ T8985] netlink: 'syz.1.944': attribute type 3 has an invalid length. [ 369.865258][ T8985] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.944'. [ 369.958352][ T8985] netlink: 'syz.1.944': attribute type 12 has an invalid length. [ 369.975765][ T8985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.944'. [ 370.161333][ T8992] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 370.197124][ T8992] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.946'. [ 370.203988][ T8996] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 370.260867][ T8996] netlink: 'syz.0.947': attribute type 3 has an invalid length. [ 370.318598][ T8996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.947'. [ 370.660476][ T9010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.309357][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 373.349513][ T13] wlan1: Trigger new scan to find an IBSS to join [ 373.735096][ T9016] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 373.744869][ T9024] FAULT_INJECTION: forcing a failure. [ 373.744869][ T9024] name failslab, interval 1, probability 0, space 0, times 0 [ 373.744981][ T9024] CPU: 0 PID: 9024 Comm: syz.2.957 Not tainted syzkaller #0 [ 373.745030][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.745064][ T9024] Call Trace: [ 373.745094][ T9024] [ 373.745134][ T9024] dump_stack_lvl+0x18c/0x250 [ 373.745257][ T9024] ? show_regs_print_info+0x20/0x20 [ 373.745339][ T9024] ? load_image+0x400/0x400 [ 373.745472][ T9024] ? __lock_acquire+0x7d40/0x7d40 [ 373.745638][ T9024] should_fail_ex+0x39d/0x4d0 [ 373.745785][ T9024] should_failslab+0x9/0x20 [ 373.745836][ T9024] slab_pre_alloc_hook+0x59/0x310 [ 373.745888][ T9024] ? lock_chain_count+0x20/0x20 [ 373.746017][ T9024] kmem_cache_alloc_node+0x60/0x320 [ 373.746080][ T9024] ? __alloc_skb+0x103/0x2c0 [ 373.746226][ T9024] __alloc_skb+0x103/0x2c0 [ 373.746365][ T9024] sock_wmalloc+0xaa/0x120 [ 373.746486][ T9024] l2tp_ip_sendmsg+0x1c7/0x14f0 [ 373.746571][ T9024] ? sock_rps_record_flow+0x19/0x3f0 [ 373.746678][ T9024] ? inet_sendmsg+0x7c/0x2f0 [ 373.746723][ T9024] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 373.746787][ T9024] ? security_socket_sendmsg+0x80/0xa0 [ 373.746831][ T9024] ? inet_send_prepare+0x260/0x260 [ 373.746928][ T9024] ____sys_sendmsg+0x5ba/0x960 [ 373.788204][ T9021] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.954'. [ 373.788668][ T9024] ? __lock_acquire+0x7d40/0x7d40 [ 373.896716][ T9024] ? __asan_memset+0x22/0x40 [ 373.901618][ T9024] ? __sys_sendmsg_sock+0x30/0x30 [ 373.906911][ T9024] ? __import_iovec+0x5f2/0x850 [ 373.912391][ T9024] ? import_iovec+0x73/0xa0 [ 373.917117][ T9024] ___sys_sendmsg+0x2a6/0x360 [ 373.921999][ T9024] ? __sys_sendmsg+0x2a0/0x2a0 [ 373.927123][ T9024] ? __lock_acquire+0x7d40/0x7d40 [ 373.932735][ T9024] __se_sys_sendmsg+0x1c2/0x2b0 [ 373.937892][ T9024] ? __x64_sys_sendmsg+0x80/0x80 [ 373.944038][ T9024] ? lockdep_hardirqs_on+0x98/0x150 [ 373.949538][ T9024] do_syscall_64+0x55/0xa0 [ 373.954735][ T9024] ? clear_bhb_loop+0x40/0x90 [ 373.959585][ T9024] ? clear_bhb_loop+0x40/0x90 [ 373.964583][ T9024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.970651][ T9024] RIP: 0033:0x7fc096b9c629 [ 373.975217][ T9024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.995248][ T9024] RSP: 002b:00007fc097ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.004047][ T9024] RAX: ffffffffffffffda RBX: 00007fc096e15fa0 RCX: 00007fc096b9c629 [ 374.012205][ T9024] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 374.020331][ T9024] RBP: 00007fc097ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 374.028616][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.036825][ T9024] R13: 00007fc096e16038 R14: 00007fc096e15fa0 R15: 00007ffebb790988 [ 374.045097][ T9024] [ 374.056931][ T9016] netlink: 'syz.0.954': attribute type 12 has an invalid length. [ 374.079386][ T9016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.954'. [ 374.146457][ T9020] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 374.221226][ T9018] tun0: tun_chr_ioctl cmd 1074025677 [ 374.250787][ T9018] tun0: linktype set to 776 [ 374.257276][ T9027] netlink: 'syz.3.956': attribute type 3 has an invalid length. [ 374.271227][ T9027] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.956'. [ 374.307723][ T9028] netlink: 'syz.3.956': attribute type 12 has an invalid length. [ 374.327037][ T9028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.956'. [ 374.550722][ T9034] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 374.576630][ T9034] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.960'. [ 374.628224][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.961'. [ 374.678699][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.961'. [ 374.706145][ T9039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.961'. [ 374.742602][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.961'. [ 374.930527][ T9044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.322494][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 377.359467][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 377.721111][ T9050] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 377.744479][ T9051] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.966'. [ 377.794426][ T9053] netlink: 'syz.1.966': attribute type 12 has an invalid length. [ 377.806538][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.966'. [ 378.058472][ T9060] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 378.097722][ T9060] netlink: 'syz.0.969': attribute type 3 has an invalid length. [ 378.110838][ T9060] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.969'. [ 378.138535][ T9062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.970'. [ 378.199048][ T9060] netlink: 'syz.0.969': attribute type 12 has an invalid length. [ 378.215279][ T9060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.969'. [ 378.283952][ T9068] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 378.649535][ T9079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.940302][ T9085] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 379.083445][ T9085] netlink: 'syz.3.979': attribute type 12 has an invalid length. [ 380.309369][ T11] wlan1: Trigger new scan to find an IBSS to join [ 381.349642][ T11] wlan1: Trigger new scan to find an IBSS to join [ 381.776679][ T9094] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.792314][ T9096] netlink: 'syz.1.982': attribute type 3 has an invalid length. [ 381.800195][ T9096] __nla_validate_parse: 6 callbacks suppressed [ 381.800211][ T9096] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.982'. [ 381.817486][ T9099] netlink: 'syz.1.982': attribute type 12 has an invalid length. [ 381.830393][ T9099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.982'. [ 382.030163][ T9105] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 382.107885][ T9109] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 382.116303][ T9109] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.985'. [ 382.382243][ T9111] netlink: 'syz.2.986': attribute type 1 has an invalid length. [ 382.424582][ T9111] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.986'. [ 382.500819][ T9116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.598011][ T9119] netlink: 156 bytes leftover after parsing attributes in process `syz.3.989'. [ 382.809980][ T9123] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.833443][ T9126] netlink: 'syz.0.990': attribute type 10 has an invalid length. [ 382.853931][ T9123] netlink: 'syz.1.992': attribute type 3 has an invalid length. [ 382.868392][ T9123] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.992'. [ 382.911520][ T9125] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.942109][ T9123] netlink: 'syz.1.992': attribute type 12 has an invalid length. [ 382.980068][ T9123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.992'. [ 383.018285][ T9125] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.991'. [ 383.091881][ T9125] netlink: 'syz.3.991': attribute type 12 has an invalid length. [ 383.106725][ T9125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.991'. [ 384.311603][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 385.359217][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 385.844059][ T11] wlan1: Creating new IBSS network, BSSID da:96:97:54:da:fa [ 386.097777][ T9150] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 386.159101][ T9150] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.999'. [ 386.193917][ T9151] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 386.375246][ T9156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.409210][ T9151] netlink: 'syz.1.1000': attribute type 12 has an invalid length. [ 386.663441][ T9161] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 386.695574][ T9163] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 386.809758][ T9161] netlink: 'syz.0.1003': attribute type 12 has an invalid length. [ 386.829207][ T9161] __nla_validate_parse: 4 callbacks suppressed [ 386.829230][ T9161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1003'. [ 386.980294][ T9165] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 386.996145][ T9169] netlink: 'syz.1.1004': attribute type 3 has an invalid length. [ 387.051021][ T9169] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1004'. [ 387.089975][ T9170] netlink: 'syz.1.1004': attribute type 12 has an invalid length. [ 387.139763][ T9170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1004'. [ 387.199597][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.206267][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.615379][ T9187] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1010'. [ 389.349291][ T13] wlan1: Trigger new scan to find an IBSS to join [ 389.357091][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 390.756699][ T9197] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 390.843910][ T9197] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1014'. [ 390.956456][ T9197] validate_nla: 1 callbacks suppressed [ 390.956700][ T9197] netlink: 'syz.3.1014': attribute type 12 has an invalid length. [ 391.003415][ T9197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1014'. [ 391.187264][ T9207] netlink: 'syz.1.1016': attribute type 3 has an invalid length. [ 391.233614][ T9207] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1016'. [ 391.301840][ T9207] netlink: 'syz.1.1016': attribute type 12 has an invalid length. [ 391.343257][ T9207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1016'. [ 391.881127][ T9210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.972390][ T9212] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 392.023906][ T9212] netlink: 'syz.0.1018': attribute type 3 has an invalid length. [ 392.049354][ T9212] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1018'. [ 392.076648][ T9214] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 392.139127][ T9212] netlink: 'syz.0.1018': attribute type 12 has an invalid length. [ 392.199722][ T9212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1018'. [ 392.240328][ T9214] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1028'. [ 392.294807][ T9219] netlink: 'syz.1.1028': attribute type 12 has an invalid length. [ 392.333770][ T9219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1028'. [ 392.437130][ T9222] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 392.464476][ T9222] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1021'. [ 392.658398][ T9228] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 392.669232][ T9228] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1023'. [ 393.359783][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 394.055392][ T9245] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 394.119041][ T9243] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 394.152954][ T9246] netlink: 'syz.1.1029': attribute type 3 has an invalid length. [ 394.179170][ T9246] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1029'. [ 394.211088][ T9248] netlink: 'syz.0.1027': attribute type 12 has an invalid length. [ 394.219771][ T9248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1027'. [ 394.231119][ T9249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1029'. [ 394.259224][ T9251] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1030'. [ 394.503764][ T9254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.592362][ T9256] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 395.342782][ T9272] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 396.314778][ T2946] wlan1: Trigger new scan to find an IBSS to join [ 397.357604][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 397.357625][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 398.440478][ T9287] validate_nla: 8 callbacks suppressed [ 398.440500][ T9287] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 398.459818][ T9281] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 398.518389][ T9287] __nla_validate_parse: 7 callbacks suppressed [ 398.518410][ T9287] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1044'. [ 398.541066][ T9284] netlink: 'syz.1.1043': attribute type 3 has an invalid length. [ 398.589200][ T9284] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1043'. [ 398.625232][ T9285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.662259][ T9289] netlink: 'syz.1.1043': attribute type 12 has an invalid length. [ 398.697207][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1043'. [ 399.061382][ T9297] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.097884][ T9295] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.115881][ T9297] netlink: 'syz.1.1047': attribute type 3 has an invalid length. [ 399.142085][ T9297] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1047'. [ 399.155122][ T9295] netlink: 'syz.2.1046': attribute type 3 has an invalid length. [ 399.210598][ T9295] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1046'. [ 399.275350][ T9297] netlink: 'syz.1.1047': attribute type 12 has an invalid length. [ 399.307214][ T9297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1047'. [ 399.348334][ T9301] netlink: 'syz.2.1046': attribute type 12 has an invalid length. [ 399.369153][ T9301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1046'. [ 399.756779][ T9308] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.802703][ T9308] netlink: 'syz.1.1058': attribute type 3 has an invalid length. [ 399.812529][ T9308] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1058'. [ 399.843586][ T9310] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.876343][ T9308] netlink: 'syz.1.1058': attribute type 12 has an invalid length. [ 399.886630][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1058'. [ 399.968256][ T9310] netlink: 'syz.2.1051': attribute type 3 has an invalid length. [ 399.979673][ T9310] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1051'. [ 400.409445][ T59] wlan1: Trigger new scan to find an IBSS to join [ 400.643745][ T9317] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 400.675016][ T9319] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 401.080575][ T9330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.401721][ T59] wlan1: Trigger new scan to find an IBSS to join [ 403.352114][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 403.896104][ T9333] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 403.901673][ T2946] wlan1: Creating new IBSS network, BSSID aa:9d:6d:44:73:6f [ 403.968524][ T9338] validate_nla: 4 callbacks suppressed [ 403.968548][ T9338] netlink: 'syz.0.1056': attribute type 12 has an invalid length. [ 403.999171][ T9338] __nla_validate_parse: 4 callbacks suppressed [ 403.999196][ T9338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1056'. [ 404.294431][ T9342] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 404.433256][ T9342] netlink: 'syz.1.1068': attribute type 12 has an invalid length. [ 404.517849][ T9342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1068'. [ 404.733544][ T9348] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 404.777771][ T9349] netlink: 'syz.0.1060': attribute type 3 has an invalid length. [ 404.839902][ T9349] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1060'. [ 404.926541][ T9348] netlink: 'syz.0.1060': attribute type 12 has an invalid length. [ 405.036779][ T9348] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1060'. [ 405.436942][ T9356] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 405.448259][ T9356] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1065'. [ 405.501177][ T9360] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 405.513266][ T9360] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1066'. [ 405.896453][ T9362] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 405.946529][ T9362] netlink: 'syz.1.1067': attribute type 3 has an invalid length. [ 405.960916][ T9362] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1067'. [ 405.992485][ T9365] netlink: 'syz.1.1067': attribute type 12 has an invalid length. [ 406.018791][ T9365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1067'. [ 407.361173][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 408.310668][ T59] wlan1: Trigger new scan to find an IBSS to join [ 409.278754][ T9383] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 409.298641][ T9384] netlink: 'syz.3.1072': attribute type 12 has an invalid length. [ 409.314040][ T9384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1072'. [ 409.623669][ T9391] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 409.661954][ T9391] netlink: 'syz.3.1077': attribute type 3 has an invalid length. [ 409.676498][ T9391] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1077'. [ 409.731737][ T9391] netlink: 'syz.3.1077': attribute type 12 has an invalid length. [ 409.743190][ T9391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1077'. [ 410.026165][ T9400] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 410.065835][ T9400] netlink: 'syz.0.1079': attribute type 3 has an invalid length. [ 410.089308][ T9400] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1079'. [ 410.253327][ T9402] netlink: 'syz.0.1079': attribute type 12 has an invalid length. [ 410.293128][ T9405] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 410.302026][ T9405] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1080'. [ 410.315951][ T9402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1079'. [ 410.430730][ T9407] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 410.539884][ T9407] netlink: 'syz.1.1082': attribute type 3 has an invalid length. [ 410.669333][ T9407] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1082'. [ 410.749664][ T9408] netlink: 'syz.1.1082': attribute type 12 has an invalid length. [ 410.897859][ T9408] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1082'. [ 411.411264][ T9418] netlink: 'syz.2.1085': attribute type 3 has an invalid length. [ 411.503655][ T9418] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1085'. [ 411.536136][ T9423] netlink: 'syz.2.1085': attribute type 12 has an invalid length. [ 411.627113][ T9423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1085'. [ 411.714060][ T9424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.390225][ T2946] wlan1: Trigger new scan to find an IBSS to join [ 412.397006][ T3452] wlan1: Trigger new scan to find an IBSS to join [ 414.440648][ T9433] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 414.522431][ T9433] netlink: 'syz.2.1090': attribute type 3 has an invalid length. [ 414.600025][ T9433] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1090'. [ 415.031961][ T9449] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 415.070442][ T9449] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1095'. [ 415.270643][ T9451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.332059][ T9453] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 415.400964][ T9453] netlink: 'syz.1.1105': attribute type 3 has an invalid length. [ 415.412444][ T9453] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1105'. [ 415.456244][ T9455] netlink: 'syz.3.1096': attribute type 3 has an invalid length. [ 415.468846][ T9455] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1096'. [ 415.479274][ T9453] netlink: 'syz.1.1105': attribute type 12 has an invalid length. [ 415.487478][ T9453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1105'. [ 415.571637][ T9455] netlink: 'syz.3.1096': attribute type 12 has an invalid length. [ 415.629485][ T9455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1096'. [ 416.389234][ T3452] wlan1: Trigger new scan to find an IBSS to join [ 417.349164][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 418.349141][ T3452] wlan1: Creating new IBSS network, BSSID f6:e6:b2:bd:c0:d0 [ 418.389722][ T59] wlan1: Trigger new scan to find an IBSS to join [ 418.715075][ T9471] netlink: 'syz.2.1109': attribute type 3 has an invalid length. [ 418.716900][ T9470] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 418.744218][ T9471] netlink: 'syz.2.1109': attribute type 5 has an invalid length. [ 418.785558][ T9470] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1102'. [ 418.933054][ T9470] netlink: 'syz.0.1102': attribute type 12 has an invalid length. [ 418.971471][ T9470] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1102'. [ 419.106585][ T9476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.178607][ T9477] netlink: 'syz.3.1103': attribute type 3 has an invalid length. [ 419.209106][ T9477] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1103'. [ 419.394498][ T9477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1103'. [ 419.651290][ T9487] validate_nla: 1 callbacks suppressed [ 419.651311][ T9487] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 419.682622][ T9485] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 419.712552][ T9487] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1107'. [ 419.723771][ T9490] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1106'. [ 420.042056][ T9485] netlink: 'syz.0.1106': attribute type 12 has an invalid length. [ 420.137214][ T9495] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 420.146123][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1106'. [ 420.277770][ T9495] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1108'. [ 420.287995][ T9495] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1108'. [ 420.397439][ T2908] wlan1: Trigger new scan to find an IBSS to join [ 420.507724][ T9502] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 420.519044][ T9502] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1111'. [ 421.376866][ T9506] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 421.448583][ T9508] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1115'. [ 421.478980][ T9509] netlink: 'syz.3.1115': attribute type 12 has an invalid length. [ 421.487653][ T9509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1115'. [ 421.787343][ T9514] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 421.861184][ T9518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.877500][ T9514] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1116'. [ 421.890353][ T9516] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 422.008773][ T9514] netlink: 'syz.1.1116': attribute type 12 has an invalid length. [ 422.024818][ T9514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1116'. [ 422.190685][ T9522] netlink: 'syz.2.1117': attribute type 12 has an invalid length. [ 422.309631][ T13] wlan1: Trigger new scan to find an IBSS to join [ 424.309952][ T59] wlan1: Trigger new scan to find an IBSS to join [ 424.316967][ T3452] wlan1: Trigger new scan to find an IBSS to join [ 424.936179][ T9527] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.980228][ T9527] netlink: 'syz.1.1128': attribute type 3 has an invalid length. [ 425.003475][ T9527] __nla_validate_parse: 2 callbacks suppressed [ 425.003494][ T9527] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1128'. [ 425.019821][ T9529] netlink: 'syz.0.1119': attribute type 3 has an invalid length. [ 425.028250][ T9529] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1119'. [ 425.049285][ T9527] netlink: 'syz.1.1128': attribute type 12 has an invalid length. [ 425.075672][ T9527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1128'. [ 425.188429][ T9531] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 425.220943][ T9529] netlink: 'syz.0.1119': attribute type 12 has an invalid length. [ 425.261696][ T9529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1119'. [ 425.323505][ T9534] netlink: 'syz.3.1120': attribute type 3 has an invalid length. [ 425.349847][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 425.364159][ T9531] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1121'. [ 425.399301][ T9534] netlink: 'syz.3.1120': attribute type 5 has an invalid length. [ 425.520735][ T9531] netlink: 'syz.2.1121': attribute type 12 has an invalid length. [ 425.576512][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1121'. [ 425.711592][ T9538] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 425.743359][ T9538] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1122'. [ 426.659384][ T9558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.990408][ T9560] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 427.006147][ T9565] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1127'. [ 427.029323][ T9567] netlink: 'syz.1.1127': attribute type 12 has an invalid length. [ 427.037671][ T9567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1127'. [ 427.349321][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 429.359701][ T2946] wlan1: Trigger new scan to find an IBSS to join [ 429.903591][ T9573] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 429.937723][ T9573] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1133'. [ 429.956703][ T9571] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.032191][ T9571] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1131'. [ 430.127252][ T9575] netlink: 'syz.3.1131': attribute type 12 has an invalid length. [ 430.184790][ T9575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1131'. [ 430.213665][ T9577] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.231614][ T9580] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 430.240253][ T9580] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1136'. [ 430.597316][ T9583] netlink: 'syz.0.1135': attribute type 3 has an invalid length. [ 430.662786][ T9583] netlink: 'syz.0.1135': attribute type 5 has an invalid length. [ 430.811687][ T9591] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 430.828297][ T9591] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1139'. [ 431.067437][ T9595] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 431.155308][ T9597] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 431.180731][ T9595] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1140'. [ 431.246268][ T9599] netlink: 'syz.2.1140': attribute type 12 has an invalid length. [ 431.268762][ T9599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1140'. [ 431.322601][ T9601] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 431.326427][ T9598] netlink: 'syz.3.1141': attribute type 3 has an invalid length. [ 431.352999][ T9598] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1141'. [ 431.364844][ T9597] netlink: 'syz.3.1141': attribute type 12 has an invalid length. [ 431.392670][ T9601] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1143'. [ 431.402898][ T9597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1141'. [ 432.102416][ T9608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.287883][ T9614] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 432.391337][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 432.701886][ T9625] netlink: 'syz.3.1150': attribute type 1 has an invalid length. [ 432.710475][ T9625] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1150'. [ 433.401823][ T59] wlan1: Trigger new scan to find an IBSS to join [ 434.310152][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 435.097170][ T2977] wlan1: Creating new IBSS network, BSSID 22:3c:72:ad:4d:78 [ 435.141393][ T9614] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1147'. [ 435.167990][ T9615] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.193228][ T9617] netlink: 'syz.2.1147': attribute type 12 has an invalid length. [ 435.206048][ T9617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1147'. [ 435.237836][ T9621] netlink: 'syz.1.1148': attribute type 12 has an invalid length. [ 435.267158][ T9621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1148'. [ 435.693122][ T9639] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.738222][ T9637] netlink: 'syz.1.1154': attribute type 3 has an invalid length. [ 435.787200][ T9637] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1154'. [ 435.855241][ T9641] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.906802][ T9639] netlink: 'syz.1.1154': attribute type 12 has an invalid length. [ 436.003462][ T9639] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1154'. [ 436.020098][ T9641] netlink: 'syz.0.1163': attribute type 12 has an invalid length. [ 436.064791][ T9641] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1163'. [ 436.243873][ T9649] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 436.264907][ T9649] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1157'. [ 436.539864][ T9656] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 436.662017][ T9656] netlink: 'syz.0.1160': attribute type 12 has an invalid length. [ 436.692942][ T9656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1160'. [ 437.352283][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 438.389499][ T2946] wlan1: Trigger new scan to find an IBSS to join [ 439.349532][ T11] wlan1: Trigger new scan to find an IBSS to join [ 439.431026][ T3472] wlan1: Creating new IBSS network, BSSID 86:93:9c:d0:d5:25 [ 439.665608][ T9670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.712291][ T9673] FAULT_INJECTION: forcing a failure. [ 439.712291][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 439.725792][ T9673] CPU: 1 PID: 9673 Comm: syz.1.1167 Not tainted syzkaller #0 [ 439.733285][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.743446][ T9673] Call Trace: [ 439.746813][ T9673] [ 439.749825][ T9673] dump_stack_lvl+0x18c/0x250 [ 439.754629][ T9673] ? show_regs_print_info+0x20/0x20 [ 439.759943][ T9673] ? load_image+0x400/0x400 [ 439.764562][ T9673] ? __lock_acquire+0x7d40/0x7d40 [ 439.769725][ T9673] should_fail_ex+0x39d/0x4d0 [ 439.774541][ T9673] should_failslab+0x9/0x20 [ 439.779153][ T9673] slab_pre_alloc_hook+0x59/0x310 [ 439.784298][ T9673] ? lock_chain_count+0x20/0x20 [ 439.789273][ T9673] kmem_cache_alloc_node+0x60/0x320 [ 439.794541][ T9673] ? __alloc_skb+0x103/0x2c0 [ 439.799239][ T9673] __alloc_skb+0x103/0x2c0 [ 439.803851][ T9673] sock_wmalloc+0xaa/0x120 [ 439.808380][ T9673] l2tp_ip_sendmsg+0x1c7/0x14f0 [ 439.813319][ T9673] ? sock_rps_record_flow+0x19/0x3f0 [ 439.818705][ T9673] ? inet_sendmsg+0x7c/0x2f0 [ 439.823413][ T9673] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 439.828861][ T9673] ? security_socket_sendmsg+0x80/0xa0 [ 439.834422][ T9673] ? inet_send_prepare+0x260/0x260 [ 439.839625][ T9673] ____sys_sendmsg+0x5ba/0x960 [ 439.844583][ T9673] ? __lock_acquire+0x7d40/0x7d40 [ 439.849775][ T9673] ? __asan_memset+0x22/0x40 [ 439.854522][ T9673] ? __sys_sendmsg_sock+0x30/0x30 [ 439.859610][ T9673] ? __import_iovec+0x3fa/0x850 [ 439.864615][ T9673] ? import_iovec+0x73/0xa0 [ 439.869251][ T9673] ___sys_sendmsg+0x2a6/0x360 [ 439.874005][ T9673] ? get_pid_task+0x20/0x1e0 [ 439.878690][ T9673] ? __sys_sendmsg+0x2a0/0x2a0 [ 439.883603][ T9673] ? __lock_acquire+0x7d40/0x7d40 [ 439.888771][ T9673] __se_sys_sendmsg+0x1c2/0x2b0 [ 439.893711][ T9673] ? __x64_sys_sendmsg+0x80/0x80 [ 439.898779][ T9673] ? lockdep_hardirqs_on+0x98/0x150 [ 439.904054][ T9673] do_syscall_64+0x55/0xa0 [ 439.908556][ T9673] ? clear_bhb_loop+0x40/0x90 [ 439.913292][ T9673] ? clear_bhb_loop+0x40/0x90 [ 439.918037][ T9673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.924028][ T9673] RIP: 0033:0x7f78e779c629 [ 439.928510][ T9673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.948208][ T9673] RSP: 002b:00007f78e85b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.956694][ T9673] RAX: ffffffffffffffda RBX: 00007f78e7a15fa0 RCX: 00007f78e779c629 [ 439.964723][ T9673] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 439.972759][ T9673] RBP: 00007f78e85b7090 R08: 0000000000000000 R09: 0000000000000000 [ 439.980799][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.988823][ T9673] R13: 00007f78e7a16038 R14: 00007f78e7a15fa0 R15: 00007ffd97264788 [ 439.996908][ T9673] [ 440.373946][ T9682] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 440.427870][ T9682] netlink: 'syz.0.1168': attribute type 3 has an invalid length. [ 440.442840][ T9682] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1168'. [ 440.567313][ T9682] netlink: 'syz.0.1168': attribute type 12 has an invalid length. [ 440.622262][ T9682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1168'. [ 440.763421][ T9691] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 440.788943][ T9691] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1173'. [ 441.086065][ T9698] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 441.219503][ T9698] netlink: 'syz.3.1175': attribute type 12 has an invalid length. [ 441.230766][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1175'. [ 441.272007][ T9705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.350671][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 443.357262][ T2946] wlan1: Trigger new scan to find an IBSS to join [ 444.393148][ T9714] delete_channel: no stack [ 444.397933][ T9714] delete_channel: no stack [ 444.526288][ T9724] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1184'. [ 444.580076][ T9724] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.1184'. [ 444.623951][ T9725] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1184'. [ 444.659436][ T9725] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.1184'. [ 444.933565][ T9729] syzkaller0: entered promiscuous mode [ 444.943207][ T9729] syzkaller0: entered allmulticast mode [ 445.126274][ T9740] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 445.223235][ T9745] netlink: 'syz.2.1190': attribute type 1 has an invalid length. [ 445.239300][ T9745] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1190'. [ 447.354189][ T11] wlan1: Trigger new scan to find an IBSS to join [ 447.459485][ T9740] netlink: 'syz.3.1188': attribute type 12 has an invalid length. [ 447.467566][ T9740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1188'. [ 447.501260][ T9750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.773955][ T9755] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 447.842724][ T9764] netlink: 'syz.3.1197': attribute type 10 has an invalid length. [ 447.882855][ T9764] veth1_macvtap: left promiscuous mode [ 448.026411][ T9755] netlink: 'syz.1.1192': attribute type 12 has an invalid length. [ 448.052822][ T9755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1192'. [ 448.403482][ T13] wlan1: Trigger new scan to find an IBSS to join [ 448.552342][ T9778] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 448.635054][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.643469][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.717231][ T9784] netlink: 'syz.1.1200': attribute type 12 has an invalid length. [ 448.739099][ T9784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1200'. [ 448.926820][ T9794] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 448.935390][ T9794] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1202'. [ 448.953981][ T9785] syzkaller0: entered promiscuous mode [ 448.966005][ T9785] syzkaller0: entered allmulticast mode [ 448.976669][ T9792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.334354][ T13] wlan1: Creating new IBSS network, BSSID 7e:65:b8:86:f5:e4 [ 449.343062][ T9799] netlink: 'syz.0.1205': attribute type 29 has an invalid length. [ 450.389632][ T2952] wlan1: Trigger new scan to find an IBSS to join [ 451.349236][ T2952] wlan1: Trigger new scan to find an IBSS to join [ 451.477145][ T9799] netlink: 'syz.0.1205': attribute type 29 has an invalid length. [ 451.495686][ T9811] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 451.505862][ T9812] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1208'. [ 451.559057][ T9813] netlink: 'syz.2.1208': attribute type 12 has an invalid length. [ 451.566982][ T9813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1208'. [ 451.785233][ T9829] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 451.813293][ T9830] netlink: 'syz.1.1211': attribute type 29 has an invalid length. [ 451.827202][ T9829] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1212'. [ 452.092578][ T9833] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1214'. [ 452.363526][ T9841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.572982][ T9851] FAULT_INJECTION: forcing a failure. [ 452.572982][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 452.586960][ T9851] CPU: 0 PID: 9851 Comm: syz.3.1219 Not tainted syzkaller #0 [ 452.594418][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.604766][ T9851] Call Trace: [ 452.608096][ T9851] [ 452.611145][ T9851] dump_stack_lvl+0x18c/0x250 [ 452.615902][ T9851] ? show_regs_print_info+0x20/0x20 [ 452.621141][ T9851] ? load_image+0x400/0x400 [ 452.625729][ T9851] ? __might_sleep+0xe0/0xe0 [ 452.630537][ T9851] ? __lock_acquire+0x7d40/0x7d40 [ 452.635599][ T9851] should_fail_ex+0x39d/0x4d0 [ 452.640352][ T9851] should_failslab+0x9/0x20 [ 452.644896][ T9851] slab_pre_alloc_hook+0x59/0x310 [ 452.649973][ T9851] ? alloc_perf_context+0x4e/0x220 [ 452.655120][ T9851] __kmem_cache_alloc_node+0x53/0x250 [ 452.660533][ T9851] ? alloc_perf_context+0x4e/0x220 [ 452.665687][ T9851] kmalloc_trace+0x2a/0xe0 [ 452.670205][ T9851] alloc_perf_context+0x4e/0x220 [ 452.675268][ T9851] find_get_context+0x83/0x4f0 [ 452.680100][ T9851] __se_sys_perf_event_open+0xaa7/0x1c50 [ 452.685802][ T9851] ? __wait_for_common+0x6a1/0x6f0 [ 452.690964][ T9851] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 452.696647][ T9851] ? lock_chain_count+0x20/0x20 [ 452.701549][ T9851] ? lockdep_hardirqs_on+0x98/0x150 [ 452.706772][ T9851] ? __x64_sys_perf_event_open+0x20/0xc0 [ 452.712449][ T9851] do_syscall_64+0x55/0xa0 [ 452.716908][ T9851] ? clear_bhb_loop+0x40/0x90 [ 452.721619][ T9851] ? clear_bhb_loop+0x40/0x90 [ 452.726336][ T9851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.732261][ T9851] RIP: 0033:0x7f89ab99c629 [ 452.736709][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.756437][ T9851] RSP: 002b:00007f89ac94c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 452.764886][ T9851] RAX: ffffffffffffffda RBX: 00007f89abc15fa0 RCX: 00007f89ab99c629 [ 452.773135][ T9851] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000640 [ 452.782291][ T9851] RBP: 00007f89ac94c090 R08: 0000000000000002 R09: 0000000000000000 [ 452.790354][ T9851] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 452.798393][ T9851] R13: 00007f89abc16038 R14: 00007f89abc15fa0 R15: 00007ffc0d3786f8 [ 452.806439][ T9851] [ 452.815863][ T9846] syzkaller0: entered promiscuous mode [ 452.830434][ T9846] syzkaller0: entered allmulticast mode [ 452.843177][ T9849] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 453.352834][ T11] wlan1: Creating new IBSS network, BSSID ba:ab:8f:3b:a0:23 [ 454.309141][ T2952] wlan1: Trigger new scan to find an IBSS to join [ 455.130061][ T9857] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 455.153995][ T9862] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1220'. [ 455.164893][ T9861] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.1230'. [ 455.176056][ T9865] netlink: 'syz.1.1220': attribute type 12 has an invalid length. [ 455.189315][ T9865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1220'. [ 455.348571][ T9872] FAULT_INJECTION: forcing a failure. [ 455.348571][ T9872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.369361][ T2946] wlan1: Trigger new scan to find an IBSS to join [ 455.389135][ T9872] CPU: 1 PID: 9872 Comm: syz.2.1223 Not tainted syzkaller #0 [ 455.396605][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.406910][ T9872] Call Trace: [ 455.410243][ T9872] [ 455.413224][ T9872] dump_stack_lvl+0x18c/0x250 [ 455.418014][ T9872] ? show_regs_print_info+0x20/0x20 [ 455.423383][ T9872] ? load_image+0x400/0x400 [ 455.427952][ T9872] ? __might_fault+0xaa/0x120 [ 455.432692][ T9872] ? __lock_acquire+0x7d40/0x7d40 [ 455.437798][ T9872] should_fail_ex+0x39d/0x4d0 [ 455.442549][ T9872] _copy_from_iter+0x1d9/0x12e0 [ 455.447467][ T9872] ? slab_post_alloc_hook+0x8a/0x4b0 [ 455.452810][ T9872] ? __virt_addr_valid+0x18c/0x540 [ 455.457980][ T9872] ? __lock_acquire+0x7d40/0x7d40 [ 455.463064][ T9872] ? rcu_is_watching+0x15/0xb0 [ 455.467879][ T9872] ? copyout_mc+0x70/0x70 [ 455.472255][ T9872] ? __virt_addr_valid+0x18c/0x540 [ 455.477543][ T9872] ? __virt_addr_valid+0x18c/0x540 [ 455.482745][ T9872] ? __virt_addr_valid+0x469/0x540 [ 455.487919][ T9872] ? __check_object_size+0x506/0xa20 [ 455.493288][ T9872] netlink_sendmsg+0x76b/0xbf0 [ 455.498239][ T9872] ? netlink_getsockopt+0x590/0x590 [ 455.503600][ T9872] ? aa_sock_msg_perm+0x94/0x150 [ 455.508592][ T9872] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 455.513920][ T9872] ? security_socket_sendmsg+0x80/0xa0 [ 455.519423][ T9872] ? netlink_getsockopt+0x590/0x590 [ 455.524799][ T9872] ____sys_sendmsg+0x5ba/0x960 [ 455.529618][ T9872] ? __asan_memset+0x22/0x40 [ 455.534259][ T9872] ? __sys_sendmsg_sock+0x30/0x30 [ 455.539325][ T9872] ? __import_iovec+0x5f2/0x850 [ 455.544236][ T9872] ? import_iovec+0x73/0xa0 [ 455.548782][ T9872] ___sys_sendmsg+0x2a6/0x360 [ 455.553514][ T9872] ? get_pid_task+0x20/0x1e0 [ 455.558176][ T9872] ? __sys_sendmsg+0x2a0/0x2a0 [ 455.563021][ T9872] ? __lock_acquire+0x7d40/0x7d40 [ 455.568111][ T9872] __se_sys_sendmsg+0x1c2/0x2b0 [ 455.573005][ T9872] ? __x64_sys_sendmsg+0x80/0x80 [ 455.577988][ T9872] ? lockdep_hardirqs_on+0x98/0x150 [ 455.583217][ T9872] do_syscall_64+0x55/0xa0 [ 455.587669][ T9872] ? clear_bhb_loop+0x40/0x90 [ 455.592475][ T9872] ? clear_bhb_loop+0x40/0x90 [ 455.597365][ T9872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.603291][ T9872] RIP: 0033:0x7fc096b9c629 [ 455.607762][ T9872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.627420][ T9872] RSP: 002b:00007fc097ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.635965][ T9872] RAX: ffffffffffffffda RBX: 00007fc096e15fa0 RCX: 00007fc096b9c629 [ 455.643980][ T9872] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 455.652160][ T9872] RBP: 00007fc097ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.660247][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.668246][ T9872] R13: 00007fc096e16038 R14: 00007fc096e15fa0 R15: 00007ffebb790988 [ 455.676635][ T9872] [ 456.100722][ T9888] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 456.168104][ T9888] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1229'. [ 456.203292][ T9890] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 456.683580][ T9890] veth1_macvtap: left promiscuous mode [ 456.897013][ T9895] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1234'. [ 456.926072][ T9897] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 456.965741][ T9897] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1233'. [ 457.186538][ T9900] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1235'. [ 457.293716][ T9900] netlink: 'syz.2.1235': attribute type 12 has an invalid length. [ 457.323290][ T9900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1235'. [ 457.359113][ T11] wlan1: Trigger new scan to find an IBSS to join [ 457.809737][ T5785] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 457.809874][ T5785] Bluetooth: hci1: Malformed LE Event: 0x02 [ 457.977402][ T9918] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.1241'. [ 459.351282][ T13] wlan1: Trigger new scan to find an IBSS to join [ 460.340168][ T11] wlan1: Creating new IBSS network, BSSID be:5f:49:e7:9b:71 [ 460.838126][ T9923] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1244'. [ 460.880899][ T9923] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1244'. [ 460.981032][ T9936] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 461.032198][ T9936] veth1_macvtap: left promiscuous mode [ 461.345388][ T9942] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 461.673471][ T9942] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1249'. [ 461.729041][ T9945] netlink: 'syz.0.1249': attribute type 12 has an invalid length. [ 461.737041][ T9945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1249'. [ 461.751656][ T9946] netlink: 'syz.1.1250': attribute type 3 has an invalid length. [ 461.789807][ T9946] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1250'. [ 461.861555][ T9946] netlink: 'syz.1.1250': attribute type 12 has an invalid length. [ 461.870672][ T9946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1250'. [ 462.145383][ T9958] FAULT_INJECTION: forcing a failure. [ 462.145383][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 462.191689][ T9958] CPU: 1 PID: 9958 Comm: syz.1.1253 Not tainted syzkaller #0 [ 462.199349][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.209821][ T9958] Call Trace: [ 462.213162][ T9958] [ 462.216254][ T9958] dump_stack_lvl+0x18c/0x250 [ 462.221007][ T9958] ? show_regs_print_info+0x20/0x20 [ 462.226273][ T9958] ? load_image+0x400/0x400 [ 462.230932][ T9958] ? __might_sleep+0xe0/0xe0 [ 462.235674][ T9958] ? __lock_acquire+0x7d40/0x7d40 [ 462.240774][ T9958] should_fail_ex+0x39d/0x4d0 [ 462.245527][ T9958] should_failslab+0x9/0x20 [ 462.250105][ T9958] slab_pre_alloc_hook+0x59/0x310 [ 462.255190][ T9958] ? __lock_acquire+0x7d40/0x7d40 [ 462.260282][ T9958] ? kvmalloc_node+0x70/0x180 [ 462.265036][ T9958] ? kvmalloc_node+0x70/0x180 [ 462.269873][ T9958] __kmem_cache_alloc_node+0x53/0x250 [ 462.275328][ T9958] ? __schedule_delayed_monitor_work+0x200/0x200 [ 462.281747][ T9958] ? kvmalloc_node+0x70/0x180 [ 462.286501][ T9958] __kmalloc_node+0xa4/0x230 [ 462.291260][ T9958] kvmalloc_node+0x70/0x180 [ 462.295829][ T9958] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 462.301298][ T9958] ? 0xffffffffa0004740 [ 462.305633][ T9958] ? 0xffffffffa0004740 [ 462.309854][ T9958] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 462.315900][ T9958] ? 0xffffffffa0004740 [ 462.320126][ T9958] ? xdp_convert_md_to_buff+0x330/0x330 [ 462.325781][ T9958] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 462.332116][ T9958] ? _copy_from_user+0xa5/0xe0 [ 462.336962][ T9958] ? bpf_test_init+0x119/0x140 [ 462.341795][ T9958] ? xdp_convert_md_to_buff+0x5b/0x330 [ 462.347328][ T9958] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 462.352789][ T9958] ? dev_put+0x80/0x80 [ 462.356943][ T9958] ? dev_put+0x80/0x80 [ 462.361273][ T9958] bpf_prog_test_run+0x321/0x390 [ 462.366278][ T9958] __sys_bpf+0x49d/0x890 [ 462.370582][ T9958] ? bpf_link_show_fdinfo+0x390/0x390 [ 462.376030][ T9958] ? lock_chain_count+0x20/0x20 [ 462.380948][ T9958] __x64_sys_bpf+0x7c/0x90 [ 462.385512][ T9958] do_syscall_64+0x55/0xa0 [ 462.389983][ T9958] ? clear_bhb_loop+0x40/0x90 [ 462.394710][ T9958] ? clear_bhb_loop+0x40/0x90 [ 462.399441][ T9958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.405409][ T9958] RIP: 0033:0x7f78e779c629 [ 462.409885][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.429553][ T9958] RSP: 002b:00007f78e85b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.438047][ T9958] RAX: ffffffffffffffda RBX: 00007f78e7a15fa0 RCX: 00007f78e779c629 [ 462.446107][ T9958] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 462.454136][ T9958] RBP: 00007f78e85b7090 R08: 0000000000000000 R09: 0000000000000000 [ 462.462150][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.470161][ T9958] R13: 00007f78e7a16038 R14: 00007f78e7a15fa0 R15: 00007ffd97264788 [ 462.478208][ T9958] [ 462.519121][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 462.861316][ T9957] syzkaller0: entered promiscuous mode [ 462.877506][ T9957] syzkaller0: entered allmulticast mode [ 463.185259][ T9967] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 463.349841][ T11] wlan1: Trigger new scan to find an IBSS to join [ 463.386471][ T9973] FAULT_INJECTION: forcing a failure. [ 463.386471][ T9973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.430661][ T9973] CPU: 1 PID: 9973 Comm: syz.0.1259 Not tainted syzkaller #0 [ 463.438524][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.448648][ T9973] Call Trace: [ 463.451979][ T9973] [ 463.454959][ T9973] dump_stack_lvl+0x18c/0x250 [ 463.459716][ T9973] ? show_regs_print_info+0x20/0x20 [ 463.465024][ T9973] ? load_image+0x400/0x400 [ 463.469696][ T9973] ? __lock_acquire+0x7d40/0x7d40 [ 463.475229][ T9973] ? snprintf+0xe9/0x140 [ 463.479544][ T9973] should_fail_ex+0x39d/0x4d0 [ 463.484403][ T9973] _copy_to_user+0x2f/0xa0 [ 463.489170][ T9973] simple_read_from_buffer+0xe7/0x150 [ 463.494661][ T9973] proc_fail_nth_read+0x1e8/0x260 [ 463.499872][ T9973] ? proc_fault_inject_write+0x360/0x360 [ 463.505599][ T9973] ? fsnotify_perm+0x271/0x5e0 [ 463.510435][ T9973] ? proc_fault_inject_write+0x360/0x360 [ 463.516245][ T9973] vfs_read+0x28b/0x970 [ 463.520494][ T9973] ? kernel_read+0x1e0/0x1e0 [ 463.525162][ T9973] ? __fget_files+0x28/0x4b0 [ 463.529839][ T9973] ? __fget_files+0x28/0x4b0 [ 463.534501][ T9973] ? __fget_files+0x43d/0x4b0 [ 463.539267][ T9973] ? __fdget_pos+0x2a3/0x330 [ 463.543980][ T9973] ? ksys_read+0x75/0x260 [ 463.548419][ T9973] ksys_read+0x150/0x260 [ 463.552868][ T9973] ? vfs_write+0x990/0x990 [ 463.557388][ T9973] ? lockdep_hardirqs_on+0x98/0x150 [ 463.562654][ T9973] do_syscall_64+0x55/0xa0 [ 463.567184][ T9973] ? clear_bhb_loop+0x40/0x90 [ 463.571926][ T9973] ? clear_bhb_loop+0x40/0x90 [ 463.576658][ T9973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.582703][ T9973] RIP: 0033:0x7f8f8655cece [ 463.587178][ T9973] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.606934][ T9973] RSP: 002b:00007f8f87522fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.615451][ T9973] RAX: ffffffffffffffda RBX: 00007f8f875236c0 RCX: 00007f8f8655cece [ 463.623504][ T9973] RDX: 000000000000000f RSI: 00007f8f875230a0 RDI: 0000000000000004 [ 463.631539][ T9973] RBP: 00007f8f87523090 R08: 0000000000000000 R09: 0000000000000000 [ 463.639737][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.647761][ T9973] R13: 00007f8f86816038 R14: 00007f8f86815fa0 R15: 00007fffce172e98 [ 463.655886][ T9973] [ 463.766528][ T2952] wlan1: Creating new IBSS network, BSSID 02:4b:0d:c8:f7:d0 [ 465.360332][ T11] wlan1: Trigger new scan to find an IBSS to join [ 467.362332][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 468.098806][ T9997] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 468.106895][ T9997] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1264'. [ 469.782637][ T9982] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 469.794117][ T9983] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1260'. [ 469.804437][ T9984] netlink: 'syz.0.1260': attribute type 12 has an invalid length. [ 469.812997][ T9984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1260'. [ 469.826854][ T9975] batman_adv: The newly added mac address (00:72:1a:bc:2e:b3) already exists on: batadv_slave_0 [ 469.848637][ T9975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.075535][T10006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.309274][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 471.494889][T10027] FAULT_INJECTION: forcing a failure. [ 471.494889][T10027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.509271][T10027] CPU: 0 PID: 10027 Comm: syz.0.1275 Not tainted syzkaller #0 [ 471.516826][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.527043][T10027] Call Trace: [ 471.530416][T10027] [ 471.533493][T10027] dump_stack_lvl+0x18c/0x250 [ 471.538258][T10027] ? show_regs_print_info+0x20/0x20 [ 471.543786][T10027] ? load_image+0x400/0x400 [ 471.548417][T10027] ? __might_fault+0xaa/0x120 [ 471.553203][T10027] should_fail_ex+0x39d/0x4d0 [ 471.557986][T10027] copyin+0x1a/0x90 [ 471.561883][T10027] _copy_from_iter+0x404/0x12e0 [ 471.566812][T10027] ? slab_post_alloc_hook+0x8a/0x4b0 [ 471.572183][T10027] ? __virt_addr_valid+0x18c/0x540 [ 471.577402][T10027] ? __lock_acquire+0x7d40/0x7d40 [ 471.582693][T10027] ? copyout_mc+0x70/0x70 [ 471.587257][T10027] ? __virt_addr_valid+0x18c/0x540 [ 471.592476][T10027] ? __virt_addr_valid+0x18c/0x540 [ 471.597662][T10027] ? __virt_addr_valid+0x469/0x540 [ 471.602868][T10027] ? __check_object_size+0x506/0xa20 [ 471.608235][T10027] netlink_sendmsg+0x76b/0xbf0 [ 471.613067][T10027] ? perf_trace_lock+0x304/0x3b0 [ 471.618079][T10027] ? netlink_getsockopt+0x590/0x590 [ 471.623355][T10027] ? aa_sock_msg_perm+0x94/0x150 [ 471.628357][T10027] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 471.633786][T10027] ? security_socket_sendmsg+0x80/0xa0 [ 471.639317][T10027] ? netlink_getsockopt+0x590/0x590 [ 471.644582][T10027] ____sys_sendmsg+0x5ba/0x960 [ 471.649434][T10027] ? __asan_memset+0x22/0x40 [ 471.654116][T10027] ? __sys_sendmsg_sock+0x30/0x30 [ 471.659187][T10027] ? __import_iovec+0x3fa/0x850 [ 471.664121][T10027] ? import_iovec+0x73/0xa0 [ 471.668693][T10027] ___sys_sendmsg+0x2a6/0x360 [ 471.673434][T10027] ? __sys_sendmsg+0x2a0/0x2a0 [ 471.678356][T10027] ? trace_call_bpf+0xc3/0x6c0 [ 471.683272][T10027] __se_sys_sendmsg+0x1c2/0x2b0 [ 471.688184][T10027] ? __x64_sys_sendmsg+0x80/0x80 [ 471.693255][T10027] ? lockdep_hardirqs_on+0x98/0x150 [ 471.698569][T10027] do_syscall_64+0x55/0xa0 [ 471.703051][T10027] ? clear_bhb_loop+0x40/0x90 [ 471.707781][T10027] ? clear_bhb_loop+0x40/0x90 [ 471.712526][T10027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.718578][T10027] RIP: 0033:0x7f8f8659c629 [ 471.723053][T10027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.742719][T10027] RSP: 002b:00007f8f87523028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.751183][T10027] RAX: ffffffffffffffda RBX: 00007f8f86815fa0 RCX: 00007f8f8659c629 [ 471.759197][T10027] RDX: 0000000004000010 RSI: 00002000000005c0 RDI: 0000000000000004 [ 471.767307][T10027] RBP: 00007f8f87523090 R08: 0000000000000000 R09: 0000000000000000 [ 471.775328][T10027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.783345][T10027] R13: 00007f8f86816038 R14: 00007f8f86815fa0 R15: 00007fffce172e98 [ 471.791482][T10027] [ 472.310524][ T13] wlan1: Trigger new scan to find an IBSS to join [ 473.073866][ T2946] wlan1: Creating new IBSS network, BSSID 6a:1b:7d:ad:26:94 [ 473.450640][T10030] syzkaller0: entered promiscuous mode [ 473.503779][T10030] syzkaller0: entered allmulticast mode [ 473.560693][T10037] netlink: 'syz.3.1279': attribute type 12 has an invalid length. [ 473.589561][T10037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1279'. [ 475.350478][ T3472] wlan1: Trigger new scan to find an IBSS to join [ 477.055433][ T3472] wlan1: Creating new IBSS network, BSSID e2:32:df:8f:25:e5 [ 478.683291][T10032] batman_adv: The newly added mac address (00:72:1a:bc:2e:b3) already exists on: batadv_slave_0 [ 478.694089][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.705286][T10032] batman_adv: The newly added mac address (00:72:1a:bc:2e:b3) already exists on: batadv_slave_0 [ 478.716286][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.731531][T10042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.986566][T10069] netlink: 'syz.0.1285': attribute type 39 has an invalid length. [ 481.089015][T10068] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.106026][T10070] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1289'. [ 481.117751][T10072] netlink: 'syz.3.1289': attribute type 12 has an invalid length. [ 481.137768][T10072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1289'. [ 481.273817][T10077] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.331490][T10075] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.393220][T10077] netlink: 'syz.2.1291': attribute type 12 has an invalid length. [ 481.412695][T10077] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1291'. [ 481.446869][T10075] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1290'. [ 481.706431][T10084] syzkaller0: entered promiscuous mode [ 481.717975][T10084] syzkaller0: entered allmulticast mode [ 483.349280][ T13] wlan1: Trigger new scan to find an IBSS to join [ 483.356011][ T13] wlan1: Trigger new scan to find an IBSS to join [ 486.325655][T10090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.400607][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 486.470686][T10097] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.544320][T10097] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1298'. [ 486.583523][T10104] netlink: 'syz.3.1298': attribute type 12 has an invalid length. [ 486.620273][T10104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1298'. [ 486.672610][T10102] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.716242][T10107] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1300'. [ 486.911169][T10102] netlink: 'syz.2.1300': attribute type 12 has an invalid length. [ 486.991227][T10102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1300'. [ 487.053451][T10110] netlink: 'syz.1.1302': attribute type 12 has an invalid length. [ 487.063338][T10110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1302'. [ 487.186486][T10115] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 487.222070][T10115] netlink: 'syz.0.1312': attribute type 12 has an invalid length. [ 487.232747][T10115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1312'. [ 487.349510][T10121] netlink: 'syz.0.1306': attribute type 12 has an invalid length. [ 487.361821][T10121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1306'. [ 487.466425][T10123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.564872][T10125] FAULT_INJECTION: forcing a failure. [ 487.564872][T10125] name failslab, interval 1, probability 0, space 0, times 0 [ 487.578424][T10125] CPU: 0 PID: 10125 Comm: syz.2.1308 Not tainted syzkaller #0 [ 487.585957][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.596239][T10125] Call Trace: [ 487.599561][T10125] [ 487.602538][T10125] dump_stack_lvl+0x18c/0x250 [ 487.607290][T10125] ? show_regs_print_info+0x20/0x20 [ 487.612560][T10125] ? load_image+0x400/0x400 [ 487.617136][T10125] ? __might_sleep+0xe0/0xe0 [ 487.621804][T10125] ? __lock_acquire+0x7d40/0x7d40 [ 487.626894][T10125] should_fail_ex+0x39d/0x4d0 [ 487.631648][T10125] should_failslab+0x9/0x20 [ 487.636214][T10125] slab_pre_alloc_hook+0x59/0x310 [ 487.641302][T10125] ? __lock_acquire+0x7d40/0x7d40 [ 487.646383][T10125] ? kvmalloc_node+0x70/0x180 [ 487.651121][T10125] ? kvmalloc_node+0x70/0x180 [ 487.655855][T10125] __kmem_cache_alloc_node+0x53/0x250 [ 487.661293][T10125] ? __schedule_delayed_monitor_work+0x200/0x200 [ 487.667690][T10125] ? kvmalloc_node+0x70/0x180 [ 487.672435][T10125] __kmalloc_node+0xa4/0x230 [ 487.677098][T10125] kvmalloc_node+0x70/0x180 [ 487.681663][T10125] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 487.687110][T10125] ? 0xffffffffa0004740 [ 487.691327][T10125] ? 0xffffffffa0004740 [ 487.695538][T10125] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 487.701584][T10125] ? 0xffffffffa0004740 [ 487.705831][T10125] ? xdp_convert_md_to_buff+0x330/0x330 [ 487.711487][T10125] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 487.717805][T10125] ? _copy_from_user+0xa5/0xe0 [ 487.722812][T10125] ? bpf_test_init+0x119/0x140 [ 487.727640][T10125] ? xdp_convert_md_to_buff+0x5b/0x330 [ 487.733164][T10125] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 487.738618][T10125] ? dev_put+0x80/0x80 [ 487.742772][T10125] ? dev_put+0x80/0x80 [ 487.746912][T10125] bpf_prog_test_run+0x321/0x390 [ 487.751943][T10125] __sys_bpf+0x49d/0x890 [ 487.756253][T10125] ? bpf_link_show_fdinfo+0x390/0x390 [ 487.761733][T10125] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.767962][T10125] __x64_sys_bpf+0x7c/0x90 [ 487.772610][T10125] do_syscall_64+0x55/0xa0 [ 487.777097][T10125] ? clear_bhb_loop+0x40/0x90 [ 487.781919][T10125] ? clear_bhb_loop+0x40/0x90 [ 487.786661][T10125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.792620][T10125] RIP: 0033:0x7fc096b9c629 [ 487.797085][T10125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.816787][T10125] RSP: 002b:00007fc097ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.825640][T10125] RAX: ffffffffffffffda RBX: 00007fc096e15fa0 RCX: 00007fc096b9c629 [ 487.833680][T10125] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 487.841804][T10125] RBP: 00007fc097ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.849852][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.857988][T10125] R13: 00007fc096e16038 R14: 00007fc096e15fa0 R15: 00007ffebb790988 [ 487.866072][T10125] [ 488.789508][T10139] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 488.822448][T10140] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1314'. [ 488.846430][T10141] netlink: 'syz.1.1314': attribute type 12 has an invalid length. [ 488.864059][T10141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1314'. [ 488.877549][T10143] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 488.928274][T10144] netlink: 'syz.2.1315': attribute type 3 has an invalid length. [ 488.969818][T10144] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1315'. [ 489.020464][T10145] netlink: 'syz.2.1315': attribute type 12 has an invalid length. [ 489.213920][T10149] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 489.263844][T10149] netlink: 'syz.0.1316': attribute type 12 has an invalid length. [ 489.330758][T10152] netlink: 'syz.1.1318': attribute type 12 has an invalid length. [ 489.417271][T10154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.390227][ T2946] wlan1: Trigger new scan to find an IBSS to join [ 491.071072][T10174] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 491.569724][T10193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.349287][ T2952] wlan1: Trigger new scan to find an IBSS to join [ 493.356768][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 493.372817][ T13] wlan1: Trigger new scan to find an IBSS to join [ 493.615406][T10198] validate_nla: 9 callbacks suppressed [ 493.615443][T10198] netlink: 'syz.1.1331': attribute type 39 has an invalid length. [ 493.973873][T10210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.063138][T10212] netlink: 'syz.2.1336': attribute type 12 has an invalid length. [ 494.088039][T10212] __nla_validate_parse: 10 callbacks suppressed [ 494.088080][T10212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1336'. [ 496.251336][ T3452] wlan1: Creating new IBSS network, BSSID 76:c0:34:80:63:44 [ 496.260437][ T2977] wlan1: Creating new IBSS network, BSSID 32:e3:8a:e7:3e:48 [ 496.282161][T10217] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 496.294766][ T2977] ------------[ cut here ]------------ [ 496.301155][ T2977] WARNING: CPU: 1 PID: 2977 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 496.311816][ T2977] Modules linked in: [ 496.316211][ T2977] CPU: 1 PID: 2977 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 496.324416][ T2977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.334997][ T2977] Workqueue: cfg80211 cfg80211_event_work [ 496.341203][ T2977] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 496.347756][ T2977] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 58 a2 f7 0f 0b eb bb e8 3e 58 a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 30 58 a2 f7 0f 0b e9 e0 fd ff ff e8 [ 496.368081][ T2977] RSP: 0018:ffffc9000bab7a20 EFLAGS: 00010293 [ 496.374630][ T2977] RAX: ffffffff89e4bcd2 RBX: dffffc0000000000 RCX: ffff88802bb21e00 [ 496.377141][T10216] netlink: 'syz.3.1346': attribute type 39 has an invalid length. [ 496.382691][ T2977] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 496.382763][ T2977] RBP: ffffc9000bab7af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead [ 496.382782][ T2977] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff88805bbecc90 [ 496.382800][ T2977] R13: 1ffff92001756f4c R14: ffff88802252b5b8 R15: 000000000000001f [ 496.382819][ T2977] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 496.382838][ T2977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.382855][ T2977] CR2: 0000001b2d81cff8 CR3: 000000007be9a000 CR4: 00000000003506e0 [ 496.382876][ T2977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 496.382891][ T2977] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 496.382907][ T2977] Call Trace: [ 496.382918][ T2977] [ 496.382931][ T2977] ? mutex_lock_nested+0x20/0x20 [ 496.475507][ T2977] ? trace_rdev_return_void+0x1c0/0x1c0 [ 496.481223][ T2977] cfg80211_process_wdev_events+0x3bc/0x550 [ 496.487231][ T2977] cfg80211_process_rdev_events+0xa1/0x110 [ 496.493889][ T2977] cfg80211_event_work+0x2f/0x40 [ 496.499029][ T2977] ? process_scheduled_works+0x96f/0x15d0 [ 496.504820][ T2977] process_scheduled_works+0xa5d/0x15d0 [ 496.510549][ T2977] ? assign_work+0x430/0x430 [ 496.515231][ T2977] ? assign_work+0x3d0/0x430 [ 496.519975][ T2977] worker_thread+0xa55/0xfc0 [ 496.524641][ T2977] kthread+0x2fa/0x390 [ 496.528740][ T2977] ? pr_cont_work+0x560/0x560 [ 496.533547][ T2977] ? kthread_blkcg+0xd0/0xd0 [ 496.538220][ T2977] ret_from_fork+0x48/0x80 [ 496.542786][ T2977] ? kthread_blkcg+0xd0/0xd0 [ 496.547535][ T2977] ret_from_fork_asm+0x11/0x20 [ 496.552523][ T2977] [ 496.555638][ T2977] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 496.563254][ T2977] CPU: 1 PID: 2977 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 496.571030][ T2977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.581311][ T2977] Workqueue: cfg80211 cfg80211_event_work [ 496.587103][ T2977] Call Trace: [ 496.590439][ T2977] [ 496.593423][ T2977] dump_stack_lvl+0x18c/0x250 [ 496.598177][ T2977] ? show_regs_print_info+0x20/0x20 [ 496.603516][ T2977] ? load_image+0x400/0x400 [ 496.608113][ T2977] panic+0x2dc/0x730 [ 496.612093][ T2977] ? bpf_jit_dump+0xd0/0xd0 [ 496.616871][ T2977] ? ret_from_fork_asm+0x11/0x20 [ 496.621858][ T2977] __warn+0x2e0/0x470 [ 496.625871][ T2977] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 496.631451][ T2977] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 496.637035][ T2977] report_bug+0x2be/0x4f0 [ 496.641404][ T2977] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 496.646989][ T2977] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 496.652569][ T2977] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 496.658153][ T2977] handle_bug+0xcf/0x120 [ 496.662457][ T2977] exc_invalid_op+0x1a/0x50 [ 496.667005][ T2977] asm_exc_invalid_op+0x1a/0x20 [ 496.671901][ T2977] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 496.678089][ T2977] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 58 a2 f7 0f 0b eb bb e8 3e 58 a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 30 58 a2 f7 0f 0b e9 e0 fd ff ff e8 [ 496.697831][ T2977] RSP: 0018:ffffc9000bab7a20 EFLAGS: 00010293 [ 496.703939][ T2977] RAX: ffffffff89e4bcd2 RBX: dffffc0000000000 RCX: ffff88802bb21e00 [ 496.711949][ T2977] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 496.719996][ T2977] RBP: ffffc9000bab7af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead [ 496.728524][ T2977] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff88805bbecc90 [ 496.736542][ T2977] R13: 1ffff92001756f4c R14: ffff88802252b5b8 R15: 000000000000001f [ 496.744562][ T2977] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 496.750347][ T2977] ? mutex_lock_nested+0x20/0x20 [ 496.755329][ T2977] ? trace_rdev_return_void+0x1c0/0x1c0 [ 496.760918][ T2977] cfg80211_process_wdev_events+0x3bc/0x550 [ 496.766945][ T2977] cfg80211_process_rdev_events+0xa1/0x110 [ 496.772882][ T2977] cfg80211_event_work+0x2f/0x40 [ 496.777857][ T2977] ? process_scheduled_works+0x96f/0x15d0 [ 496.783714][ T2977] process_scheduled_works+0xa5d/0x15d0 [ 496.789523][ T2977] ? assign_work+0x430/0x430 [ 496.794155][ T2977] ? assign_work+0x3d0/0x430 [ 496.798783][ T2977] worker_thread+0xa55/0xfc0 [ 496.803433][ T2977] kthread+0x2fa/0x390 [ 496.807536][ T2977] ? pr_cont_work+0x560/0x560 [ 496.812426][ T2977] ? kthread_blkcg+0xd0/0xd0 [ 496.817051][ T2977] ret_from_fork+0x48/0x80 [ 496.821501][ T2977] ? kthread_blkcg+0xd0/0xd0 [ 496.826243][ T2977] ret_from_fork_asm+0x11/0x20 [ 496.831154][ T2977] [ 496.835077][ T2977] Kernel Offset: disabled [ 496.839551][ T2977] Rebooting in 86400 seconds..