last executing test programs:

2.371608584s ago: executing program 3 (id=2041):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xa, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffffff80180a334d84dd19b7e63e5947a0c90000000000000000000000000000009500009fb1e2c22f0b0af833f0adc20d3775197cc70005aa50c010de659117b3c177dd4c92ceabec3557297ce4dd3fa9c20bb74aa0ab9e0d002dd205be8b9264b5c96334e71e3424a99dcf4c5a6daf866c717edba1e19561095312caaeec9e18bbdc40ee3c18039b17afeefd905e50b2c8364faa4a4e2599c1e3bada375b65f9dc03c0d9f054e158536e0105a902485f0bc7329a11"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180), 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80c0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/175}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0}, 0x18a21, 0xfffffffffffffffb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'nicvf0\x00'})
close(r3)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x10b9, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'virt_wifi0\x00', 0x20})
r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x62d9}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x10}, 0x100904}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x7, 0x88)
close(0x3)
ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

2.089984733s ago: executing program 1 (id=2045):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x60cb01f8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
r1 = socket$kcm(0xa, 0x2, 0x0)
close(r1)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3b, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x46, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x80fe, @local, 0x3, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x9, 0x0, 0x40000007feb, 0x4a893, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x0, 0xb0}, 0x14105, 0x32, 0xfffffbff, 0x4, 0xffff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x36, 0x0, 0x7fffffff, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@ifindex=r8, r6, 0x31, 0x8, 0x0, @void, @value=r4, @void, @void, r7}, 0x20)
r9 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f00000005c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000084)
recvmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100)

2.088127513s ago: executing program 0 (id=2054):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
close(0x3)
close(0x4)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

1.953300827s ago: executing program 0 (id=2046):
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x620401, 0x0)
socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
close(r3)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016", 0x33}], 0x1}, 0x4000000)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80)
recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

1.862428821s ago: executing program 3 (id=2048):
r0 = socket$kcm(0x25, 0x5, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
recvmsg(r1, &(0x7f0000000d80)={&(0x7f0000000580)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000a00)=""/248, 0xf8}, {&(0x7f0000000b00)=""/33, 0x21}, {&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/69, 0x45}], 0x6, &(0x7f0000000d40)}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000440)={0x0, 0x1, [@broadcast]})
r6 = socket$kcm(0x21, 0x2, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x15a4, 0x0, 0x0, 0x201, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB, @ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xc}], 0x10}, 0xfc00)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x4, 0x0, 0xfe, 0x0, 0x9, 0x64099, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x10009, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@enum={0x6, 0x7, 0x0, 0x6, 0x4, [{0x9}, {0x3, 0x404}, {0x9, 0x8000}, {0x8, 0x5}, {0x7, 0x7}, {0xe, 0x40}, {0xc, 0x8001}]}, @fwd={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000180)=""/85, 0x9b, 0x55, 0x0, 0xff, 0x10000, @value=r9}, 0x28)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180003000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)

1.720344375s ago: executing program 1 (id=2050):
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x9, 0x8}, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0))
write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000001100000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c21"], 0xee8a)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)

1.397123965s ago: executing program 1 (id=2051):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x8}, 0x100464, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x3, r3, 0x0)
close(0xffffffffffffffff)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc80f3", 0xe}], 0x1}, 0x6000000)

1.381944076s ago: executing program 2 (id=2052):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3)
close(0x4)
r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

1.327311917s ago: executing program 3 (id=2053):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB], 0x50)
socket$kcm(0xa, 0x3, 0x73)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x1, 0x10}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000a42c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000c77c6b0c00b70500000800000085000000a500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000003000000"], &(0x7f00000006c0)='syzkaller\x00', 0x53, 0x98, &(0x7f0000000700)=""/152, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[r2, r1], &(0x7f0000000c00)=[{0x0, 0x3, 0xc, 0x4}]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xfff5)

1.279556349s ago: executing program 2 (id=2055):
r0 = socket$kcm(0x11, 0x2, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8919, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xf8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x93\xca?E9\x17\v\xbc\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9dI\xa6\xe4l\x1bD\xa1\xddD\x94\xb8*\x83\xf6\x10>\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e')
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000c00000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5424}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x4000081)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000240), &(0x7f00000002c0)=r2}, 0x20)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc440, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x3, 0x1, 0x2, 0x5, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000200)='GPL\x00', 0x8, 0x1000, &(0x7f0000001040)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002040)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000002080)={0x4, 0x0, 0x3, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000020c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002100)=[{0x5, 0x3, 0xb, 0x2}, {0x1, 0x2, 0x4, 0x5}, {0x2, 0x3, 0xf, 0x9}, {0x0, 0x2, 0x3, 0x5}, {0x2, 0x1, 0x10}, {0x2, 0x2, 0x5, 0x2}, {0x4, 0x3, 0x9, 0x4}, {0x5, 0x5, 0x9, 0x3}, {0x3, 0x4, 0x10, 0x7}], 0x10, 0x7}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000002280)={0xffffffffffffffff, r4})
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x805, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000100"], 0x48)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080))

1.273342449s ago: executing program 1 (id=2056):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
socketpair(0x18, 0x5, 0x401, &(0x7f0000000000))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001600)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="269714bd002d5c460ab221ebbbdcfd4b4672598250aba53abd78e071f8bd91c7548c82746685402a40e72ee74a5c620c23b3b02d6be617d08b65a72ba256fa4d322f6e395b14ea05c5c77917f6b6dbcaf1f25c2c994d80e9bc9ad6a581824364fbaf6eb7eb6da5ba65156d3b89401813ee43467ce7b09bfb4d0319ffb39f22f52eb8e2784e8a6677ea0a7228d4fcdc3270880fe42c15dbe7e5ec66b6017849b4e38ccd16f5c8c44f", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/112, 0x70}, {0x0}, {0x0}], 0x3, &(0x7f0000000a40)=""/190, 0xbe}, 0x2020)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000)
r8 = socket$kcm(0x10, 0x2, 0x4)
close(r8)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650c001ac008000a0004000900020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03004e21000af32c6e020675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x880)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x500, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0xff, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xd, 0xd, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x8f}, @call={0x85, 0x0, 0x0, 0xc8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000780)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000880)=[r7, r7, r7, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x4, 0x4, 0x4, 0x1}, {0x2, 0x2, 0x4, 0x3}, {0x1, 0x2, 0xd, 0xa}, {0x3, 0x5, 0x8, 0x9}, {0x5, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94)

1.194318932s ago: executing program 3 (id=2057):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a4590112", 0xa1}, {&(0x7f0000000440)="6f4720baeb5434a1c17a4b697e4611c434c1947fafd44daee2d61fadd23c3505eee0cc5b6c76cf081390ae92516d567c4b49af0f4b3df75ae92efbfb0fbe60ac8c4e546500f4f8f3885d5622072fb9e9b948a5edc65602c644bee9ad04b655279f383ce068ad0c202a57f9a8804b73d1241fb306b2acd9d5e26a71b19a0b9859ff0f0d7cdbd80fdfacdf9f1d02a37ae44bb6ddd978d4a0e6d61b68f629915748d6d3d184ca2b4164192c60a3a383821d0e85f04d09b712814d4b0664799b7ae6657b7452214608d01d31bd7d9e03107c638353d89515692c24b11490b9e75cfcb489e80b9334f4660204b2a17409993ddc4b0d004709cd46cb2488cf3cecd965e978182dd42cfbbfa4ebda17cce9cfc970959fd29e1a802809aa4a65c8f1c6dd14fca85d83fc995f097a62c6f04fb0d1f0dec0faa41fe09b1eae67606123d908dd74c62e66ee2635ec9da7bc74103debf3e31f0794ca5fc2268bcb8a03aeb3bf860d164e0a6cba7c8dc469147cc7e1bb94731ec450525cf19275d4af40b115f2420ff7ab4eeb41c5ddc19aae1b2e535b796c0e7aa6e71b4e13c8023806a08638d13a8595e310321860c8d7670cf167c67b3b5217a66329505cdcdc3afb3233dbaec65ff45b0bfc3cfbd309a7ffd26507a8ffe782f3b84ad9dfc2b4f44d6716e8ad892ffc3acf6e7e09018041a27fcad1ee957d6fddccc3d41f9b04127dee7c471acf9fdc32f204afffc52b22b73844154285ce5ec58ec57b40ccf7b70215a4a27f9de2c2719dcb5897bc302ebb027c019e40aa6fc85d5b670aef709e40cbe597139537c10d2483b67c02ca781c5ce6c014b13c8dee248e8b75831cbee8f29cad33139e0b5bc86c203c71f54ad11573e8801b8cc623571b9c53ac723b51b2cdd09b60cf8a3a205a70814107251d962d603bf21f42e946462bf3d8bca96d7bdbdfa9ced20f6e9edba4ac6aea0a68c08a3f8076274bece6d676d64975dc1e611806feb81cbac4b38453a756845c866f0458fb61cd12a135e1dfa76d85a3b2972b6517b57bc35a0398f7b87ee0b697c84c629e8a62a7d1dab6459a71f7aad2fac7a1a4c019479b1f31dc017f3fa896000b8bcc0b1ca993447351fa0529a5be311faa90b6d8f0a5ce5fe2adfd4995ba13920826d27677d8dac9ef0aac4cea1517ff318a864b3ea3bcc45d6cbd91e4a8da09c2e320957fcada6a4e", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c63389068bee461d1744b4bf458233d3294ababe6c28c97e2640f8", 0x29}, {0x0, 0x300}, {&(0x7f0000001580)="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", 0x4bc}], 0x8}, 0x0)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000080))

1.008564438s ago: executing program 0 (id=2058):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0, 0x1}, 0x800, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00003d7d7aa1856278bf8a9160777a985e000071"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x5, <r6=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r6, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
socket$kcm(0xf, 0x3, 0x2) (async)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0, 0x1}, 0x800, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
close(r2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00003d7d7aa1856278bf8a9160777a985e000071"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x5}, 0x8) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r6, 0x4) (async)

642.27998ms ago: executing program 0 (id=2059):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40890) (fail_nth: 1)

448.424945ms ago: executing program 3 (id=2060):
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x9, 0x8}, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0))
write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000001100000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c21"], 0xee8a)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)

402.013787ms ago: executing program 2 (id=2061):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40890)

313.23928ms ago: executing program 0 (id=2062):
r0 = socket$kcm(0x25, 0x5, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'wg0\x00', 0x1000})
recvmsg(r1, 0x0, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000440)={0x0, 0x1, [@broadcast]})
r6 = socket$kcm(0x21, 0x2, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x15a4, 0x0, 0x0, 0x201, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB, @ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xc}], 0x10}, 0xfc00)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x4, 0x0, 0xfe, 0x0, 0x9, 0x64099, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x10009, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@enum={0x6, 0x7, 0x0, 0x6, 0x4, [{0x9}, {0x3, 0x404}, {0x9, 0x8000}, {0x8, 0x5}, {0x7, 0x7}, {0xe, 0x40}, {0xc, 0x8001}]}, @fwd={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000180)=""/85, 0x9b, 0x55, 0x0, 0xff, 0x10000, @value=r9}, 0x28)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180003000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)

312.84148ms ago: executing program 2 (id=2063):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3)
close(0x4)
r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

284.842781ms ago: executing program 1 (id=2064):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x8}, 0x100464, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x3, r3, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc80f3", 0xe}], 0x1}, 0x6000000)

177.233154ms ago: executing program 2 (id=2065):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB], 0x50)
socket$kcm(0xa, 0x3, 0x73)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x1, 0x10}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000a42c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000c77c6b0c00b70500000800000085000000a500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000003000000"], &(0x7f00000006c0)='syzkaller\x00', 0x53, 0x98, &(0x7f0000000700)=""/152, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[r2, r1], &(0x7f0000000c00)=[{0x0, 0x3, 0xc, 0x4}]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xfff5)

160.446445ms ago: executing program 3 (id=2066):
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x620401, 0x0)
socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
close(r3)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016", 0x33}], 0x1}, 0x4000000)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80)
recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

81.858767ms ago: executing program 1 (id=2067):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) (fail_nth: 5)

20.089909ms ago: executing program 0 (id=2068):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a4590112", 0xa1}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c63389068bee461d1744b4bf458233d3294ababe6c28c97e2640f8", 0x29}, {0x0, 0x300}, {&(0x7f0000001580)="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", 0x4bc}], 0x8}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000080))

0s ago: executing program 2 (id=2069):
r0 = socket$kcm(0x10, 0x2, 0x4)
socketpair(0x18, 0x5, 0x401, &(0x7f0000000000))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001600)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="269714bd002d5c460ab221ebbbdcfd4b4672598250aba53abd78e071f8bd91c7548c82746685402a40e72ee74a5c620c23b3b02d6be617d08b65a72ba256fa4d322f6e395b14ea05c5c77917f6b6dbcaf1f25c2c994d80e9bc9ad6a581824364fbaf6eb7eb6da5ba65156d3b89401813ee43467ce7b09bfb4d0319ffb39f22f52eb8e2784e8a6677ea0a7228d4fcdc3270880fe42c15dbe7e5ec66b6017849b4e38ccd16f5c8c44f", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/112, 0x70}, {0x0}, {0x0}], 0x3, &(0x7f0000000a40)=""/190, 0xbe}, 0x2020)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000)
r8 = socket$kcm(0x10, 0x2, 0x4)
close(r8)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650c001ac008000a0004000900020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03004e21000af32c6e020675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x880)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x500, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0xff, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xd, 0xd, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x8f}, @call={0x85, 0x0, 0x0, 0xc8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000780)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000880)=[r7, r7, r7, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x4, 0x4, 0x4, 0x1}, {0x2, 0x2, 0x4, 0x3}, {0x1, 0x2, 0xd, 0xa}, {0x3, 0x5, 0x8, 0x9}, {0x5, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94)

kernel console output (not intermixed with test programs):

  203.767771][ T8736] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  203.775733][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.783691][ T8736] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  203.791658][ T8736]  </TASK>
[  203.933207][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  204.078590][ T8741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1047'.
[  204.291174][ T8745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1048'.
[  204.784290][ T8752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1050'.
[  204.942382][ T8760] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  205.318799][ T8772] FAULT_INJECTION: forcing a failure.
[  205.318799][ T8772] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.357621][ T8772] CPU: 1 PID: 8772 Comm: syz.1.1057 Not tainted syzkaller #0
[  205.365022][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  205.375081][ T8772] Call Trace:
[  205.378362][ T8772]  <TASK>
[  205.381291][ T8772]  dump_stack_lvl+0x18c/0x250
[  205.385975][ T8772]  ? show_regs_print_info+0x20/0x20
[  205.391172][ T8772]  ? load_image+0x420/0x420
[  205.395667][ T8772]  ? __might_fault+0xaa/0x120
[  205.400338][ T8772]  ? __lock_acquire+0x7d40/0x7d40
[  205.405353][ T8772]  ? __lock_acquire+0x7d40/0x7d40
[  205.410367][ T8772]  should_fail_ex+0x39d/0x4d0
[  205.415042][ T8772]  _copy_to_user+0x2f/0xa0
[  205.419450][ T8772]  move_addr_to_user+0x146/0x1e0
[  205.424378][ T8772]  ____sys_recvmsg+0x33d/0x5e0
[  205.429143][ T8772]  ? __sys_recvmsg_sock+0x50/0x50
[  205.434166][ T8772]  ? import_iovec+0x73/0xa0
[  205.438661][ T8772]  ___sys_recvmsg+0x216/0x590
[  205.443332][ T8772]  ? __sys_recvmsg+0x2a0/0x2a0
[  205.448087][ T8772]  ? ksys_write+0x1c4/0x260
[  205.452592][ T8772]  ? __fget_files+0x43d/0x4b0
[  205.457268][ T8772]  __x64_sys_recvmsg+0x20c/0x2e0
[  205.462190][ T8772]  ? perf_trace_preemptirq_template+0x269/0x330
[  205.468429][ T8772]  ? ___sys_recvmsg+0x590/0x590
[  205.473278][ T8772]  ? lockdep_hardirqs_on+0x98/0x150
[  205.478469][ T8772]  do_syscall_64+0x55/0xb0
[  205.482872][ T8772]  ? clear_bhb_loop+0x40/0x90
[  205.487543][ T8772]  ? clear_bhb_loop+0x40/0x90
[  205.492211][ T8772]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.498094][ T8772] RIP: 0033:0x7f483699ce59
[  205.502506][ T8772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.522108][ T8772] RSP: 002b:00007f48378b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  205.530515][ T8772] RAX: ffffffffffffffda RBX: 00007f4836c15fa0 RCX: 00007f483699ce59
[  205.538477][ T8772] RDX: 0000000000000000 RSI: 0000200000003040 RDI: 0000000000000004
[  205.546436][ T8772] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  205.554395][ T8772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.562352][ T8772] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  205.570324][ T8772]  </TASK>
[  205.975467][ T8776] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  206.076416][ T8776] validate_nla: 4 callbacks suppressed
[  206.076458][ T8776] netlink: 'syz.0.1059': attribute type 3 has an invalid length.
[  206.109092][ T8776] __nla_validate_parse: 1 callbacks suppressed
[  206.109283][ T8776] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1059'.
[  206.478564][ T8791] netlink: 'syz.1.1064': attribute type 2 has an invalid length.
[  206.516861][ T8791] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1064'.
[  206.523678][ T8788] netlink: 'syz.2.1061': attribute type 10 has an invalid length.
[  206.583344][ T8793] netlink: 'syz.3.1066': attribute type 10 has an invalid length.
[  206.601090][ T8784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1061'.
[  206.633260][ T8793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1066'.
[  206.655145][ T8791] netlink: 'syz.1.1064': attribute type 10 has an invalid length.
[  206.743974][ T8791] team0: Port device wlan1 added
[  206.887095][ T8801] netlink: 'syz.2.1069': attribute type 10 has an invalid length.
[  206.972951][   T11] wlan1: Trigger new scan to find an IBSS to join
[  206.992098][ T8805] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  206.995721][   T49] wlan1: Trigger new scan to find an IBSS to join
[  207.076037][ T8805] netlink: 'syz.0.1068': attribute type 3 has an invalid length.
[  207.112355][ T8805] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1068'.
[  207.150171][ T8810] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1069'.
[  207.176117][ T8807] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  207.221678][ T8807] netlink: 'syz.1.1071': attribute type 3 has an invalid length.
[  207.231830][ T8807] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1071'.
[  207.598228][ T8824] netlink: 'syz.3.1078': attribute type 29 has an invalid length.
[  207.606878][ T8824] netlink: 'syz.3.1078': attribute type 29 has an invalid length.
[  207.873728][ T8827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1079'.
[  207.985792][ T8831] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  208.199042][ T8831] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1081'.
[  208.424950][ T8834] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  208.438519][ T8838] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1082'.
[  208.790019][ T8850] team0: Device hsr_slave_0 failed to register rx_handler
[  210.463904][ T8908] team0: Device hsr_slave_0 failed to register rx_handler
[  210.975191][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  211.237475][ T8924] validate_nla: 18 callbacks suppressed
[  211.237579][ T8924] netlink: 'syz.2.1111': attribute type 10 has an invalid length.
[  211.262618][ T8924] __nla_validate_parse: 7 callbacks suppressed
[  211.262632][ T8924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1111'.
[  211.925755][ T8945] netlink: 'syz.3.1120': attribute type 10 has an invalid length.
[  211.935444][ T1320] wlan1: Trigger new scan to find an IBSS to join
[  211.941289][   T11] wlan1: Trigger new scan to find an IBSS to join
[  211.960840][ T8945] team0: Device hsr_slave_0 failed to register rx_handler
[  215.624288][ T1320] wlan1: Creating new IBSS network, BSSID 76:d9:c9:42:34:d1
[  215.625426][   T11] wlan1: Creating new IBSS network, BSSID 2a:26:8f:57:ff:75
[  215.826558][ T8986] FAULT_INJECTION: forcing a failure.
[  215.826558][ T8986] name failslab, interval 1, probability 0, space 0, times 0
[  215.859237][ T8986] CPU: 1 PID: 8986 Comm: syz.2.1134 Not tainted syzkaller #0
[  215.866643][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  215.876712][ T8986] Call Trace:
[  215.880004][ T8986]  <TASK>
[  215.882952][ T8986]  dump_stack_lvl+0x18c/0x250
[  215.887651][ T8986]  ? show_regs_print_info+0x20/0x20
[  215.892874][ T8986]  ? load_image+0x420/0x420
[  215.897404][ T8986]  ? __might_sleep+0xe0/0xe0
[  215.902015][ T8986]  ? __lock_acquire+0x7d40/0x7d40
[  215.907061][ T8986]  should_fail_ex+0x39d/0x4d0
[  215.911768][ T8986]  should_failslab+0x9/0x20
[  215.916293][ T8986]  slab_pre_alloc_hook+0x59/0x310
[  215.921346][ T8986]  ? apparmor_sk_alloc_security+0x77/0x100
[  215.927174][ T8986]  __kmem_cache_alloc_node+0x53/0x250
[  215.932573][ T8986]  ? apparmor_sk_alloc_security+0x77/0x100
[  215.938376][ T8986]  kmalloc_trace+0x2a/0xe0
[  215.942789][ T8986]  apparmor_sk_alloc_security+0x77/0x100
[  215.948413][ T8986]  security_sk_alloc+0x6e/0xa0
[  215.953167][ T8986]  sk_prot_alloc+0x101/0x210
[  215.957762][ T8986]  ? sk_alloc+0x24/0x360
[  215.962003][ T8986]  sk_alloc+0x3a/0x360
[  215.966067][ T8986]  ? bpf_ctx_init+0x163/0x1a0
[  215.970738][ T8986]  ? bpf_prog_test_run_skb+0x273/0x12b0
[  215.976278][ T8986]  bpf_prog_test_run_skb+0x3a5/0x12b0
[  215.981639][ T8986]  ? __fget_files+0x28/0x4b0
[  215.986220][ T8986]  ? __fget_files+0x28/0x4b0
[  215.990803][ T8986]  ? __fget_files+0x43d/0x4b0
[  215.995483][ T8986]  ? cpu_online+0x60/0x60
[  215.999816][ T8986]  bpf_prog_test_run+0x321/0x390
[  216.004756][ T8986]  __sys_bpf+0x49d/0x890
[  216.008990][ T8986]  ? bpf_link_show_fdinfo+0x390/0x390
[  216.014366][ T8986]  ? lock_chain_count+0x20/0x20
[  216.019212][ T8986]  __x64_sys_bpf+0x7c/0x90
[  216.023619][ T8986]  do_syscall_64+0x55/0xb0
[  216.028022][ T8986]  ? clear_bhb_loop+0x40/0x90
[  216.032688][ T8986]  ? clear_bhb_loop+0x40/0x90
[  216.037356][ T8986]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.043236][ T8986] RIP: 0033:0x7f8835f9ce59
[  216.047640][ T8986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.067232][ T8986] RSP: 002b:00007f8836e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  216.075632][ T8986] RAX: ffffffffffffffda RBX: 00007f8836215fa0 RCX: 00007f8835f9ce59
[  216.083590][ T8986] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  216.091548][ T8986] RBP: 00007f8836e49090 R08: 0000000000000000 R09: 0000000000000000
[  216.099505][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.107462][ T8986] R13: 00007f8836216038 R14: 00007f8836215fa0 R15: 00007ffcbe1c7fa8
[  216.115432][ T8986]  </TASK>
[  216.119244][   T11] wlan1: Trigger new scan to find an IBSS to join
[  217.100094][ T1326] wlan1: Creating new IBSS network, BSSID ce:a5:40:af:c4:80
[  218.165130][ T8990] netlink: 'syz.1.1135': attribute type 10 has an invalid length.
[  218.173791][ T8990] team0: Device hsr_slave_0 failed to register rx_handler
[  218.187669][ T9009] netlink: 'syz.2.1142': attribute type 10 has an invalid length.
[  218.209734][ T9011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1142'.
[  218.350884][ T9017] netlink: 'syz.0.1145': attribute type 21 has an invalid length.
[  218.376296][ T9017] netlink: 'syz.0.1145': attribute type 1 has an invalid length.
[  218.412728][ T9017] netlink: 'syz.0.1145': attribute type 2 has an invalid length.
[  218.426384][ T9017] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.1145'.
[  218.453687][ T9015] netlink: 'syz.3.1144': attribute type 10 has an invalid length.
[  218.503527][ T9015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1144'.
[  219.444765][ T9041] FAULT_INJECTION: forcing a failure.
[  219.444765][ T9041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.489075][ T9041] CPU: 0 PID: 9041 Comm: syz.2.1154 Not tainted syzkaller #0
[  219.496485][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.506551][ T9041] Call Trace:
[  219.509838][ T9041]  <TASK>
[  219.512784][ T9041]  dump_stack_lvl+0x18c/0x250
[  219.517482][ T9041]  ? show_regs_print_info+0x20/0x20
[  219.522701][ T9041]  ? load_image+0x420/0x420
[  219.527235][ T9041]  ? __might_fault+0xaa/0x120
[  219.531927][ T9041]  ? __lock_acquire+0x7d40/0x7d40
[  219.536973][ T9041]  should_fail_ex+0x39d/0x4d0
[  219.541678][ T9041]  _copy_from_user+0x2f/0xe0
[  219.546300][ T9041]  ___sys_sendmsg+0x1c7/0x360
[  219.550999][ T9041]  ? get_pid_task+0x20/0x1e0
[  219.555610][ T9041]  ? __sys_sendmsg+0x2a0/0x2a0
[  219.560403][ T9041]  ? __lock_acquire+0x7d40/0x7d40
[  219.565466][ T9041]  __se_sys_sendmsg+0x1c2/0x2b0
[  219.570328][ T9041]  ? __x64_sys_sendmsg+0x80/0x80
[  219.575293][ T9041]  ? lockdep_hardirqs_on+0x98/0x150
[  219.580512][ T9041]  do_syscall_64+0x55/0xb0
[  219.584938][ T9041]  ? clear_bhb_loop+0x40/0x90
[  219.589629][ T9041]  ? clear_bhb_loop+0x40/0x90
[  219.594323][ T9041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.600232][ T9041] RIP: 0033:0x7f8835f9ce59
[  219.604655][ T9041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.624270][ T9041] RSP: 002b:00007f8836e49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.632691][ T9041] RAX: ffffffffffffffda RBX: 00007f8836215fa0 RCX: 00007f8835f9ce59
[  219.640672][ T9041] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  219.648646][ T9041] RBP: 00007f8836e49090 R08: 0000000000000000 R09: 0000000000000000
[  219.656621][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.664588][ T9041] R13: 00007f8836216038 R14: 00007f8836215fa0 R15: 00007ffcbe1c7fa8
[  219.672574][ T9041]  </TASK>
[  220.040546][ T9045] netlink: 'syz.2.1155': attribute type 10 has an invalid length.
[  220.069712][ T9045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1155'.
[  220.164878][ T9047] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  220.298254][ T9047] netlink: 'syz.0.1156': attribute type 3 has an invalid length.
[  220.358092][ T9047] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1156'.
[  220.501466][ T9062] netlink: 'syz.2.1163': attribute type 3 has an invalid length.
[  221.495087][ T9084] netlink: 'syz.3.1171': attribute type 10 has an invalid length.
[  221.584911][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1171'.
[  222.554737][ T9106] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  222.654051][ T9113] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1177'.
[  222.810729][ T9121] netlink: 9062 bytes leftover after parsing attributes in process `syz.2.1184'.
[  222.975844][ T1326] wlan1: Trigger new scan to find an IBSS to join
[  223.277244][ T9131] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1187'.
[  224.317423][ T9152] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  224.384167][ T9152] validate_nla: 5 callbacks suppressed
[  224.384208][ T9152] netlink: 'syz.1.1196': attribute type 3 has an invalid length.
[  224.401969][ T9152] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1196'.
[  224.783426][ T9168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1201'.
[  224.973492][   T11] wlan1: Trigger new scan to find an IBSS to join
[  225.433353][ T9184] netlink: 'syz.3.1207': attribute type 3 has an invalid length.
[  226.244902][ T9201] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  227.180558][ T9229] netlink: 'syz.0.1223': attribute type 3 has an invalid length.
[  227.376066][ T9234] netlink: 'syz.3.1227': attribute type 10 has an invalid length.
[  227.400492][ T9234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1227'.
[  227.570368][ T9237] netlink: 'syz.1.1228': attribute type 3 has an invalid length.
[  227.578982][ T9237] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1228'.
[  227.937933][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  227.942709][   T42] wlan1: Trigger new scan to find an IBSS to join
[  228.258043][ T9256] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1233'.
[  228.329462][ T9256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.538552][ T9260] netlink: 'syz.3.1237': attribute type 10 has an invalid length.
[  228.584288][ T9260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1237'.
[  228.660237][ T9263] netlink: 'syz.1.1238': attribute type 3 has an invalid length.
[  228.679196][ T9263] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1238'.
[  228.943116][ T1320] wlan1: Creating new IBSS network, BSSID a6:06:c5:8c:f2:c1
[  229.311652][ T9285] netlink: 'syz.0.1248': attribute type 10 has an invalid length.
[  229.353793][ T9285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1248'.
[  229.419633][ T9293] FAULT_INJECTION: forcing a failure.
[  229.419633][ T9293] name failslab, interval 1, probability 0, space 0, times 0
[  229.441998][ T9293] CPU: 1 PID: 9293 Comm: syz.2.1250 Not tainted syzkaller #0
[  229.449487][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  229.459556][ T9293] Call Trace:
[  229.462840][ T9293]  <TASK>
[  229.465781][ T9293]  dump_stack_lvl+0x18c/0x250
[  229.470477][ T9293]  ? show_regs_print_info+0x20/0x20
[  229.475691][ T9293]  ? load_image+0x420/0x420
[  229.480210][ T9293]  ? __might_sleep+0xe0/0xe0
[  229.484810][ T9293]  ? __lock_acquire+0x7d40/0x7d40
[  229.489845][ T9293]  should_fail_ex+0x39d/0x4d0
[  229.494551][ T9293]  should_failslab+0x9/0x20
[  229.499067][ T9293]  slab_pre_alloc_hook+0x59/0x310
[  229.504114][ T9293]  ? apparmor_sk_alloc_security+0x77/0x100
[  229.509930][ T9293]  __kmem_cache_alloc_node+0x53/0x250
[  229.515306][ T9293]  ? apparmor_sk_alloc_security+0x77/0x100
[  229.521131][ T9293]  kmalloc_trace+0x2a/0xe0
[  229.525571][ T9293]  apparmor_sk_alloc_security+0x77/0x100
[  229.531219][ T9293]  security_sk_alloc+0x6e/0xa0
[  229.535998][ T9293]  sk_prot_alloc+0x101/0x210
[  229.540601][ T9293]  ? sk_alloc+0x24/0x360
[  229.544865][ T9293]  sk_alloc+0x3a/0x360
[  229.548949][ T9293]  ? bpf_ctx_init+0x163/0x1a0
[  229.553635][ T9293]  ? bpf_prog_test_run_skb+0x273/0x12b0
[  229.559193][ T9293]  bpf_prog_test_run_skb+0x3a5/0x12b0
[  229.564578][ T9293]  ? __fget_files+0x28/0x4b0
[  229.569185][ T9293]  ? __fget_files+0x28/0x4b0
[  229.573790][ T9293]  ? __fget_files+0x43d/0x4b0
[  229.578496][ T9293]  ? cpu_online+0x60/0x60
[  229.582849][ T9293]  bpf_prog_test_run+0x321/0x390
[  229.587802][ T9293]  __sys_bpf+0x49d/0x890
[  229.592060][ T9293]  ? bpf_link_show_fdinfo+0x390/0x390
[  229.597459][ T9293]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.603653][ T9293]  __x64_sys_bpf+0x7c/0x90
[  229.608081][ T9293]  do_syscall_64+0x55/0xb0
[  229.612513][ T9293]  ? clear_bhb_loop+0x40/0x90
[  229.617203][ T9293]  ? clear_bhb_loop+0x40/0x90
[  229.621899][ T9293]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  229.627811][ T9293] RIP: 0033:0x7f8835f9ce59
[  229.632233][ T9293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.651851][ T9293] RSP: 002b:00007f8836e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  229.660277][ T9293] RAX: ffffffffffffffda RBX: 00007f8836215fa0 RCX: 00007f8835f9ce59
[  229.668259][ T9293] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a
[  229.676242][ T9293] RBP: 00007f8836e49090 R08: 0000000000000000 R09: 0000000000000000
[  229.684223][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.692206][ T9293] R13: 00007f8836216038 R14: 00007f8836215fa0 R15: 00007ffcbe1c7fa8
[  229.700206][ T9293]  </TASK>
[  229.718438][ T9290] netlink: 'syz.3.1249': attribute type 3 has an invalid length.
[  229.744328][ T9290] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1249'.
[  229.984284][ T9299] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1252'.
[  230.570177][ T9329] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1263'.
[  230.656013][ T9325] netlink: 'syz.2.1259': attribute type 10 has an invalid length.
[  230.711716][ T9331] netlink: 'syz.0.1264': attribute type 3 has an invalid length.
[  230.740421][ T9331] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1264'.
[  230.754487][ T9325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1259'.
[  230.893633][ T1092] wlan1: Creating new IBSS network, BSSID fe:d5:f3:d0:e7:7a
[  231.237913][ T9341] netlink: 'syz.0.1274': attribute type 3 has an invalid length.
[  231.269437][ T9341] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1274'.
[  231.298523][ T9346] netlink: 'syz.2.1268': attribute type 16 has an invalid length.
[  231.329483][ T9346] netlink: 'syz.2.1268': attribute type 3 has an invalid length.
[  231.362771][ T9346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1268'.
[  231.701278][ T9358] netlink: 'syz.1.1272': attribute type 1 has an invalid length.
[  231.924342][ T9364] netlink: 'syz.3.1275': attribute type 10 has an invalid length.
[  232.057425][ T9371] netlink: 'syz.2.1278': attribute type 10 has an invalid length.
[  232.584596][ T9375] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  233.044595][ T9394] FAULT_INJECTION: forcing a failure.
[  233.044595][ T9394] name failslab, interval 1, probability 0, space 0, times 0
[  233.063658][ T9394] CPU: 0 PID: 9394 Comm: syz.2.1286 Not tainted syzkaller #0
[  233.071062][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  233.081130][ T9394] Call Trace:
[  233.084424][ T9394]  <TASK>
[  233.087363][ T9394]  dump_stack_lvl+0x18c/0x250
[  233.092066][ T9394]  ? show_regs_print_info+0x20/0x20
[  233.097278][ T9394]  ? load_image+0x420/0x420
[  233.101805][ T9394]  ? __might_sleep+0xe0/0xe0
[  233.106416][ T9394]  ? __lock_acquire+0x7d40/0x7d40
[  233.111461][ T9394]  should_fail_ex+0x39d/0x4d0
[  233.116162][ T9394]  should_failslab+0x9/0x20
[  233.120687][ T9394]  slab_pre_alloc_hook+0x59/0x310
[  233.125733][ T9394]  ? apparmor_sk_alloc_security+0x77/0x100
[  233.131558][ T9394]  __kmem_cache_alloc_node+0x53/0x250
[  233.136953][ T9394]  ? apparmor_sk_alloc_security+0x77/0x100
[  233.142777][ T9394]  kmalloc_trace+0x2a/0xe0
[  233.147214][ T9394]  apparmor_sk_alloc_security+0x77/0x100
[  233.152859][ T9394]  security_sk_alloc+0x6e/0xa0
[  233.157628][ T9394]  sk_prot_alloc+0x101/0x210
[  233.162225][ T9394]  ? sk_alloc+0x24/0x360
[  233.166475][ T9394]  sk_alloc+0x3a/0x360
[  233.170549][ T9394]  ? bpf_ctx_init+0x163/0x1a0
[  233.175230][ T9394]  ? bpf_prog_test_run_skb+0x273/0x12b0
[  233.180785][ T9394]  bpf_prog_test_run_skb+0x3a5/0x12b0
[  233.186161][ T9394]  ? __fget_files+0x28/0x4b0
[  233.190754][ T9394]  ? __fget_files+0x28/0x4b0
[  233.195348][ T9394]  ? __fget_files+0x43d/0x4b0
[  233.200042][ T9394]  ? cpu_online+0x60/0x60
[  233.204373][ T9394]  bpf_prog_test_run+0x321/0x390
[  233.209322][ T9394]  __sys_bpf+0x49d/0x890
[  233.213569][ T9394]  ? bpf_link_show_fdinfo+0x390/0x390
[  233.218955][ T9394]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.225126][ T9394]  __x64_sys_bpf+0x7c/0x90
[  233.229549][ T9394]  do_syscall_64+0x55/0xb0
[  233.233969][ T9394]  ? clear_bhb_loop+0x40/0x90
[  233.238652][ T9394]  ? clear_bhb_loop+0x40/0x90
[  233.243333][ T9394]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.249233][ T9394] RIP: 0033:0x7f8835f9ce59
[  233.253651][ T9394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.273257][ T9394] RSP: 002b:00007f8836e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  233.281678][ T9394] RAX: ffffffffffffffda RBX: 00007f8836215fa0 RCX: 00007f8835f9ce59
[  233.289647][ T9394] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  233.297616][ T9394] RBP: 00007f8836e49090 R08: 0000000000000000 R09: 0000000000000000
[  233.305584][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.313554][ T9394] R13: 00007f8836216038 R14: 00007f8836215fa0 R15: 00007ffcbe1c7fa8
[  233.321543][ T9394]  </TASK>
[  233.475748][ T9396] netlink: 'syz.0.1287': attribute type 10 has an invalid length.
[  233.533354][ T9401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.611439][ T9405] FAULT_INJECTION: forcing a failure.
[  233.611439][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.625241][ T9405] CPU: 0 PID: 9405 Comm: syz.2.1288 Not tainted syzkaller #0
[  233.632628][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  233.642690][ T9405] Call Trace:
[  233.645974][ T9405]  <TASK>
[  233.648908][ T9405]  dump_stack_lvl+0x18c/0x250
[  233.653590][ T9405]  ? show_regs_print_info+0x20/0x20
[  233.658786][ T9405]  ? load_image+0x420/0x420
[  233.663290][ T9405]  ? __lock_acquire+0x7d40/0x7d40
[  233.668300][ T9405]  ? snprintf+0xe9/0x140
[  233.672533][ T9405]  should_fail_ex+0x39d/0x4d0
[  233.677207][ T9405]  _copy_to_user+0x2f/0xa0
[  233.681616][ T9405]  simple_read_from_buffer+0xe7/0x150
[  233.687007][ T9405]  proc_fail_nth_read+0x1e8/0x260
[  233.692051][ T9405]  ? proc_fault_inject_write+0x360/0x360
[  233.697694][ T9405]  ? fsnotify_perm+0x271/0x5e0
[  233.702449][ T9405]  ? proc_fault_inject_write+0x360/0x360
[  233.708072][ T9405]  vfs_read+0x28b/0x970
[  233.712224][ T9405]  ? kernel_read+0x1e0/0x1e0
[  233.716799][ T9405]  ? __fget_files+0x28/0x4b0
[  233.721375][ T9405]  ? __fget_files+0x28/0x4b0
[  233.725967][ T9405]  ? __fget_files+0x43d/0x4b0
[  233.730668][ T9405]  ? __fdget_pos+0x2a3/0x330
[  233.735275][ T9405]  ? ksys_read+0x75/0x260
[  233.739620][ T9405]  ksys_read+0x150/0x260
[  233.743879][ T9405]  ? vfs_write+0x990/0x990
[  233.748307][ T9405]  ? lockdep_hardirqs_on+0x98/0x150
[  233.753496][ T9405]  do_syscall_64+0x55/0xb0
[  233.757893][ T9405]  ? clear_bhb_loop+0x40/0x90
[  233.762554][ T9405]  ? clear_bhb_loop+0x40/0x90
[  233.767214][ T9405]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.773090][ T9405] RIP: 0033:0x7f8835f5d68e
[  233.777490][ T9405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  233.797088][ T9405] RSP: 002b:00007f8836e27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  233.805514][ T9405] RAX: ffffffffffffffda RBX: 00007f8836e286c0 RCX: 00007f8835f5d68e
[  233.813470][ T9405] RDX: 000000000000000f RSI: 00007f8836e280a0 RDI: 0000000000000008
[  233.821424][ T9405] RBP: 00007f8836e28090 R08: 0000000000000000 R09: 0000000000000000
[  233.829383][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.837348][ T9405] R13: 00007f8836216128 R14: 00007f8836216090 R15: 00007ffcbe1c7fa8
[  233.845332][ T9405]  </TASK>
[  233.851602][ T9410] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  233.866915][ T9410] __nla_validate_parse: 5 callbacks suppressed
[  233.866965][ T9410] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1290'.
[  234.175490][ T9423] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1294'.
[  234.197503][ T9423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.219678][ T9424] team0: Device hsr_slave_0 failed to register rx_handler
[  234.244286][ T9425] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1301'.
[  234.261045][ T9425] netlink: zone id is out of range
[  234.270734][ T9425] netlink: zone id is out of range
[  234.280883][ T9425] netlink: zone id is out of range
[  234.302634][ T9425] netlink: zone id is out of range
[  234.310741][ T9425] netlink: zone id is out of range
[  234.316250][ T9425] netlink: zone id is out of range
[  234.331413][ T9425] netlink: zone id is out of range
[  234.339728][ T9425] netlink: zone id is out of range
[  234.350991][ T9425] netlink: zone id is out of range
[  234.443296][ T9424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1295'.
[  234.465794][ T9428] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1296'.
[  234.921787][ T9437] validate_nla: 2 callbacks suppressed
[  234.921825][ T9437] netlink: 'syz.0.1300': attribute type 10 has an invalid length.
[  234.971108][ T9437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1300'.
[  235.149819][ T9451] netlink: 'syz.3.1306': attribute type 4 has an invalid length.
[  235.165644][ T9451] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1306'.
[  235.203841][ T9447] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  235.249220][ T9447] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1304'.
[  235.402108][ T9457] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1307'.
[  235.745970][ T9477] netlink: 'syz.3.1318': attribute type 10 has an invalid length.
[  235.806706][ T9477] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  235.935615][   T11] wlan1: Trigger new scan to find an IBSS to join
[  236.113628][ T9495] syz.3.1326[9495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  236.113844][ T9495] syz.3.1326[9495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  236.276828][ T9501] syzkaller0: entered promiscuous mode
[  236.298726][ T9501] syzkaller0: entered allmulticast mode
[  236.344255][ T9506] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1330'.
[  237.933443][ T3461] wlan1: Trigger new scan to find an IBSS to join
[  241.904261][ T9564] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1355'.
[  241.932681][ T1326] wlan1: Trigger new scan to find an IBSS to join
[  241.939457][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  241.968849][ T9570] syzkaller0: entered promiscuous mode
[  241.978327][ T9570] syzkaller0: entered allmulticast mode
[  242.897548][ T1326] wlan1: Creating new IBSS network, BSSID 1e:5f:1b:bd:0a:9e
[  242.958835][  T139] wlan1: Creating new IBSS network, BSSID ba:f9:28:a2:e5:c5
[  244.270149][ T9615] netlink: 'syz.1.1376': attribute type 27 has an invalid length.
[  248.451602][ T9680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  248.458876][ T9680] IPv6: NLM_F_CREATE should be set when creating new route
[  248.466194][ T9680] IPv6: NLM_F_CREATE should be set when creating new route
[  248.473470][ T9680] IPv6: NLM_F_CREATE should be set when creating new route
[  249.312209][ T9713] netlink: 'syz.0.1417': attribute type 2 has an invalid length.
[  249.347995][ T9713] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1417'.
[  249.647188][ T9722] netlink: 'syz.0.1422': attribute type 10 has an invalid length.
[  249.681101][ T9722] macvlan1: entered allmulticast mode
[  250.529024][ T9729] syzkaller0: entered promiscuous mode
[  250.539210][ T9729] syzkaller0: entered allmulticast mode
[  252.165253][ T9756] netlink: 'syz.2.1435': attribute type 13 has an invalid length.
[  252.182902][ T9756] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1435'.
[  252.195893][ T9756] erspan0: refused to change device tx_queue_len
[  252.208157][ T9756] net_ratelimit: 335 callbacks suppressed
[  252.208169][ T9756] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  252.312108][ T9768] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  252.849234][ T9781] netlink: 'syz.1.1443': attribute type 10 has an invalid length.
[  252.911770][ T9780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1443'.
[  253.751001][ T9784] netlink: 'syz.2.1444': attribute type 10 has an invalid length.
[  253.809315][ T9784] macvlan1: entered allmulticast mode
[  254.322143][ T9790] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  254.359553][ T9794] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1447'.
[  254.422274][ T9791] syzkaller0: entered promiscuous mode
[  254.430295][ T9791] syzkaller0: entered allmulticast mode
[  255.777434][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  255.784609][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  256.238997][ T9805] netlink: 'syz.3.1452': attribute type 10 has an invalid length.
[  256.247322][ T9805] team0: Device hsr_slave_0 failed to register rx_handler
[  256.261043][ T9807] netlink: 'syz.1.1453': attribute type 10 has an invalid length.
[  256.270620][ T9808] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1452'.
[  256.290257][ T9813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1453'.
[  256.322978][ T9815] netlink: 'syz.2.1455': attribute type 10 has an invalid length.
[  256.349633][ T9816] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1455'.
[  256.587762][ T9828] netlink: 'syz.3.1457': attribute type 1 has an invalid length.
[  256.604883][ T9819] syzkaller0: entered promiscuous mode
[  256.610380][ T9819] syzkaller0: entered allmulticast mode
[  256.621586][ T9828] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1457'.
[  256.632588][ T9823] netlink: 'syz.1.1458': attribute type 10 has an invalid length.
[  256.669884][ T9823] macvlan1: entered allmulticast mode
[  256.804392][ T9823] veth1_vlan: entered allmulticast mode
[  256.946235][ T9823] team0: Port device macvlan1 added
[  256.974076][ T1326] wlan1: Trigger new scan to find an IBSS to join
[  257.040580][ T9825] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  257.070138][ T9829] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1460'.
[  257.092604][ T9823] syz.1.1458 (9823) used greatest stack depth: 19048 bytes left
[  258.593714][ T9843] netlink: 'syz.1.1466': attribute type 10 has an invalid length.
[  258.602611][ T9843] team0: Device hsr_slave_0 failed to register rx_handler
[  258.616327][ T9845] netlink: 'syz.2.1467': attribute type 10 has an invalid length.
[  258.624480][ T9849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1467'.
[  258.644352][ T9850] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1466'.
[  258.948473][ T1320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  258.997115][ T9860] netlink: 'syz.3.1472': attribute type 10 has an invalid length.
[  259.019993][ T9860] macvlan1: entered allmulticast mode
[  259.097151][ T9860] veth1_vlan: entered allmulticast mode
[  259.196140][ T9860] team0: Port device macvlan1 added
[  259.209380][ T9863] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  259.338623][ T9860] syz.3.1472 (9860) used greatest stack depth: 17768 bytes left
[  259.362778][ T9862] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1473'.
[  259.415012][ T9871] FAULT_INJECTION: forcing a failure.
[  259.415012][ T9871] name failslab, interval 1, probability 0, space 0, times 0
[  259.431616][ T9871] CPU: 0 PID: 9871 Comm: syz.1.1477 Not tainted syzkaller #0
[  259.439016][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  259.449072][ T9871] Call Trace:
[  259.452342][ T9871]  <TASK>
[  259.455265][ T9871]  dump_stack_lvl+0x18c/0x250
[  259.459941][ T9871]  ? show_regs_print_info+0x20/0x20
[  259.465131][ T9871]  ? load_image+0x420/0x420
[  259.469630][ T9871]  ? verify_lock_unused+0x140/0x140
[  259.474826][ T9871]  ? perf_trace_lock+0xfc/0x3b0
[  259.479680][ T9871]  should_fail_ex+0x39d/0x4d0
[  259.484357][ T9871]  should_failslab+0x9/0x20
[  259.488854][ T9871]  slab_pre_alloc_hook+0x59/0x310
[  259.493877][ T9871]  kmem_cache_alloc+0x5a/0x2d0
[  259.498638][ T9871]  ? skb_clone+0x1eb/0x370
[  259.503049][ T9871]  skb_clone+0x1eb/0x370
[  259.507282][ T9871]  __netlink_deliver_tap+0x41c/0x830
[  259.512577][ T9871]  ? netlink_deliver_tap+0x2e/0x1b0
[  259.517770][ T9871]  netlink_deliver_tap+0x19c/0x1b0
[  259.522884][ T9871]  netlink_unicast+0x72c/0x8d0
[  259.527652][ T9871]  netlink_sendmsg+0x8d0/0xbf0
[  259.532424][ T9871]  ? netlink_getsockopt+0x590/0x590
[  259.537621][ T9871]  ? aa_sock_msg_perm+0x94/0x150
[  259.542550][ T9871]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  259.547829][ T9871]  ? security_socket_sendmsg+0x80/0xa0
[  259.553279][ T9871]  ? netlink_getsockopt+0x590/0x590
[  259.558471][ T9871]  ____sys_sendmsg+0x5ba/0x960
[  259.563230][ T9871]  ? __asan_memset+0x22/0x40
[  259.567816][ T9871]  ? __sys_sendmsg_sock+0x30/0x30
[  259.572826][ T9871]  ? __import_iovec+0x5f2/0x850
[  259.577677][ T9871]  ? import_iovec+0x73/0xa0
[  259.582170][ T9871]  ___sys_sendmsg+0x2a6/0x360
[  259.586839][ T9871]  ? __sys_sendmsg+0x2a0/0x2a0
[  259.591608][ T9871]  ? __lock_acquire+0x7d40/0x7d40
[  259.596643][ T9871]  __se_sys_sendmsg+0x1c2/0x2b0
[  259.601484][ T9871]  ? __x64_sys_sendmsg+0x80/0x80
[  259.606422][ T9871]  ? lockdep_hardirqs_on+0x98/0x150
[  259.611615][ T9871]  do_syscall_64+0x55/0xb0
[  259.616018][ T9871]  ? clear_bhb_loop+0x40/0x90
[  259.620685][ T9871]  ? clear_bhb_loop+0x40/0x90
[  259.625356][ T9871]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  259.631246][ T9871] RIP: 0033:0x7f483699ce59
[  259.635652][ T9871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.655259][ T9871] RSP: 002b:00007f48378b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  259.663669][ T9871] RAX: ffffffffffffffda RBX: 00007f4836c15fa0 RCX: 00007f483699ce59
[  259.671637][ T9871] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  259.679606][ T9871] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  259.687577][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.695537][ T9871] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  259.703513][ T9871]  </TASK>
[  259.752775][ T9871] netlink: 'syz.1.1477': attribute type 4 has an invalid length.
[  259.766406][ T9871] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1477'.
[  259.794045][ T9871] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  259.826624][ T9869] netlink: 'syz.3.1476': attribute type 10 has an invalid length.
[  259.867131][ T9875] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1478'.
[  259.911997][ T9875] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  259.932968][ T1326] wlan1: Trigger new scan to find an IBSS to join
[  259.941914][ T9869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1476'.
[  260.077691][ T9883] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1482'.
[  260.184108][ T9888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1483'.
[  260.251514][ T9888] pim6reg1: entered promiscuous mode
[  260.274126][ T9888] pim6reg1: entered allmulticast mode
[  260.514961][ T9894] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  260.525792][ T9897] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1486'.
[  260.904586][ T9907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1492'.
[  260.975773][ T9913] team0: Device hsr_slave_0 failed to register rx_handler
[  261.059478][ T9913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1494'.
[  261.432168][ T9931] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  261.474644][ T9931] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1501'.
[  261.729301][ T9939] validate_nla: 4 callbacks suppressed
[  261.729418][ T9939] netlink: 'syz.0.1505': attribute type 10 has an invalid length.
[  261.935200][ T1326] wlan1: Trigger new scan to find an IBSS to join
[  261.944725][ T9953] netlink: 'syz.1.1511': attribute type 10 has an invalid length.
[  261.970260][ T9953] team0: Device hsr_slave_0 failed to register rx_handler
[  262.367971][ T9968] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  262.747615][ T9977] syzkaller0: entered promiscuous mode
[  262.750192][ T9985] netlink: 'syz.1.1520': attribute type 1 has an invalid length.
[  262.753449][ T9977] syzkaller0: entered allmulticast mode
[  262.791255][ T9984] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  262.907258][ T9982] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  262.941772][ T9980] netlink: 'syz.0.1523': attribute type 10 has an invalid length.
[  262.978444][ T3461] wlan1: Trigger new scan to find an IBSS to join
[  264.585141][ T9986] __nla_validate_parse: 6 callbacks suppressed
[  264.585153][ T9986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1523'.
[  264.616065][T10001] netlink: 'syz.2.1529': attribute type 10 has an invalid length.
[  264.638134][T10002] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1529'.
[  264.956870][T10013] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  264.985521][ T1320] wlan1: Trigger new scan to find an IBSS to join
[  264.992126][ T1320] wlan1: Trigger new scan to find an IBSS to join
[  265.071775][T10007] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  265.116973][T10013] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1535'.
[  265.195324][T10007] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1531'.
[  265.213181][T10018] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  265.277498][T10018] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1537'.
[  265.539136][T10024] netlink: 'syz.3.1540': attribute type 10 has an invalid length.
[  265.574680][T10024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1540'.
[  265.606577][T10028] netlink: 'syz.1.1542': attribute type 10 has an invalid length.
[  265.618425][T10028] team0: Device hsr_slave_0 failed to register rx_handler
[  265.838954][T10028] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1542'.
[  265.951396][T10041] netlink: 'syz.2.1546': attribute type 1 has an invalid length.
[  265.964938][T10041] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1546'.
[  265.965729][T10038] syzkaller0: entered promiscuous mode
[  265.974206][T10038] syzkaller0: entered allmulticast mode
[  265.987653][T10040] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  266.015897][T10044] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1547'.
[  267.747513][T10053] netlink: 'syz.0.1558': attribute type 10 has an invalid length.
[  267.760243][T10054] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  267.782684][T10057] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1550'.
[  267.998215][T10066] netlink: 'syz.2.1553': attribute type 10 has an invalid length.
[  268.291249][T10081] netlink: 'syz.2.1560': attribute type 10 has an invalid length.
[  268.541060][T10085] syzkaller0: entered promiscuous mode
[  268.546747][T10085] syzkaller0: entered allmulticast mode
[  269.916635][T10155] netlink: 'syz.2.1568': attribute type 1 has an invalid length.
[  269.924702][T10155] __nla_validate_parse: 3 callbacks suppressed
[  269.924714][T10155] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1568'.
[  269.940806][   T12] wlan1: Trigger new scan to find an IBSS to join
[  269.942750][T10137] wlan1: Trigger new scan to find an IBSS to join
[  269.947801][ T1320] wlan1: Trigger new scan to find an IBSS to join
[  270.717178][T10091] netlink: 'syz.1.1564': attribute type 10 has an invalid length.
[  270.727150][T10091] team0: Device hsr_slave_0 failed to register rx_handler
[  270.738195][T10098] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1564'.
[  270.757954][T10153] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1568'.
[  270.777555][T10153] bridge_slave_1: default FDB implementation only supports local addresses
[  270.912055][ T1326] wlan1: Creating new IBSS network, BSSID 16:9b:6c:b9:ca:71
[  271.090079][T10169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1573'.
[  271.199202][T10177] netlink: 'syz.0.1578': attribute type 10 has an invalid length.
[  271.362021][T10177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1578'.
[  271.544711][T10185] syzkaller0: entered promiscuous mode
[  271.559169][T10185] syzkaller0: entered allmulticast mode
[  272.893954][ T1326] wlan1: Creating new IBSS network, BSSID de:a3:e8:70:71:cd
[  273.331433][T10212] netlink: 'syz.2.1590': attribute type 10 has an invalid length.
[  273.339769][T10213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1590'.
[  273.395884][T10216] FAULT_INJECTION: forcing a failure.
[  273.395884][T10216] name failslab, interval 1, probability 0, space 0, times 0
[  273.438667][T10216] CPU: 1 PID: 10216 Comm: syz.0.1591 Not tainted syzkaller #0
[  273.446164][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  273.456234][T10216] Call Trace:
[  273.459533][T10216]  <TASK>
[  273.462478][T10216]  dump_stack_lvl+0x18c/0x250
[  273.467180][T10216]  ? show_regs_print_info+0x20/0x20
[  273.472395][T10216]  ? load_image+0x420/0x420
[  273.476926][T10216]  ? __might_sleep+0xe0/0xe0
[  273.481538][T10216]  ? __lock_acquire+0x7d40/0x7d40
[  273.486583][T10216]  should_fail_ex+0x39d/0x4d0
[  273.491286][T10216]  should_failslab+0x9/0x20
[  273.495809][T10216]  slab_pre_alloc_hook+0x59/0x310
[  273.500853][T10216]  ? __lock_acquire+0x7d40/0x7d40
[  273.505892][T10216]  kmem_cache_alloc+0x5a/0x2d0
[  273.510665][T10216]  ? security_file_alloc+0x34/0x120
[  273.515874][T10216]  security_file_alloc+0x34/0x120
[  273.520911][T10216]  init_file+0x94/0x1f0
[  273.525087][T10216]  alloc_empty_file+0xb7/0x1d0
[  273.529876][T10216]  path_openat+0x113/0x3230
[  273.534412][T10216]  ? __kasan_slab_alloc+0x6c/0x80
[  273.539449][T10216]  ? do_sys_openat2+0xda/0x1d0
[  273.544212][T10216]  ? __x64_sys_openat+0x139/0x160
[  273.549244][T10216]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.555305][T10216]  ? verify_lock_unused+0x140/0x140
[  273.560492][T10216]  ? do_filp_open+0x430/0x430
[  273.565164][T10216]  ? __virt_addr_valid+0x18c/0x540
[  273.570272][T10216]  do_filp_open+0x1f5/0x430
[  273.574770][T10216]  ? vfs_tmpfile+0x490/0x490
[  273.579365][T10216]  ? _raw_spin_unlock+0x28/0x40
[  273.584206][T10216]  ? alloc_fd+0x58f/0x630
[  273.588531][T10216]  do_sys_openat2+0x134/0x1d0
[  273.593203][T10216]  ? do_sys_open+0xe0/0xe0
[  273.597609][T10216]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  273.603587][T10216]  ? lock_chain_count+0x20/0x20
[  273.608438][T10216]  __x64_sys_openat+0x139/0x160
[  273.613280][T10216]  do_syscall_64+0x55/0xb0
[  273.617683][T10216]  ? clear_bhb_loop+0x40/0x90
[  273.622350][T10216]  ? clear_bhb_loop+0x40/0x90
[  273.627018][T10216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.632903][T10216] RIP: 0033:0x7fdaa9d5d68e
[  273.637308][T10216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  273.656914][T10216] RSP: 002b:00007fdaaabc0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  273.665324][T10216] RAX: ffffffffffffffda RBX: 00007fdaaabc16c0 RCX: 00007fdaa9d5d68e
[  273.673285][T10216] RDX: 0000000000000002 RSI: 00007fdaaabc0f90 RDI: ffffffffffffff9c
[  273.681246][T10216] RBP: 00007fdaaabc1090 R08: 0000000000000000 R09: 0000000000000000
[  273.689221][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.697189][T10216] R13: 00007fdaaa016038 R14: 00007fdaaa015fa0 R15: 00007ffdbd3be938
[  273.705166][T10216]  </TASK>
[  273.768279][T10224] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1595'.
[  274.031197][T10236] netlink: 'syz.0.1601': attribute type 10 has an invalid length.
[  274.083301][T10233] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  274.202015][T10243] netlink: 'syz.3.1603': attribute type 29 has an invalid length.
[  274.218403][T10234] syzkaller0: entered promiscuous mode
[  274.224097][T10234] syzkaller0: entered allmulticast mode
[  274.231151][T10233] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1598'.
[  274.242245][T10243] netlink: 'syz.3.1603': attribute type 29 has an invalid length.
[  274.256407][T10244] netlink: 'syz.3.1603': attribute type 29 has an invalid length.
[  275.934052][T10133] wlan1: Trigger new scan to find an IBSS to join
[  277.939294][T10137] wlan1: Trigger new scan to find an IBSS to join
[  279.180045][T10236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1601'.
[  279.192595][T10243] netlink: 'syz.3.1603': attribute type 29 has an invalid length.
[  279.408110][T10270] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  279.458491][T10270] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1613'.
[  279.588735][T10274] netlink: 'syz.3.1614': attribute type 10 has an invalid length.
[  279.662483][T10274] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1614'.
[  279.885322][T10289] netlink: 'syz.2.1621': attribute type 10 has an invalid length.
[  280.125373][T10289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1621'.
[  280.609863][T10314] netlink: 'syz.2.1632': attribute type 10 has an invalid length.
[  280.672024][T10314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1632'.
[  280.973906][T10135] wlan1: Trigger new scan to find an IBSS to join
[  281.267196][T10350] veth1_macvtap: left promiscuous mode
[  281.708040][T10354] netlink: 'syz.3.1649': attribute type 10 has an invalid length.
[  281.932867][T10137] wlan1: Trigger new scan to find an IBSS to join
[  281.968752][T10352] sit0: entered allmulticast mode
[  282.018492][T10354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1649'.
[  282.224148][T10375] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  282.260672][T10375] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1656'.
[  282.344361][T10379] netlink: 'syz.1.1658': attribute type 10 has an invalid length.
[  282.437503][T10384] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  282.481918][T10386] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1660'.
[  282.729317][T10397] netlink: 'syz.1.1663': attribute type 1 has an invalid length.
[  282.739232][T10397] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1663'.
[  282.901006][T10393] syzkaller0: entered promiscuous mode
[  282.917322][T10393] syzkaller0: entered allmulticast mode
[  282.932218][T10402] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  284.268557][T10395] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1666'.
[  284.282479][T10400] netlink: 'syz.2.1667': attribute type 10 has an invalid length.
[  284.290748][T10403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1667'.
[  284.683574][T10414] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  284.754558][T10414] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1672'.
[  285.032336][T10430] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  285.068257][T10137] wlan1: Trigger new scan to find an IBSS to join
[  285.125384][T10426] netlink: 'syz.2.1677': attribute type 10 has an invalid length.
[  285.227194][T10435] netlink: 'syz.3.1679': attribute type 1 has an invalid length.
[  285.245839][T10435] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1679'.
[  285.250097][T10429] syzkaller0: entered promiscuous mode
[  285.261219][T10429] syzkaller0: entered allmulticast mode
[  285.271793][T10426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1677'.
[  285.304281][T10424] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1676'.
[  286.721298][T10441] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1683'.
[  286.735479][T10447] netlink: 'syz.0.1685': attribute type 10 has an invalid length.
[  286.744779][T10450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1685'.
[  286.972989][   T49] wlan1: Trigger new scan to find an IBSS to join
[  287.182218][T10468] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  287.206882][T10466] netlink: 'syz.3.1692': attribute type 10 has an invalid length.
[  287.216730][T10472] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.1694'.
[  287.237329][T10466] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1692'.
[  287.311581][T10472] netlink: 'syz.2.1694': attribute type 10 has an invalid length.
[  287.371678][T10476] veth1_vlan: entered allmulticast mode
[  287.378033][T10476] macvlan1: entered promiscuous mode
[  287.542165][T10479] netlink: 'syz.3.1696': attribute type 10 has an invalid length.
[  287.558266][T10479] team0: Device hsr_slave_0 failed to register rx_handler
[  287.657068][T10480] syzkaller0: entered promiscuous mode
[  287.680229][T10480] syzkaller0: entered allmulticast mode
[  287.702660][T10480] netlink: 'syz.0.1697': attribute type 1 has an invalid length.
[  289.594948][T10499] netlink: 'syz.2.1704': attribute type 10 has an invalid length.
[  289.603558][T10504] __nla_validate_parse: 5 callbacks suppressed
[  289.603569][T10504] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1705'.
[  289.622456][T10503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1704'.
[  289.799385][T10516] netlink: 'syz.3.1710': attribute type 10 has an invalid length.
[  289.814736][T10516] team0: Device hsr_slave_0 failed to register rx_handler
[  289.950793][T10523] netlink: 'syz.2.1712': attribute type 10 has an invalid length.
[  289.959152][T10528] FAULT_INJECTION: forcing a failure.
[  289.959152][T10528] name failslab, interval 1, probability 0, space 0, times 0
[  289.959179][T10528] CPU: 1 PID: 10528 Comm: syz.0.1715 Not tainted syzkaller #0
[  289.959196][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  289.959207][T10528] Call Trace:
[  289.959214][T10528]  <TASK>
[  289.959222][T10528]  dump_stack_lvl+0x18c/0x250
[  289.959249][T10528]  ? show_regs_print_info+0x20/0x20
[  289.959269][T10528]  ? load_image+0x420/0x420
[  289.959292][T10528]  ? perf_trace_lock_acquire+0x104/0x410
[  289.959319][T10528]  ? verify_lock_unused+0x140/0x140
[  289.959340][T10528]  ? perf_trace_lock_acquire+0x104/0x410
[  289.959369][T10528]  should_fail_ex+0x39d/0x4d0
[  289.959402][T10528]  should_failslab+0x9/0x20
[  289.959425][T10528]  slab_pre_alloc_hook+0x59/0x310
[  289.959455][T10528]  kmem_cache_alloc+0x5a/0x2d0
[  289.959477][T10528]  ? skb_clone+0x1eb/0x370
[  289.959503][T10528]  skb_clone+0x1eb/0x370
[  289.959526][T10528]  __netlink_deliver_tap+0x41c/0x830
[  289.959564][T10528]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.959591][T10528]  netlink_deliver_tap+0x19c/0x1b0
[  289.959617][T10528]  netlink_unicast+0x72c/0x8d0
[  289.959653][T10528]  netlink_sendmsg+0x8d0/0xbf0
[  289.959688][T10528]  ? netlink_getsockopt+0x590/0x590
[  289.959716][T10528]  ? aa_sock_msg_perm+0x94/0x150
[  289.959741][T10528]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  289.959762][T10528]  ? security_socket_sendmsg+0x80/0xa0
[  289.959781][T10528]  ? netlink_getsockopt+0x590/0x590
[  289.959815][T10528]  ____sys_sendmsg+0x5ba/0x960
[  289.959841][T10528]  ? __asan_memset+0x22/0x40
[  289.959863][T10528]  ? __sys_sendmsg_sock+0x30/0x30
[  289.959880][T10528]  ? __import_iovec+0x5f2/0x850
[  289.959908][T10528]  ? import_iovec+0x73/0xa0
[  289.959930][T10528]  ___sys_sendmsg+0x2a6/0x360
[  289.959948][T10528]  ? get_pid_task+0x20/0x1e0
[  289.959976][T10528]  ? __sys_sendmsg+0x2a0/0x2a0
[  289.960018][T10528]  ? __lock_acquire+0x7d40/0x7d40
[  289.960067][T10528]  __se_sys_sendmsg+0x1c2/0x2b0
[  289.960090][T10528]  ? __x64_sys_sendmsg+0x80/0x80
[  289.960126][T10528]  ? lockdep_hardirqs_on+0x98/0x150
[  289.960152][T10528]  do_syscall_64+0x55/0xb0
[  289.960168][T10528]  ? clear_bhb_loop+0x40/0x90
[  289.960188][T10528]  ? clear_bhb_loop+0x40/0x90
[  289.960211][T10528]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  289.960232][T10528] RIP: 0033:0x7fdaa9d9ce59
[  289.960376][T10135] wlan1: Trigger new scan to find an IBSS to join
[  289.972817][T10528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.972834][T10528] RSP: 002b:00007fdaaabc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.972854][T10528] RAX: ffffffffffffffda RBX: 00007fdaaa015fa0 RCX: 00007fdaa9d9ce59
[  289.972867][T10528] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003
[  289.972878][T10528] RBP: 00007fdaaabc1090 R08: 0000000000000000 R09: 0000000000000000
[  289.972889][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.972899][T10528] R13: 00007fdaaa016038 R14: 00007fdaaa015fa0 R15: 00007ffdbd3be938
[  289.972929][T10528]  </TASK>
[  290.007493][T10523] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1712'.
[  290.159361][T10530] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1712'.
[  290.248837][T10516] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1710'.
[  290.267244][T10531] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1712'.
[  290.331382][T10528] netlink: 'syz.0.1715': attribute type 10 has an invalid length.
[  290.341759][T10528] hsr0: entered allmulticast mode
[  290.346932][T10528] hsr_slave_0: entered allmulticast mode
[  290.364790][T10528] hsr_slave_1: entered allmulticast mode
[  290.407325][T10528] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  290.427323][T10528] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  290.440007][T10528] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  290.491727][T10528] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  290.628956][T10534] netlink: 'syz.3.1716': attribute type 10 has an invalid length.
[  290.650417][T10534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1716'.
[  290.744473][T10536] syzkaller0: entered promiscuous mode
[  290.779701][T10536] syzkaller0: entered allmulticast mode
[  290.793139][T10540] netlink: 'syz.2.1717': attribute type 1 has an invalid length.
[  290.802444][T10539] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  290.824492][T10540] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1717'.
[  291.960848][T10133] wlan1: Trigger new scan to find an IBSS to join
[  292.903816][   T12] wlan1: Trigger new scan to find an IBSS to join
[  292.916363][T10133] wlan1: Creating new IBSS network, BSSID 82:72:9b:f7:29:ba
[  293.405434][T10556] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  293.414729][T10560] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1724'.
[  293.433353][T10563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1725'.
[  293.527459][T10568] FAULT_INJECTION: forcing a failure.
[  293.527459][T10568] name failslab, interval 1, probability 0, space 0, times 0
[  293.552651][T10568] CPU: 1 PID: 10568 Comm: syz.1.1726 Not tainted syzkaller #0
[  293.560150][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  293.570213][T10568] Call Trace:
[  293.573495][T10568]  <TASK>
[  293.576415][T10568]  dump_stack_lvl+0x18c/0x250
[  293.581089][T10568]  ? show_regs_print_info+0x20/0x20
[  293.586279][T10568]  ? load_image+0x420/0x420
[  293.590784][T10568]  should_fail_ex+0x39d/0x4d0
[  293.595462][T10568]  should_failslab+0x9/0x20
[  293.599960][T10568]  slab_pre_alloc_hook+0x59/0x310
[  293.604984][T10568]  ? nf_ct_ext_add+0x1ab/0x440
[  293.609743][T10568]  ? nf_ct_ext_add+0x1ab/0x440
[  293.614499][T10568]  __kmem_cache_alloc_node+0x53/0x250
[  293.619867][T10568]  ? nf_ct_ext_add+0x1ab/0x440
[  293.624635][T10568]  __kmalloc_node_track_caller+0xa2/0x230
[  293.630366][T10568]  krealloc+0x86/0x120
[  293.634437][T10568]  nf_ct_ext_add+0x1ab/0x440
[  293.639030][T10568]  init_conntrack+0x69c/0xf10
[  293.643704][T10568]  ? early_drop+0x7f0/0x7f0
[  293.648203][T10568]  ? nf_conntrack_find_get+0x650/0x650
[  293.653654][T10568]  ? __local_bh_enable_ip+0x13a/0x1c0
[  293.659018][T10568]  ? __siphash_unaligned+0x22e/0x3a0
[  293.664315][T10568]  nf_conntrack_in+0xc06/0x15c0
[  293.669187][T10568]  ? nf_ct_pernet+0x270/0x270
[  293.673858][T10568]  ? ipt_do_table+0x2c1/0x15e0
[  293.678623][T10568]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  293.684069][T10568]  ? get_random_u32+0x16f/0x910
[  293.688928][T10568]  ? ipv4_conntrack_local+0x123/0x200
[  293.694303][T10568]  ? ipv4_conntrack_in+0x20/0x20
[  293.699243][T10568]  nf_hook_slow+0xbd/0x200
[  293.703660][T10568]  ? nf_hook+0x390/0x390
[  293.707893][T10568]  nf_hook+0x228/0x390
[  293.711951][T10568]  ? nf_hook+0xa2/0x390
[  293.716098][T10568]  ? __ip_local_out+0x5f0/0x5f0
[  293.720938][T10568]  ? nf_hook+0x390/0x390
[  293.725180][T10568]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  293.730027][T10568]  ? ip_fast_csum+0x1ee/0x2b0
[  293.734696][T10568]  __ip_local_out+0x4db/0x5f0
[  293.739362][T10568]  ? nf_hook+0x390/0x390
[  293.743595][T10568]  ip_send_skb+0x4c/0x1d0
[  293.747915][T10568]  udp_send_skb+0xa37/0x13a0
[  293.752514][T10568]  udp_sendmsg+0x743/0x23b0
[  293.757024][T10568]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  293.761866][T10568]  ? udp_cmsg_send+0x350/0x350
[  293.766651][T10568]  ? aa_sk_perm+0x83c/0x970
[  293.771155][T10568]  ? aa_af_perm+0x330/0x330
[  293.775648][T10568]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  293.782053][T10568]  ? sock_rps_record_flow+0x19/0x3f0
[  293.787332][T10568]  ? inet_sendmsg+0x7c/0x2f0
[  293.791913][T10568]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  293.797189][T10568]  ? security_socket_sendmsg+0x80/0xa0
[  293.802637][T10568]  ? inet_send_prepare+0x260/0x260
[  293.807740][T10568]  ____sys_sendmsg+0x5ba/0x960
[  293.812552][T10568]  ? __sys_sendmsg_sock+0x30/0x30
[  293.817572][T10568]  ? __import_iovec+0x3fa/0x850
[  293.822429][T10568]  ? import_iovec+0x73/0xa0
[  293.826929][T10568]  ___sys_sendmsg+0x2a6/0x360
[  293.831600][T10568]  ? get_pid_task+0x20/0x1e0
[  293.836187][T10568]  ? __sys_sendmsg+0x2a0/0x2a0
[  293.840955][T10568]  ? __lock_acquire+0x7d40/0x7d40
[  293.845991][T10568]  __se_sys_sendmsg+0x1c2/0x2b0
[  293.850833][T10568]  ? __x64_sys_sendmsg+0x80/0x80
[  293.855773][T10568]  ? lockdep_hardirqs_on+0x98/0x150
[  293.860969][T10568]  do_syscall_64+0x55/0xb0
[  293.865377][T10568]  ? clear_bhb_loop+0x40/0x90
[  293.870051][T10568]  ? clear_bhb_loop+0x40/0x90
[  293.874722][T10568]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  293.880608][T10568] RIP: 0033:0x7f483699ce59
[  293.885029][T10568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.904637][T10568] RSP: 002b:00007f48378b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.913048][T10568] RAX: ffffffffffffffda RBX: 00007f4836c15fa0 RCX: 00007f483699ce59
[  293.921006][T10568] RDX: 0000000020044000 RSI: 00002000000004c0 RDI: 0000000000000006
[  293.928976][T10568] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  293.936935][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.944898][T10568] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  293.952877][T10568]  </TASK>
[  294.053747][T10567] netlink: 'syz.3.1727': attribute type 10 has an invalid length.
[  294.697445][T10589] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  294.721174][T10591] netlink: 'syz.3.1737': attribute type 10 has an invalid length.
[  294.750067][T10591] __nla_validate_parse: 1 callbacks suppressed
[  294.750114][T10591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1737'.
[  294.796030][T10595] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1737'.
[  294.852984][T10595] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1737'.
[  295.078621][T10599] syzkaller0: entered promiscuous mode
[  295.089189][T10599] syzkaller0: entered allmulticast mode
[  296.409953][T10624] FAULT_INJECTION: forcing a failure.
[  296.409953][T10624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  296.429436][T10624] CPU: 1 PID: 10624 Comm: syz.1.1748 Not tainted syzkaller #0
[  296.436921][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  296.446973][T10624] Call Trace:
[  296.450258][T10624]  <TASK>
[  296.453201][T10624]  dump_stack_lvl+0x18c/0x250
[  296.457897][T10624]  ? show_regs_print_info+0x20/0x20
[  296.463110][T10624]  ? load_image+0x420/0x420
[  296.467627][T10624]  ? __might_fault+0xaa/0x120
[  296.472290][T10624]  ? __lock_acquire+0x7d40/0x7d40
[  296.477313][T10624]  should_fail_ex+0x39d/0x4d0
[  296.481986][T10624]  _copy_from_user+0x2f/0xe0
[  296.486575][T10624]  __sys_bpf+0x23e/0x890
[  296.490818][T10624]  ? bpf_link_show_fdinfo+0x390/0x390
[  296.496186][T10624]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  296.502358][T10624]  __x64_sys_bpf+0x7c/0x90
[  296.506778][T10624]  do_syscall_64+0x55/0xb0
[  296.511181][T10624]  ? clear_bhb_loop+0x40/0x90
[  296.515849][T10624]  ? clear_bhb_loop+0x40/0x90
[  296.520526][T10624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  296.526410][T10624] RIP: 0033:0x7f483699ce59
[  296.530812][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.550492][T10624] RSP: 002b:00007f48378b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  296.558898][T10624] RAX: ffffffffffffffda RBX: 00007f4836c15fa0 RCX: 00007f483699ce59
[  296.566867][T10624] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  296.574883][T10624] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  296.582856][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.590831][T10624] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  296.598796][T10624]  </TASK>
[  296.897344][T10137] wlan1: Trigger new scan to find an IBSS to join
[  297.718747][T10615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1745'.
[  297.847581][T10635] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1751'.
[  298.124461][T10641] netlink: 'syz.3.1756': attribute type 10 has an invalid length.
[  298.164963][T10641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1756'.
[  298.232010][T10644] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  298.420962][T10653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1759'.
[  298.551162][T10657] syzkaller0: entered promiscuous mode
[  298.557089][T10657] syzkaller0: entered allmulticast mode
[  298.976494][   T49] wlan1: Creating new IBSS network, BSSID 4a:1d:4c:4e:2d:ab
[  300.304418][T10677] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  300.527047][T10694] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  300.725934][T10692] netlink: 'syz.2.1772': attribute type 10 has an invalid length.
[  300.856200][T10692] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1772'.
[  300.899765][T10697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1774'.
[  300.911036][T10708] netlink: 'syz.0.1778': attribute type 6 has an invalid length.
[  300.947863][T10708] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1778'.
[  301.094585][T10711] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  301.426524][T10722] syzkaller0: entered promiscuous mode
[  301.432489][T10722] syzkaller0: entered allmulticast mode
[  302.971373][T10725] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  303.005689][T10734] netlink: 'syz.2.1787': attribute type 10 has an invalid length.
[  303.037540][T10736] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1787'.
[  303.994683][T10754] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  304.164851][T10752] netlink: 'syz.2.1791': attribute type 10 has an invalid length.
[  304.228287][T10751] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'.
[  304.292045][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1791'.
[  304.622616][T10767] syzkaller0: entered promiscuous mode
[  304.628221][T10767] syzkaller0: entered allmulticast mode
[  304.635711][T10765] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  304.649990][T10765] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  307.933626][ T1326] wlan1: Trigger new scan to find an IBSS to join
[  309.314415][T10783] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  309.328123][T10788] netlink: 'syz.1.1805': attribute type 10 has an invalid length.
[  309.348971][T10788] geneve0: entered promiscuous mode
[  309.368591][T10788] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  309.507991][T10796] netlink: 'syz.1.1808': attribute type 10 has an invalid length.
[  309.526250][T10796] team0: Device hsr_slave_0 failed to register rx_handler
[  309.622704][T10802] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1808'.
[  309.716893][T10799] netlink: set zone limit has 8 unknown bytes
[  309.768897][T10799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1809'.
[  310.120645][T10815] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  310.221804][T10813] netlink: 'syz.0.1814': attribute type 10 has an invalid length.
[  310.271371][T10813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1814'.
[  310.511661][T10822] syzkaller0: entered promiscuous mode
[  310.533386][T10822] syzkaller0: entered allmulticast mode
[  311.933219][T10135] wlan1: Trigger new scan to find an IBSS to join
[  311.939786][T10133] wlan1: Trigger new scan to find an IBSS to join
[  311.991217][T10135] wlan1: Creating new IBSS network, BSSID 7e:27:ac:24:a4:dc
[  312.707263][T10827] netlink: 'syz.0.1820': attribute type 10 has an invalid length.
[  312.733068][T10842] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  313.095098][T10845] netlink: set zone limit has 8 unknown bytes
[  313.136638][T10845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1826'.
[  313.444465][T10864] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1834'.
[  314.904780][   T49] wlan1: Trigger new scan to find an IBSS to join
[  316.500481][T10869] netlink: 'syz.2.1838': attribute type 10 has an invalid length.
[  316.601996][T10873] syzkaller0: entered promiscuous mode
[  316.628933][T10873] syzkaller0: entered allmulticast mode
[  316.647760][T10874] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  317.219467][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  317.225940][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  318.151158][T10874] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1836'.
[  318.161744][T10884] netlink: 'syz.2.1843': attribute type 10 has an invalid length.
[  318.170221][T10885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1843'.
[  318.411615][T10892] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  318.473555][T10891] netlink: set zone limit has 8 unknown bytes
[  318.491099][T10891] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1844'.
[  318.516475][T10892] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1852'.
[  318.751079][T10903] FAULT_INJECTION: forcing a failure.
[  318.751079][T10903] name failslab, interval 1, probability 0, space 0, times 0
[  318.752284][T10901] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1848'.
[  318.773650][T10903] CPU: 0 PID: 10903 Comm: syz.0.1849 Not tainted syzkaller #0
[  318.781156][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  318.791242][T10903] Call Trace:
[  318.794553][T10903]  <TASK>
[  318.797493][T10903]  dump_stack_lvl+0x18c/0x250
[  318.797536][T10903]  ? show_regs_print_info+0x20/0x20
[  318.797565][T10903]  ? load_image+0x420/0x420
[  318.811970][T10903]  ? verify_lock_unused+0x140/0x140
[  318.817224][T10903]  ? perf_trace_lock_acquire+0x104/0x410
[  318.822925][T10903]  should_fail_ex+0x39d/0x4d0
[  318.827675][T10903]  should_failslab+0x9/0x20
[  318.832231][T10903]  slab_pre_alloc_hook+0x59/0x310
[  318.837327][T10903]  kmem_cache_alloc+0x5a/0x2d0
[  318.842135][T10903]  ? skb_clone+0x1eb/0x370
[  318.846608][T10903]  skb_clone+0x1eb/0x370
[  318.850906][T10903]  __netlink_deliver_tap+0x41c/0x830
[  318.856283][T10903]  ? netlink_deliver_tap+0x2e/0x1b0
[  318.861541][T10903]  netlink_deliver_tap+0x19c/0x1b0
[  318.866716][T10903]  netlink_unicast+0x72c/0x8d0
[  318.871568][T10903]  netlink_sendmsg+0x8d0/0xbf0
[  318.876353][T10903]  ? perf_trace_lock+0x304/0x3b0
[  318.881297][T10903]  ? netlink_getsockopt+0x590/0x590
[  318.886495][T10903]  ? aa_sock_msg_perm+0x94/0x150
[  318.891426][T10903]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  318.896704][T10903]  ? security_socket_sendmsg+0x80/0xa0
[  318.902151][T10903]  ? netlink_getsockopt+0x590/0x590
[  318.907344][T10903]  ____sys_sendmsg+0x5ba/0x960
[  318.912102][T10903]  ? __asan_memset+0x22/0x40
[  318.916689][T10903]  ? __sys_sendmsg_sock+0x30/0x30
[  318.921705][T10903]  ? __import_iovec+0x5f2/0x850
[  318.926558][T10903]  ? import_iovec+0x73/0xa0
[  318.931055][T10903]  ___sys_sendmsg+0x2a6/0x360
[  318.935735][T10903]  ? __sys_sendmsg+0x2a0/0x2a0
[  318.940517][T10903]  ? __lock_acquire+0x7d40/0x7d40
[  318.945555][T10903]  __se_sys_sendmsg+0x1c2/0x2b0
[  318.950395][T10903]  ? __x64_sys_sendmsg+0x80/0x80
[  318.955336][T10903]  ? lockdep_hardirqs_on+0x98/0x150
[  318.960530][T10903]  do_syscall_64+0x55/0xb0
[  318.964935][T10903]  ? clear_bhb_loop+0x40/0x90
[  318.969601][T10903]  ? clear_bhb_loop+0x40/0x90
[  318.974272][T10903]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.980156][T10903] RIP: 0033:0x7fdaa9d9ce59
[  318.984560][T10903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.004152][T10903] RSP: 002b:00007fdaaabc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.012555][T10903] RAX: ffffffffffffffda RBX: 00007fdaaa015fa0 RCX: 00007fdaa9d9ce59
[  319.020517][T10903] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000008
[  319.028475][T10903] RBP: 00007fdaaabc1090 R08: 0000000000000000 R09: 0000000000000000
[  319.036432][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.044392][T10903] R13: 00007fdaaa016038 R14: 00007fdaaa015fa0 R15: 00007ffdbd3be938
[  319.052366][T10903]  </TASK>
[  319.061059][   T49] wlan1: Trigger new scan to find an IBSS to join
[  319.073104][T10903] netlink: 'syz.0.1849': attribute type 12 has an invalid length.
[  319.083402][T10903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1849'.
[  319.273472][T10909] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1851'.
[  319.399620][T10914] netlink: 'syz.0.1853': attribute type 12 has an invalid length.
[  319.429998][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1853'.
[  319.608370][T10918] syzkaller0: entered promiscuous mode
[  319.619226][T10918] syzkaller0: entered allmulticast mode
[  319.632188][T10922] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  320.010236][T10133] wlan1: Creating new IBSS network, BSSID 5e:c2:be:24:78:2d
[  320.902600][T10135] wlan1: Trigger new scan to find an IBSS to join
[  321.020591][T10922] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1858'.
[  321.167149][T10936] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1861'.
[  321.418825][T10946] bridge_slave_1: default FDB implementation only supports local addresses
[  321.652932][T10947] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  322.058940][T10963] syzkaller0: entered promiscuous mode
[  322.077058][T10963] syzkaller0: entered allmulticast mode
[  322.089354][T10959] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  322.110419][T10962] netlink: 'syz.3.1873': attribute type 10 has an invalid length.
[  322.300413][T10974] netlink: 'syz.2.1876': attribute type 10 has an invalid length.
[  322.973978][T10133] wlan1: Trigger new scan to find an IBSS to join
[  323.609758][T10962] __nla_validate_parse: 3 callbacks suppressed
[  323.609769][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1873'.
[  323.625529][T10959] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1871'.
[  323.854231][T10992] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1879'.
[  324.112341][T10994] netlink: 'syz.3.1883': attribute type 10 has an invalid length.
[  324.129842][T10994] team0: Device hsr_slave_0 failed to register rx_handler
[  324.346914][T11003] netlink: 'syz.2.1886': attribute type 10 has an invalid length.
[  324.402568][T11002] FAULT_INJECTION: forcing a failure.
[  324.402568][T11002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.407165][T11007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1883'.
[  324.422327][T11002] CPU: 0 PID: 11002 Comm: syz.0.1885 Not tainted syzkaller #0
[  324.435536][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  324.445604][T11002] Call Trace:
[  324.448897][T11002]  <TASK>
[  324.451845][T11002]  dump_stack_lvl+0x18c/0x250
[  324.456547][T11002]  ? show_regs_print_info+0x20/0x20
[  324.461765][T11002]  ? load_image+0x420/0x420
[  324.466296][T11002]  ? shmem_get_folio_gfp+0x138f/0x2aa0
[  324.471780][T11002]  ? __lock_acquire+0x7d40/0x7d40
[  324.476826][T11002]  ? __rwlock_init+0x150/0x150
[  324.481613][T11002]  should_fail_ex+0x39d/0x4d0
[  324.486325][T11002]  copy_page_from_iter_atomic+0x2a8/0x1580
[  324.492163][T11002]  ? shmem_get_folio_gfp+0x26d8/0x2aa0
[  324.497662][T11002]  ? iov_iter_zero+0x1170/0x1170
[  324.502637][T11002]  ? shmem_write_begin+0x1cf/0x420
[  324.507771][T11002]  generic_perform_write+0x353/0x5c0
[  324.513092][T11002]  ? generic_file_direct_write+0x3e0/0x3e0
[  324.518929][T11002]  ? file_update_time+0x192/0x1a0
[  324.523977][T11002]  shmem_file_write_iter+0xfb/0x120
[  324.529200][T11002]  vfs_write+0x46c/0x990
[  324.533444][T11002]  ? file_end_write+0x250/0x250
[  324.538293][T11002]  ? __fget_files+0x43d/0x4b0
[  324.542971][T11002]  ? __fdget_pos+0x2a3/0x330
[  324.547552][T11002]  ? ksys_write+0x75/0x260
[  324.551968][T11002]  ksys_write+0x150/0x260
[  324.556295][T11002]  ? __ia32_sys_read+0x90/0x90
[  324.561059][T11002]  ? lockdep_hardirqs_on+0x98/0x150
[  324.566254][T11002]  do_syscall_64+0x55/0xb0
[  324.570660][T11002]  ? clear_bhb_loop+0x40/0x90
[  324.575334][T11002]  ? clear_bhb_loop+0x40/0x90
[  324.580014][T11002]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  324.585904][T11002] RIP: 0033:0x7fdaa9d9ce59
[  324.590311][T11002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.609924][T11002] RSP: 002b:00007fdaaabc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  324.618334][T11002] RAX: ffffffffffffffda RBX: 00007fdaaa015fa0 RCX: 00007fdaa9d9ce59
[  324.626303][T11002] RDX: 0000000000040001 RSI: 0000200000000180 RDI: 0000000000000006
[  324.634267][T11002] RBP: 00007fdaaabc1090 R08: 0000000000000000 R09: 0000000000000000
[  324.642230][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.650193][T11002] R13: 00007fdaaa016038 R14: 00007fdaaa015fa0 R15: 00007ffdbd3be938
[  324.658172][T11002]  </TASK>
[  324.723077][T11005] netlink: 'syz.1.1887': attribute type 10 has an invalid length.
[  324.766249][T11003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1886'.
[  324.873744][T11005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1887'.
[  325.154691][T11012] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  325.298259][T11014] syzkaller0: entered promiscuous mode
[  325.307599][T11014] syzkaller0: entered allmulticast mode
[  325.316513][T11012] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1888'.
[  325.319868][T11022] FAULT_INJECTION: forcing a failure.
[  325.319868][T11022] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.339915][T11022] CPU: 1 PID: 11022 Comm: syz.2.1891 Not tainted syzkaller #0
[  325.347397][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  325.357464][T11022] Call Trace:
[  325.360751][T11022]  <TASK>
[  325.363688][T11022]  dump_stack_lvl+0x18c/0x250
[  325.368371][T11022]  ? show_regs_print_info+0x20/0x20
[  325.373563][T11022]  ? load_image+0x420/0x420
[  325.378070][T11022]  ? __lock_acquire+0x7d40/0x7d40
[  325.383094][T11022]  ? snprintf+0xe9/0x140
[  325.387336][T11022]  should_fail_ex+0x39d/0x4d0
[  325.392021][T11022]  _copy_to_user+0x2f/0xa0
[  325.396444][T11022]  simple_read_from_buffer+0xe7/0x150
[  325.401837][T11022]  proc_fail_nth_read+0x1e8/0x260
[  325.406868][T11022]  ? proc_fault_inject_write+0x360/0x360
[  325.412511][T11022]  ? fsnotify_perm+0x271/0x5e0
[  325.417272][T11022]  ? proc_fault_inject_write+0x360/0x360
[  325.422966][T11022]  vfs_read+0x28b/0x970
[  325.427125][T11022]  ? kernel_read+0x1e0/0x1e0
[  325.431716][T11022]  ? __fget_files+0x28/0x4b0
[  325.436300][T11022]  ? __fget_files+0x28/0x4b0
[  325.440886][T11022]  ? __fget_files+0x43d/0x4b0
[  325.445567][T11022]  ? __fdget_pos+0x2a3/0x330
[  325.450149][T11022]  ? ksys_read+0x75/0x260
[  325.454476][T11022]  ksys_read+0x150/0x260
[  325.458720][T11022]  ? vfs_write+0x990/0x990
[  325.463138][T11022]  ? lockdep_hardirqs_on+0x98/0x150
[  325.468337][T11022]  do_syscall_64+0x55/0xb0
[  325.472744][T11022]  ? clear_bhb_loop+0x40/0x90
[  325.477414][T11022]  ? clear_bhb_loop+0x40/0x90
[  325.482097][T11022]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  325.487983][T11022] RIP: 0033:0x7f8835f5d68e
[  325.492397][T11022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  325.512010][T11022] RSP: 002b:00007f8836e27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  325.520428][T11022] RAX: ffffffffffffffda RBX: 00007f8836e286c0 RCX: 00007f8835f5d68e
[  325.528390][T11022] RDX: 000000000000000f RSI: 00007f8836e280a0 RDI: 0000000000000008
[  325.536356][T11022] RBP: 00007f8836e28090 R08: 0000000000000000 R09: 0000000000000000
[  325.544318][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.552280][T11022] R13: 00007f8836216128 R14: 00007f8836216090 R15: 00007ffcbe1c7fa8
[  325.560278][T11022]  </TASK>
[  326.690605][T11037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1896'.
[  327.021239][T11037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1896'.
[  327.038679][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1896'.
[  327.239088][T11048] FAULT_INJECTION: forcing a failure.
[  327.239088][T11048] name failslab, interval 1, probability 0, space 0, times 0
[  327.256702][T11048] CPU: 1 PID: 11048 Comm: syz.3.1900 Not tainted syzkaller #0
[  327.264191][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  327.274261][T11048] Call Trace:
[  327.277549][T11048]  <TASK>
[  327.280489][T11048]  dump_stack_lvl+0x18c/0x250
[  327.285188][T11048]  ? show_regs_print_info+0x20/0x20
[  327.290398][T11048]  ? load_image+0x420/0x420
[  327.294924][T11048]  ? __might_sleep+0xe0/0xe0
[  327.299529][T11048]  ? __lock_acquire+0x7d40/0x7d40
[  327.304584][T11048]  should_fail_ex+0x39d/0x4d0
[  327.309296][T11048]  should_failslab+0x9/0x20
[  327.313819][T11048]  slab_pre_alloc_hook+0x59/0x310
[  327.318865][T11048]  ? find_css_set+0x9fc/0x15d0
[  327.323639][T11048]  __kmem_cache_alloc_node+0x53/0x250
[  327.329018][T11048]  ? find_css_set+0x9fc/0x15d0
[  327.333777][T11048]  kmalloc_trace+0x2a/0xe0
[  327.338199][T11048]  find_css_set+0x9fc/0x15d0
[  327.342797][T11048]  ? cgroup_migrate_prepare_dst+0x6f0/0x6f0
[  327.348695][T11048]  ? mark_lock+0x94/0x320
[  327.353033][T11048]  cgroup_migrate_prepare_dst+0x130/0x6f0
[  327.358755][T11048]  cgroup_attach_task+0x5a6/0x8e0
[  327.363775][T11048]  ? proc_nr_inodes+0x230/0x230
[  327.368642][T11048]  ? cgroup_attach_task+0x25d/0x8e0
[  327.373843][T11048]  ? cgroup_migrate_execute+0xf30/0xf30
[  327.379398][T11048]  ? cgroup_attach_permissions+0x4eb/0x9d0
[  327.385206][T11048]  ? revert_creds+0xae/0xc0
[  327.389708][T11048]  __cgroup_procs_write+0x23a/0x350
[  327.394932][T11048]  cgroup_procs_write+0x27/0x50
[  327.399796][T11048]  ? cgroup_procs_next+0xa0/0xa0
[  327.404736][T11048]  cgroup_file_write+0x2c9/0x690
[  327.409672][T11048]  ? read_lock_is_recursive+0x20/0x20
[  327.415050][T11048]  ? cgroup_seqfile_stop+0xd0/0xd0
[  327.420167][T11048]  ? cgroup_seqfile_stop+0xd0/0xd0
[  327.425271][T11048]  kernfs_fop_write_iter+0x3b6/0x520
[  327.430556][T11048]  vfs_write+0x46c/0x990
[  327.434797][T11048]  ? file_end_write+0x250/0x250
[  327.439655][T11048]  ? __fget_files+0x43d/0x4b0
[  327.444348][T11048]  ? __fdget_pos+0x2a3/0x330
[  327.448937][T11048]  ? ksys_write+0x75/0x260
[  327.453362][T11048]  ksys_write+0x150/0x260
[  327.457718][T11048]  ? __ia32_sys_read+0x90/0x90
[  327.462495][T11048]  ? lockdep_hardirqs_on+0x98/0x150
[  327.467702][T11048]  do_syscall_64+0x55/0xb0
[  327.472109][T11048]  ? clear_bhb_loop+0x40/0x90
[  327.476798][T11048]  ? clear_bhb_loop+0x40/0x90
[  327.481484][T11048]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  327.487381][T11048] RIP: 0033:0x7f8bffb9ce59
[  327.491795][T11048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.511411][T11048] RSP: 002b:00007f8c00ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  327.519821][T11048] RAX: ffffffffffffffda RBX: 00007f8bffe15fa0 RCX: 00007f8bffb9ce59
[  327.527787][T11048] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000007
[  327.535765][T11048] RBP: 00007f8c00ac5090 R08: 0000000000000000 R09: 0000000000000000
[  327.543751][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.551711][T11048] R13: 00007f8bffe16038 R14: 00007f8bffe15fa0 R15: 00007ffd2c4041e8
[  327.559699][T11048]  </TASK>
[  327.581274][T11052] netlink: 'syz.2.1898': attribute type 10 has an invalid length.
[  327.668224][T11042] netlink: 'syz.1.1897': attribute type 3 has an invalid length.
[  327.808562][T11056] FAULT_INJECTION: forcing a failure.
[  327.808562][T11056] name failslab, interval 1, probability 0, space 0, times 0
[  327.832619][T11056] CPU: 0 PID: 11056 Comm: syz.0.1902 Not tainted syzkaller #0
[  327.840121][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  327.850192][T11056] Call Trace:
[  327.853476][T11056]  <TASK>
[  327.856399][T11056]  dump_stack_lvl+0x18c/0x250
[  327.861078][T11056]  ? show_regs_print_info+0x20/0x20
[  327.866266][T11056]  ? load_image+0x420/0x420
[  327.870765][T11056]  ? verify_lock_unused+0x140/0x140
[  327.875958][T11056]  ? perf_trace_lock+0xfc/0x3b0
[  327.880817][T11056]  should_fail_ex+0x39d/0x4d0
[  327.885497][T11056]  should_failslab+0x9/0x20
[  327.889996][T11056]  slab_pre_alloc_hook+0x59/0x310
[  327.895021][T11056]  kmem_cache_alloc+0x5a/0x2d0
[  327.899777][T11056]  ? skb_clone+0x1eb/0x370
[  327.904195][T11056]  skb_clone+0x1eb/0x370
[  327.908429][T11056]  __netlink_deliver_tap+0x41c/0x830
[  327.913719][T11056]  ? netlink_deliver_tap+0x2e/0x1b0
[  327.918916][T11056]  netlink_deliver_tap+0x19c/0x1b0
[  327.924025][T11056]  netlink_unicast+0x72c/0x8d0
[  327.928791][T11056]  netlink_sendmsg+0x8d0/0xbf0
[  327.933565][T11056]  ? netlink_getsockopt+0x590/0x590
[  327.938765][T11056]  ? aa_sock_msg_perm+0x94/0x150
[  327.943702][T11056]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  327.948979][T11056]  ? security_socket_sendmsg+0x80/0xa0
[  327.954433][T11056]  ? netlink_getsockopt+0x590/0x590
[  327.959634][T11056]  ____sys_sendmsg+0x5ba/0x960
[  327.964393][T11056]  ? __asan_memset+0x22/0x40
[  327.968978][T11056]  ? __sys_sendmsg_sock+0x30/0x30
[  327.973989][T11056]  ? __import_iovec+0x5f2/0x850
[  327.978837][T11056]  ? import_iovec+0x73/0xa0
[  327.983332][T11056]  ___sys_sendmsg+0x2a6/0x360
[  327.988007][T11056]  ? __sys_sendmsg+0x2a0/0x2a0
[  327.992780][T11056]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  327.999036][T11056]  __se_sys_sendmsg+0x1c2/0x2b0
[  328.003882][T11056]  ? __x64_sys_sendmsg+0x80/0x80
[  328.008825][T11056]  ? lockdep_hardirqs_on+0x98/0x150
[  328.014019][T11056]  do_syscall_64+0x55/0xb0
[  328.018425][T11056]  ? clear_bhb_loop+0x40/0x90
[  328.023097][T11056]  ? clear_bhb_loop+0x40/0x90
[  328.027770][T11056]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  328.033659][T11056] RIP: 0033:0x7fdaa9d9ce59
[  328.038062][T11056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  328.057667][T11056] RSP: 002b:00007fdaaabc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  328.066075][T11056] RAX: ffffffffffffffda RBX: 00007fdaaa015fa0 RCX: 00007fdaa9d9ce59
[  328.074035][T11056] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  328.081997][T11056] RBP: 00007fdaaabc1090 R08: 0000000000000000 R09: 0000000000000000
[  328.089959][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.097920][T11056] R13: 00007fdaaa016038 R14: 00007fdaaa015fa0 R15: 00007ffdbd3be938
[  328.105896][T11056]  </TASK>
[  328.110624][T10133] wlan1: Trigger new scan to find an IBSS to join
[  328.396025][T11063] netlink: 'syz.2.1906': attribute type 29 has an invalid length.
[  328.414551][T11063] netlink: 'syz.2.1906': attribute type 29 has an invalid length.
[  328.437535][T11063] netlink: 'syz.2.1906': attribute type 29 has an invalid length.
[  328.461582][T11067] FAULT_INJECTION: forcing a failure.
[  328.461582][T11067] name failslab, interval 1, probability 0, space 0, times 0
[  328.487256][T11063] netlink: 'syz.2.1906': attribute type 29 has an invalid length.
[  328.500799][T11067] CPU: 0 PID: 11067 Comm: syz.1.1907 Not tainted syzkaller #0
[  328.508275][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  328.518322][T11067] Call Trace:
[  328.521592][T11067]  <TASK>
[  328.524516][T11067]  dump_stack_lvl+0x18c/0x250
[  328.529192][T11067]  ? show_regs_print_info+0x20/0x20
[  328.534382][T11067]  ? load_image+0x420/0x420
[  328.538892][T11067]  ? __might_sleep+0xe0/0xe0
[  328.543487][T11067]  ? __lock_acquire+0x7d40/0x7d40
[  328.548501][T11067]  ? mark_lock+0x94/0x320
[  328.552823][T11067]  should_fail_ex+0x39d/0x4d0
[  328.557498][T11067]  should_failslab+0x9/0x20
[  328.561998][T11067]  slab_pre_alloc_hook+0x59/0x310
[  328.567018][T11067]  ? __get_vm_area_node+0x125/0x370
[  328.572211][T11067]  __kmem_cache_alloc_node+0x53/0x250
[  328.577580][T11067]  ? __get_vm_area_node+0x125/0x370
[  328.582782][T11067]  kmalloc_node_trace+0x26/0xe0
[  328.587631][T11067]  __get_vm_area_node+0x125/0x370
[  328.592664][T11067]  __vmalloc_node_range+0x36e/0x1330
[  328.597947][T11067]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  328.603488][T11067]  ? mark_lock+0x94/0x320
[  328.607815][T11067]  ? __lock_acquire+0x1347/0x7d40
[  328.612832][T11067]  ? verify_lock_unused+0x140/0x140
[  328.618029][T11067]  ? free_vm_area+0x50/0x50
[  328.622523][T11067]  ? end_current_label_crit_section+0x170/0x170
[  328.628767][T11067]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  328.634303][T11067]  __vmalloc+0x7a/0x90
[  328.638364][T11067]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  328.643902][T11067]  bpf_prog_alloc_no_stats+0x47/0x440
[  328.649266][T11067]  ? bpf_prog_alloc+0x2b/0x1a0
[  328.654027][T11067]  bpf_prog_alloc+0x3d/0x1a0
[  328.658613][T11067]  bpf_prog_load+0x6eb/0x1670
[  328.663293][T11067]  ? map_freeze+0x420/0x420
[  328.667792][T11067]  ? __might_fault+0xaa/0x120
[  328.672468][T11067]  ? __lock_acquire+0x7d40/0x7d40
[  328.677493][T11067]  ? file_end_write+0x159/0x250
[  328.682348][T11067]  ? __might_fault+0xaa/0x120
[  328.687029][T11067]  ? __might_fault+0xc6/0x120
[  328.691691][T11067]  ? __might_fault+0xaa/0x120
[  328.696360][T11067]  ? bpf_lsm_bpf+0x9/0x10
[  328.700681][T11067]  ? security_bpf+0x7e/0xa0
[  328.705178][T11067]  __sys_bpf+0x5ba/0x890
[  328.709411][T11067]  ? bpf_link_show_fdinfo+0x390/0x390
[  328.714782][T11067]  ? lock_chain_count+0x20/0x20
[  328.719629][T11067]  __x64_sys_bpf+0x7c/0x90
[  328.724038][T11067]  do_syscall_64+0x55/0xb0
[  328.728441][T11067]  ? clear_bhb_loop+0x40/0x90
[  328.733107][T11067]  ? clear_bhb_loop+0x40/0x90
[  328.737775][T11067]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  328.743660][T11067] RIP: 0033:0x7f483699ce59
[  328.748064][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  328.767657][T11067] RSP: 002b:00007f48378b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  328.776063][T11067] RAX: ffffffffffffffda RBX: 00007f4836c15fa0 RCX: 00007f483699ce59
[  328.784025][T11067] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005
[  328.791989][T11067] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  328.799948][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.807910][T11067] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  328.815882][T11067]  </TASK>
[  328.819927][T11068] netlink: 'syz.2.1906': attribute type 29 has an invalid length.
[  328.845684][T11068] netlink: 'syz.2.1906': attribute type 29 has an invalid length.
[  328.874758][T11067] syz.1.1907: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  328.899009][T11067] CPU: 1 PID: 11067 Comm: syz.1.1907 Not tainted syzkaller #0
[  328.906503][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  328.916566][T11067] Call Trace:
[  328.919856][T11067]  <TASK>
[  328.922796][T11067]  dump_stack_lvl+0x18c/0x250
[  328.927494][T11067]  ? show_regs_print_info+0x20/0x20
[  328.932791][T11067]  ? load_image+0x420/0x420
[  328.937315][T11067]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  328.943748][T11067]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  328.950269][T11067]  warn_alloc+0x246/0x340
[  328.954616][T11067]  ? __get_vm_area_node+0x125/0x370
[  328.959832][T11067]  ? zone_watermark_ok_safe+0x230/0x230
[  328.965390][T11067]  ? rcu_is_watching+0x15/0xb0
[  328.970172][T11067]  ? __get_vm_area_node+0x356/0x370
[  328.975392][T11067]  __vmalloc_node_range+0x393/0x1330
[  328.980692][T11067]  ? mark_lock+0x94/0x320
[  328.985037][T11067]  ? __lock_acquire+0x1347/0x7d40
[  328.990072][T11067]  ? verify_lock_unused+0x140/0x140
[  328.995293][T11067]  ? free_vm_area+0x50/0x50
[  328.999809][T11067]  ? end_current_label_crit_section+0x170/0x170
[  329.006071][T11067]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  329.011625][T11067]  __vmalloc+0x7a/0x90
[  329.015706][T11067]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  329.021264][T11067]  bpf_prog_alloc_no_stats+0x47/0x440
[  329.026650][T11067]  ? bpf_prog_alloc+0x2b/0x1a0
[  329.031432][T11067]  bpf_prog_alloc+0x3d/0x1a0
[  329.036042][T11067]  bpf_prog_load+0x6eb/0x1670
[  329.040749][T11067]  ? map_freeze+0x420/0x420
[  329.045274][T11067]  ? __might_fault+0xaa/0x120
[  329.049973][T11067]  ? __lock_acquire+0x7d40/0x7d40
[  329.055016][T11067]  ? file_end_write+0x159/0x250
[  329.059892][T11067]  ? __might_fault+0xaa/0x120
[  329.064588][T11067]  ? __might_fault+0xc6/0x120
[  329.069276][T11067]  ? __might_fault+0xaa/0x120
[  329.073973][T11067]  ? bpf_lsm_bpf+0x9/0x10
[  329.078320][T11067]  ? security_bpf+0x7e/0xa0
[  329.082839][T11067]  __sys_bpf+0x5ba/0x890
[  329.087099][T11067]  ? bpf_link_show_fdinfo+0x390/0x390
[  329.092497][T11067]  ? lock_chain_count+0x20/0x20
[  329.097368][T11067]  __x64_sys_bpf+0x7c/0x90
[  329.101791][T11067]  do_syscall_64+0x55/0xb0
[  329.106211][T11067]  ? clear_bhb_loop+0x40/0x90
[  329.110897][T11067]  ? clear_bhb_loop+0x40/0x90
[  329.115608][T11067]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  329.121520][T11067] RIP: 0033:0x7f483699ce59
[  329.125950][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.145566][T11067] RSP: 002b:00007f48378b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  329.154002][T11067] RAX: ffffffffffffffda RBX: 00007f4836c15fa0 RCX: 00007f483699ce59
[  329.161988][T11067] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005
[  329.169974][T11067] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  329.178471][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  329.186442][T11067] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  329.194412][T11067]  </TASK>
[  329.198761][T11067] Mem-Info:
[  329.202779][T11067] active_anon:5464 inactive_anon:0 isolated_anon:0
[  329.202779][T11067]  active_file:19316 inactive_file:40045 isolated_file:0
[  329.202779][T11067]  unevictable:768 dirty:133 writeback:0
[  329.202779][T11067]  slab_reclaimable:10080 slab_unreclaimable:92948
[  329.202779][T11067]  mapped:24844 shmem:1361 pagetables:524
[  329.202779][T11067]  sec_pagetables:0 bounce:0
[  329.202779][T11067]  kernel_misc_reclaimable:0
[  329.202779][T11067]  free:1345380 free_pcp:9568 free_cma:0
[  329.288688][T11067] Node 0 active_anon:21856kB inactive_anon:0kB active_file:77264kB inactive_file:159976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99576kB dirty:528kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10604kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no
[  329.328052][T11067] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  329.359657][T11067] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  329.385621][T11081] syzkaller0: entered promiscuous mode
[  329.388639][T11067] lowmem_reserve[]: 0 2521 2522 2522 2522
[  329.399546][T11067] Node 0 DMA32 free:1465472kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22020kB inactive_anon:0kB active_file:77264kB inactive_file:159140kB unevictable:1536kB writepending:528kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:19684kB local_pcp:10292kB free_cma:0kB
[  329.433072][T11081] syzkaller0: entered allmulticast mode
[  329.438501][T11077] __nla_validate_parse: 5 callbacks suppressed
[  329.438530][T11077] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1909'.
[  329.464505][T11067] lowmem_reserve[]: 0 0 0 0 0
[  329.469402][T11067] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  329.518448][T11067] lowmem_reserve[]: 0 0 0 0 0
[  329.527754][T11067] Node 1 Normal free:3893136kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19584kB local_pcp:6912kB free_cma:0kB
[  329.580045][T11067] lowmem_reserve[]: 0 0 0 0 0
[  329.585941][T11067] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  329.599853][T11067] Node 0 DMA32: 2600*4kB (UME) 1262*8kB (UME) 1049*16kB (UME) 649*32kB (UME) 465*64kB (UME) 194*128kB (UME) 111*256kB (UME) 38*512kB (M) 12*1024kB (ME) 10*2048kB (UM) 310*4096kB (M) = 1463040kB
[  329.619923][T11067] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  329.631989][T11067] Node 1 Normal: 226*4kB (UME) 61*8kB (UME) 44*16kB (UME) 85*32kB (UME) 23*64kB (UME) 10*128kB (UME) 2*256kB (UM) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3893136kB
[  329.651086][T11067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  329.664980][T11067] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  329.695416][T11067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  329.712645][T11067] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  329.722158][T11067] 60722 total pagecache pages
[  329.727363][T11067] 0 pages in swap cache
[  329.731627][T11067] Free swap  = 124996kB
[  329.738305][T11067] Total swap = 124996kB
[  329.743026][T11067] 2097051 pages RAM
[  329.746998][T11067] 0 pages HighMem/MovableOnly
[  329.751765][T11067] 416929 pages reserved
[  329.756575][T11067] 0 pages cma reserved
[  330.897043][T10133] wlan1: Trigger new scan to find an IBSS to join
[  331.039081][T11085] netlink: 'syz.0.1911': attribute type 10 has an invalid length.
[  331.052530][T11089] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1911'.
[  331.316718][T11099] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  331.355319][T11099] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1916'.
[  331.427057][T11102] netlink: 'syz.0.1917': attribute type 19 has an invalid length.
[  331.436021][T11102] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.1917'.
[  331.912148][T11117] syzkaller0: entered promiscuous mode
[  331.917862][T11117] syzkaller0: entered allmulticast mode
[  331.946673][T11115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1922'.
[  331.970619][T11108] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1920'.
[  332.975590][ T1326] wlan1: Trigger new scan to find an IBSS to join
[  333.037594][   T12] wlan1: Creating new IBSS network, BSSID d6:cf:a3:64:d1:c6
[  333.704631][T11122] validate_nla: 3 callbacks suppressed
[  333.704641][T11122] netlink: 'syz.0.1924': attribute type 29 has an invalid length.
[  333.718811][T11126] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  333.729497][T11130] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1926'.
[  333.738939][T11135] netlink: 'syz.1.1928': attribute type 19 has an invalid length.
[  333.763674][T11135] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1928'.
[  333.869535][T11139] FAULT_INJECTION: forcing a failure.
[  333.869535][T11139] name failslab, interval 1, probability 0, space 0, times 0
[  333.882337][T11139] CPU: 1 PID: 11139 Comm: syz.3.1930 Not tainted syzkaller #0
[  333.889814][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  333.899877][T11139] Call Trace:
[  333.903157][T11139]  <TASK>
[  333.906089][T11139]  dump_stack_lvl+0x18c/0x250
[  333.910781][T11139]  ? show_regs_print_info+0x20/0x20
[  333.915985][T11139]  ? load_image+0x420/0x420
[  333.920496][T11139]  ? __might_sleep+0xe0/0xe0
[  333.925093][T11139]  ? __lock_acquire+0x7d40/0x7d40
[  333.930129][T11139]  should_fail_ex+0x39d/0x4d0
[  333.934817][T11139]  should_failslab+0x9/0x20
[  333.939323][T11139]  slab_pre_alloc_hook+0x59/0x310
[  333.944356][T11139]  ? __lock_acquire+0x7d40/0x7d40
[  333.949382][T11139]  ? dev_ethtool+0x129/0x18d0
[  333.954062][T11139]  __kmem_cache_alloc_node+0x53/0x250
[  333.959440][T11139]  ? __might_fault+0xaa/0x120
[  333.964121][T11139]  ? dev_ethtool+0x129/0x18d0
[  333.968800][T11139]  kmalloc_trace+0x2a/0xe0
[  333.973228][T11139]  dev_ethtool+0x129/0x18d0
[  333.977743][T11139]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  333.983988][T11139]  ? __lock_acquire+0x7d40/0x7d40
[  333.989015][T11139]  ? __might_fault+0xaa/0x120
[  333.993698][T11139]  ? full_name_hash+0x92/0xe0
[  333.998389][T11139]  ? dev_load+0x21/0x1f0
[  334.002641][T11139]  dev_ioctl+0x392/0x1140
[  334.006979][T11139]  sock_do_ioctl+0x239/0x310
[  334.011577][T11139]  ? sock_show_fdinfo+0xb0/0xb0
[  334.016446][T11139]  sock_ioctl+0x5ba/0x7e0
[  334.020784][T11139]  ? sock_poll+0x3e0/0x3e0
[  334.025217][T11139]  ? bpf_lsm_file_ioctl+0x9/0x10
[  334.030160][T11139]  ? security_file_ioctl+0x80/0xa0
[  334.035274][T11139]  ? sock_poll+0x3e0/0x3e0
[  334.039688][T11139]  __se_sys_ioctl+0xfd/0x170
[  334.044285][T11139]  do_syscall_64+0x55/0xb0
[  334.048701][T11139]  ? clear_bhb_loop+0x40/0x90
[  334.053379][T11139]  ? clear_bhb_loop+0x40/0x90
[  334.058063][T11139]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  334.063957][T11139] RIP: 0033:0x7f8bffb9ce59
[  334.068376][T11139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.087981][T11139] RSP: 002b:00007f8c00ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  334.096401][T11139] RAX: ffffffffffffffda RBX: 00007f8bffe15fa0 RCX: 00007f8bffb9ce59
[  334.104379][T11139] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000008
[  334.112349][T11139] RBP: 00007f8c00ac5090 R08: 0000000000000000 R09: 0000000000000000
[  334.120318][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.128287][T11139] R13: 00007f8bffe16038 R14: 00007f8bffe15fa0 R15: 00007ffd2c4041e8
[  334.136272][T11139]  </TASK>
[  334.171297][T11142] netlink: 'syz.1.1932': attribute type 29 has an invalid length.
[  334.182687][T11142] netlink: 'syz.1.1932': attribute type 29 has an invalid length.
[  334.193880][T11142] netlink: 'syz.1.1932': attribute type 29 has an invalid length.
[  334.202648][T11142] netlink: 'syz.1.1932': attribute type 29 has an invalid length.
[  334.213945][T11142] netlink: 'syz.1.1932': attribute type 29 has an invalid length.
[  334.633325][T11148] netlink: 'syz.1.1934': attribute type 10 has an invalid length.
[  334.687447][T11148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1934'.
[  334.792299][T11146] netlink: 'syz.3.1933': attribute type 3 has an invalid length.
[  334.817903][T11146] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1933'.
[  334.977035][T11161] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  335.043644][T11161] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1938'.
[  335.249969][T11166] syzkaller0: entered promiscuous mode
[  335.258058][T11166] syzkaller0: entered allmulticast mode
[  335.283835][T11169] FAULT_INJECTION: forcing a failure.
[  335.283835][T11169] name failslab, interval 1, probability 0, space 0, times 0
[  335.301106][T11169] CPU: 1 PID: 11169 Comm: syz.0.1940 Not tainted syzkaller #0
[  335.308590][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  335.318647][T11169] Call Trace:
[  335.321910][T11169]  <TASK>
[  335.324829][T11169]  dump_stack_lvl+0x18c/0x250
[  335.329499][T11169]  ? show_regs_print_info+0x20/0x20
[  335.334685][T11169]  ? load_image+0x420/0x420
[  335.339180][T11169]  ? __might_sleep+0xe0/0xe0
[  335.343762][T11169]  ? __lock_acquire+0x7d40/0x7d40
[  335.348786][T11169]  should_fail_ex+0x39d/0x4d0
[  335.353459][T11169]  should_failslab+0x9/0x20
[  335.357956][T11169]  slab_pre_alloc_hook+0x59/0x310
[  335.362976][T11169]  ? ioctl_standard_iw_point+0x51a/0xcf0
[  335.368599][T11169]  ? ioctl_standard_iw_point+0x51a/0xcf0
[  335.374216][T11169]  __kmem_cache_alloc_node+0x53/0x250
[  335.379578][T11169]  ? __mutex_lock+0x94c/0xcc0
[  335.384246][T11169]  ? ioctl_standard_iw_point+0x51a/0xcf0
[  335.389863][T11169]  __kmalloc+0xa4/0x230
[  335.394016][T11169]  ioctl_standard_iw_point+0x51a/0xcf0
[  335.399469][T11169]  ? cfg80211_wext_giwmode+0x130/0x130
[  335.404929][T11169]  ? iw_handler_get_iwstats+0x110/0x110
[  335.410469][T11169]  ? wext_ioctl_dispatch+0x115/0x600
[  335.415748][T11169]  ? mutex_lock_nested+0x20/0x20
[  335.420676][T11169]  ? cfg80211_wext_giwmode+0x130/0x130
[  335.426123][T11169]  ioctl_standard_call+0xb7/0x2b0
[  335.431141][T11169]  ? cfg80211_wext_giwmode+0x130/0x130
[  335.436595][T11169]  wext_ioctl_dispatch+0x1cb/0x600
[  335.441703][T11169]  ? wext_ioctl_dispatch+0x600/0x600
[  335.446990][T11169]  ? iw_handler_get_private+0x1f0/0x1f0
[  335.452544][T11169]  ? wext_handle_ioctl+0x1d0/0x1d0
[  335.457662][T11169]  ? __might_fault+0xaa/0x120
[  335.462331][T11169]  ? __might_fault+0xc6/0x120
[  335.466997][T11169]  ? __might_fault+0xaa/0x120
[  335.471661][T11169]  wext_handle_ioctl+0x117/0x1d0
[  335.476608][T11169]  ? call_commit_handler+0xf0/0xf0
[  335.481737][T11169]  sock_ioctl+0x15d/0x7e0
[  335.486068][T11169]  ? sock_poll+0x3e0/0x3e0
[  335.490475][T11169]  ? bpf_lsm_file_ioctl+0x9/0x10
[  335.495400][T11169]  ? security_file_ioctl+0x80/0xa0
[  335.500517][T11169]  ? sock_poll+0x3e0/0x3e0
[  335.504927][T11169]  __se_sys_ioctl+0xfd/0x170
[  335.509509][T11169]  do_syscall_64+0x55/0xb0
[  335.513910][T11169]  ? clear_bhb_loop+0x40/0x90
[  335.518577][T11169]  ? clear_bhb_loop+0x40/0x90
[  335.523253][T11169]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  335.529165][T11169] RIP: 0033:0x7fdaa9d9ce59
[  335.533593][T11169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.553203][T11169] RSP: 002b:00007fdaaabc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  335.561646][T11169] RAX: ffffffffffffffda RBX: 00007fdaaa015fa0 RCX: 00007fdaa9d9ce59
[  335.569605][T11169] RDX: 0000200000000000 RSI: 0000000000008b0b RDI: 0000000000000003
[  335.577563][T11169] RBP: 00007fdaaabc1090 R08: 0000000000000000 R09: 0000000000000000
[  335.585522][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.593478][T11169] R13: 00007fdaaa016038 R14: 00007fdaaa015fa0 R15: 00007ffdbd3be938
[  335.601456][T11169]  </TASK>
[  335.614809][T11171] netlink: 'syz.2.1941': attribute type 19 has an invalid length.
[  335.636574][T11171] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.1941'.
[  335.936764][ T1326] wlan1: Trigger new scan to find an IBSS to join
[  337.246188][T11186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1946'.
[  337.634686][T11196] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  337.980521][T11196] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1950'.
[  338.270115][T11211] : renamed from bond_slave_0 (while UP)
[  338.278169][T11208] FAULT_INJECTION: forcing a failure.
[  338.278169][T11208] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  338.301443][T11208] CPU: 0 PID: 11208 Comm: syz.3.1955 Not tainted syzkaller #0
[  338.308931][T11208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  338.318997][T11208] Call Trace:
[  338.322281][T11208]  <TASK>
[  338.325221][T11208]  dump_stack_lvl+0x18c/0x250
[  338.329918][T11208]  ? show_regs_print_info+0x20/0x20
[  338.335132][T11208]  ? load_image+0x420/0x420
[  338.339660][T11208]  ? __might_fault+0xaa/0x120
[  338.344357][T11208]  ? __lock_acquire+0x7d40/0x7d40
[  338.349391][T11208]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  338.355646][T11208]  should_fail_ex+0x39d/0x4d0
[  338.360342][T11208]  _copy_from_user+0x2f/0xe0
[  338.364935][T11208]  __sys_bpf+0x23e/0x890
[  338.369171][T11208]  ? bpf_link_show_fdinfo+0x390/0x390
[  338.374544][T11208]  ? lock_chain_count+0x20/0x20
[  338.379391][T11208]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  338.385367][T11208]  __x64_sys_bpf+0x7c/0x90
[  338.389783][T11208]  do_syscall_64+0x55/0xb0
[  338.394189][T11208]  ? clear_bhb_loop+0x40/0x90
[  338.398860][T11208]  ? clear_bhb_loop+0x40/0x90
[  338.403543][T11208]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.409429][T11208] RIP: 0033:0x7f8bffb9ce59
[  338.413835][T11208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.433439][T11208] RSP: 002b:00007f8c00ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  338.441854][T11208] RAX: ffffffffffffffda RBX: 00007f8bffe15fa0 RCX: 00007f8bffb9ce59
[  338.449826][T11208] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  338.457791][T11208] RBP: 00007f8c00ac5090 R08: 0000000000000000 R09: 0000000000000000
[  338.465750][T11208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.473713][T11208] R13: 00007f8bffe16038 R14: 00007f8bffe15fa0 R15: 00007ffd2c4041e8
[  338.481683][T11208]  </TASK>
[  338.635424][T11213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1957'.
[  338.702134][T11219] syzkaller0: entered promiscuous mode
[  338.718816][T11219] syzkaller0: entered allmulticast mode
[  338.826427][T11222] Dead loop on virtual device ip6_vti0, fix it urgently!
[  338.834043][T11227] validate_nla: 4 callbacks suppressed
[  338.834054][T11227] netlink: 'syz.2.1962': attribute type 8 has an invalid length.
[  338.867649][T11227] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1962'.
[  338.868931][T11230] netlink: 'syz.2.1962': attribute type 8 has an invalid length.
[  338.892700][T11230] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1962'.
[  339.123050][T11236] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1966'.
[  340.515215][T11232] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  340.524476][T11239] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1964'.
[  340.769237][T11244] netlink: 151496 bytes leftover after parsing attributes in process `syz.2.1968'.
[  341.038115][T11263] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  341.077671][T11267] netlink: 'syz.2.1978': attribute type 10 has an invalid length.
[  341.093115][T11263] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1977'.
[  341.143459][T11265] syzkaller0: entered promiscuous mode
[  341.148930][T11265] syzkaller0: entered allmulticast mode
[  342.845723][T11267] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1978'.
[  342.857059][T11288] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  342.886735][T11289] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1988'.
[  342.981200][T11294] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1990'.
[  343.319664][T11313] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1995'.
[  343.783440][T11325] FAULT_INJECTION: forcing a failure.
[  343.783440][T11325] name failslab, interval 1, probability 0, space 0, times 0
[  343.807847][T11325] CPU: 0 PID: 11325 Comm: syz.1.2001 Not tainted syzkaller #0
[  343.815349][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  343.825422][T11325] Call Trace:
[  343.828715][T11325]  <TASK>
[  343.831665][T11325]  dump_stack_lvl+0x18c/0x250
[  343.836364][T11325]  ? show_regs_print_info+0x20/0x20
[  343.841582][T11325]  ? load_image+0x420/0x420
[  343.843628][T11322] syzkaller0: entered promiscuous mode
[  343.846090][T11325]  ? __might_sleep+0xe0/0xe0
[  343.851651][T11322] syzkaller0: entered allmulticast mode
[  343.856105][T11325]  ? __lock_acquire+0x7d40/0x7d40
[  343.856135][T11325]  should_fail_ex+0x39d/0x4d0
[  343.856167][T11325]  should_failslab+0x9/0x20
[  343.874229][T11323] netlink: 'syz.3.2000': attribute type 10 has an invalid length.
[  343.875850][T11325]  slab_pre_alloc_hook+0x59/0x310
[  343.875885][T11325]  ? tomoyo_encode+0x28b/0x540
[  343.875905][T11325]  ? tomoyo_encode+0x28b/0x540
[  343.875922][T11325]  __kmem_cache_alloc_node+0x53/0x250
[  343.875952][T11325]  ? tomoyo_encode+0x28b/0x540
[  343.875970][T11325]  __kmalloc+0xa4/0x230
[  343.875998][T11325]  tomoyo_encode+0x28b/0x540
[  343.888387][T11323] team0: Device hsr_slave_0 failed to register rx_handler
[  343.888797][T11325]  tomoyo_realpath_from_path+0x592/0x5d0
[  343.888839][T11325]  tomoyo_path_number_perm+0x248/0x620
[  343.888867][T11325]  ? tomoyo_path_number_perm+0x217/0x620
[  343.888893][T11325]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  343.888921][T11325]  ? ksys_write+0x1c4/0x260
[  343.950994][T11325]  ? __fget_files+0x28/0x4b0
[  343.955583][T11325]  ? __fget_files+0x28/0x4b0
[  343.960178][T11325]  security_file_ioctl+0x70/0xa0
[  343.965113][T11325]  __se_sys_ioctl+0x48/0x170
[  343.969702][T11325]  do_syscall_64+0x55/0xb0
[  343.974107][T11325]  ? clear_bhb_loop+0x40/0x90
[  343.978777][T11325]  ? clear_bhb_loop+0x40/0x90
[  343.983446][T11325]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  343.989334][T11325] RIP: 0033:0x7f483699ce59
[  343.993742][T11325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.013336][T11325] RSP: 002b:00007f48378b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  344.021741][T11325] RAX: ffffffffffffffda RBX: 00007f4836c15fa0 RCX: 00007f483699ce59
[  344.029704][T11325] RDX: 0000000000000000 RSI: 0000000000008918 RDI: 0000000000000003
[  344.037667][T11325] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  344.045626][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.053586][T11325] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  344.061557][T11325]  </TASK>
[  344.088235][T11325] ERROR: Out of memory at tomoyo_realpath_from_path.
[  344.193260][T11331] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2003'.
[  344.902919][T10137] wlan1: Trigger new scan to find an IBSS to join
[  345.497530][T11323] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2000'.
[  345.511447][T11333] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  345.532498][T11334] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2004'.
[  346.168984][T11363] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  346.207916][T11361] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  346.225022][T11363] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2014'.
[  346.300155][T11361] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2012'.
[  346.359546][T11367] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2016'.
[  346.425998][T11365] syzkaller0: entered promiscuous mode
[  346.431534][T11365] syzkaller0: entered allmulticast mode
[  348.317062][T11402] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2027'.
[  348.725968][T11411] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  348.779486][T11415] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  348.816479][T11411] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2029'.
[  348.893281][   T49] wlan1: Trigger new scan to find an IBSS to join
[  348.934814][T11415] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2032'.
[  349.128148][T11422] syzkaller0: entered promiscuous mode
[  349.134618][T11422] syzkaller0: entered allmulticast mode
[  349.142240][T11420] netlink: 'syz.3.2033': attribute type 10 has an invalid length.
[  350.501284][T11420] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2033'.
[  350.512619][T11431] netlink: 'syz.1.2037': attribute type 10 has an invalid length.
[  350.524973][T11431] team0: Device hsr_slave_0 failed to register rx_handler
[  350.570959][T11432] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2037'.
[  350.641975][T11437] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2040'.
[  351.214781][T11461] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  351.287719][T11461] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2046'.
[  351.545866][T11465] netlink: 'syz.3.2048': attribute type 10 has an invalid length.
[  351.576146][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2048'.
[  351.863740][T11478] netlink: 'syz.1.2056': attribute type 10 has an invalid length.
[  351.881299][T11478] team0: Device hsr_slave_0 failed to register rx_handler
[  351.933475][T10135] wlan1: Trigger new scan to find an IBSS to join
[  352.342041][T11478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2056'.
[  352.387157][T11494] FAULT_INJECTION: forcing a failure.
[  352.387157][T11494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.400594][T11494] CPU: 0 PID: 11494 Comm: syz.0.2059 Not tainted syzkaller #0
[  352.408083][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  352.418153][T11494] Call Trace:
[  352.421443][T11494]  <TASK>
[  352.424383][T11494]  dump_stack_lvl+0x18c/0x250
[  352.429084][T11494]  ? show_regs_print_info+0x20/0x20
[  352.434302][T11494]  ? load_image+0x420/0x420
[  352.438822][T11494]  ? __might_fault+0xaa/0x120
[  352.443518][T11494]  ? __lock_acquire+0x7d40/0x7d40
[  352.448566][T11494]  should_fail_ex+0x39d/0x4d0
[  352.453278][T11494]  _copy_from_user+0x2f/0xe0
[  352.457882][T11494]  ___sys_sendmsg+0x1c7/0x360
[  352.462553][T11494]  ? get_pid_task+0x20/0x1e0
[  352.467141][T11494]  ? __sys_sendmsg+0x2a0/0x2a0
[  352.471922][T11494]  ? __lock_acquire+0x7d40/0x7d40
[  352.476960][T11494]  __se_sys_sendmsg+0x1c2/0x2b0
[  352.481803][T11494]  ? __x64_sys_sendmsg+0x80/0x80
[  352.486739][T11494]  ? lockdep_hardirqs_on+0x98/0x150
[  352.491934][T11494]  do_syscall_64+0x55/0xb0
[  352.496341][T11494]  ? clear_bhb_loop+0x40/0x90
[  352.501021][T11494]  ? clear_bhb_loop+0x40/0x90
[  352.505704][T11494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  352.511589][T11494] RIP: 0033:0x7fdaa9d9ce59
[  352.515998][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.535599][T11494] RSP: 002b:00007fdaaabc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.544004][T11494] RAX: ffffffffffffffda RBX: 00007fdaaa015fa0 RCX: 00007fdaa9d9ce59
[  352.551973][T11494] RDX: 0000000000040890 RSI: 0000200000000140 RDI: 0000000000000003
[  352.559940][T11494] RBP: 00007fdaaabc1090 R08: 0000000000000000 R09: 0000000000000000
[  352.567900][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.575860][T11494] R13: 00007fdaaa016038 R14: 00007fdaaa015fa0 R15: 00007ffdbd3be938
[  352.583830][T11494]  </TASK>
[  352.845784][T11501] netlink: 'syz.0.2062': attribute type 10 has an invalid length.
[  352.864400][T11501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2062'.
[  353.074098][T11512] FAULT_INJECTION: forcing a failure.
[  353.074098][T11512] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.111491][T11512] CPU: 1 PID: 11512 Comm: syz.1.2067 Not tainted syzkaller #0
[  353.118999][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  353.129069][T11512] Call Trace:
[  353.132355][T11512]  <TASK>
[  353.135296][T11512]  dump_stack_lvl+0x18c/0x250
[  353.139991][T11512]  ? show_regs_print_info+0x20/0x20
[  353.145199][T11512]  ? load_image+0x420/0x420
[  353.149703][T11512]  ? __might_fault+0xaa/0x120
[  353.154373][T11512]  ? __lock_acquire+0x7d40/0x7d40
[  353.159391][T11512]  should_fail_ex+0x39d/0x4d0
[  353.164070][T11512]  _copy_to_user+0x2f/0xa0
[  353.168481][T11512]  bond_siocdevprivate+0x2cd/0x390
[  353.173590][T11512]  ? dev_load+0x21/0x1f0
[  353.177829][T11512]  ? bond_do_ioctl+0x9b0/0x9b0
[  353.182587][T11512]  ? mutex_lock_nested+0x20/0x20
[  353.187523][T11512]  ? dev_ifsioc+0x958/0xc40
[  353.192022][T11512]  dev_ioctl+0x84c/0x1140
[  353.196348][T11512]  sock_ioctl+0x74c/0x7e0
[  353.200671][T11512]  ? sock_poll+0x3e0/0x3e0
[  353.205085][T11512]  ? bpf_lsm_file_ioctl+0x9/0x10
[  353.210013][T11512]  ? security_file_ioctl+0x80/0xa0
[  353.215116][T11512]  ? sock_poll+0x3e0/0x3e0
[  353.219522][T11512]  __se_sys_ioctl+0xfd/0x170
[  353.224112][T11512]  do_syscall_64+0x55/0xb0
[  353.228515][T11512]  ? clear_bhb_loop+0x40/0x90
[  353.233190][T11512]  ? clear_bhb_loop+0x40/0x90
[  353.237862][T11512]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  353.243750][T11512] RIP: 0033:0x7f483699ce59
[  353.248157][T11512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.267754][T11512] RSP: 002b:00007f48378b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  353.276159][T11512] RAX: ffffffffffffffda RBX: 00007f4836c15fa0 RCX: 00007f483699ce59
[  353.284122][T11512] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000003
[  353.292079][T11512] RBP: 00007f48378b3090 R08: 0000000000000000 R09: 0000000000000000
[  353.300039][T11512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.307997][T11512] R13: 00007f4836c16038 R14: 00007f4836c15fa0 R15: 00007ffed8a9b858
[  353.315970][T11512]  </TASK>
[  353.366577][   T49] wlan1: Creating new IBSS network, BSSID 56:46:fb:c1:75:3f
[  353.384232][T11510] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  353.405308][ T1326] ------------[ cut here ]------------
[  353.411065][ T1326] WARNING: CPU: 1 PID: 1326 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440
[  353.421047][ T1326] Modules linked in:
[  353.425013][ T1326] CPU: 1 PID: 1326 Comm: kworker/u4:8 Not tainted syzkaller #0
[  353.432674][ T1326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  353.442780][ T1326] Workqueue: cfg80211 cfg80211_event_work
[  353.448542][ T1326] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440
[  353.455043][ T1326] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 30 a0 f7 0f 0b eb bb e8 5e 30 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 50 30 a0 f7 0f 0b e9 e0 fd ff ff e8
[  353.474731][ T1326] RSP: 0018:ffffc900052f7a20 EFLAGS: 00010293
[  353.480822][ T1326] RAX: ffffffff89e6f742 RBX: dffffc0000000000 RCX: ffff8880250b8000
[  353.489214][ T1326] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9860
[  353.497290][ T1326] RBP: ffffc900052f7af8 R08: ffffffff911c756f R09: 1ffffffff2238ead
[  353.505830][ T1326] R10: dffffc0000000000 R11: fffffbfff2238eae R12: ffff88805da90c90
[  353.513856][ T1326] R13: 1ffff92000a5ef4c R14: ffff88805da3b5b8 R15: 000000000000001f
[  353.521847][ T1326] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  353.530845][ T1326] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  353.537517][ T1326] CR2: 00007f2ac1b48fe8 CR3: 000000002c506000 CR4: 00000000003506e0
[  353.545540][ T1326] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  353.553812][ T1326] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  353.561805][ T1326] Call Trace:
[  353.565416][ T1326]  <TASK>
[  353.568370][ T1326]  ? mutex_lock_nested+0x20/0x20
[  353.573769][ T1326]  ? trace_rdev_return_void+0x1c0/0x1c0
[  353.579358][ T1326]  cfg80211_process_wdev_events+0x3bc/0x550
[  353.585476][ T1326]  cfg80211_process_rdev_events+0xa1/0x110
[  353.591291][ T1326]  cfg80211_event_work+0x2f/0x40
[  353.596524][ T1326]  ? process_scheduled_works+0x96f/0x15d0
[  353.602265][ T1326]  process_scheduled_works+0xa5d/0x15d0
[  353.608121][ T1326]  ? worker_attach_to_pool+0x380/0x380
[  353.614010][ T1326]  ? assign_work+0x3d2/0x5d0
[  353.618639][ T1326]  worker_thread+0xa55/0xfc0
[  353.623560][ T1326]  kthread+0x2fa/0x390
[  353.627658][ T1326]  ? pr_cont_work+0x560/0x560
[  353.632415][ T1326]  ? kthread_blkcg+0xd0/0xd0
[  353.637033][ T1326]  ret_from_fork+0x48/0x80
[  353.641472][ T1326]  ? kthread_blkcg+0xd0/0xd0
[  353.646144][ T1326]  ret_from_fork_asm+0x11/0x20
[  353.650953][ T1326]  </TASK>
[  353.654299][ T1326] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  353.661580][ T1326] CPU: 1 PID: 1326 Comm: kworker/u4:8 Not tainted syzkaller #0
[  353.669117][ T1326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  353.679161][ T1326] Workqueue: cfg80211 cfg80211_event_work
[  353.684878][ T1326] Call Trace:
[  353.688143][ T1326]  <TASK>
[  353.691065][ T1326]  dump_stack_lvl+0x18c/0x250
[  353.695738][ T1326]  ? show_regs_print_info+0x20/0x20
[  353.700924][ T1326]  ? load_image+0x420/0x420
[  353.705432][ T1326]  panic+0x2dc/0x730
[  353.709323][ T1326]  ? bpf_jit_dump+0xd0/0xd0
[  353.713830][ T1326]  ? ret_from_fork_asm+0x11/0x20
[  353.718766][ T1326]  __warn+0x2e0/0x470
[  353.722738][ T1326]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  353.728277][ T1326]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  353.733813][ T1326]  report_bug+0x2be/0x4f0
[  353.738132][ T1326]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  353.743671][ T1326]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  353.749206][ T1326]  ? __cfg80211_ibss_joined+0x3d4/0x440
[  353.754742][ T1326]  handle_bug+0xcf/0x120
[  353.758977][ T1326]  exc_invalid_op+0x1a/0x50
[  353.763470][ T1326]  asm_exc_invalid_op+0x1a/0x20
[  353.768312][ T1326] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440
[  353.774457][ T1326] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 30 a0 f7 0f 0b eb bb e8 5e 30 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 50 30 a0 f7 0f 0b e9 e0 fd ff ff e8
[  353.794049][ T1326] RSP: 0018:ffffc900052f7a20 EFLAGS: 00010293
[  353.800104][ T1326] RAX: ffffffff89e6f742 RBX: dffffc0000000000 RCX: ffff8880250b8000
[  353.808065][ T1326] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9860
[  353.816035][ T1326] RBP: ffffc900052f7af8 R08: ffffffff911c756f R09: 1ffffffff2238ead
[  353.823995][ T1326] R10: dffffc0000000000 R11: fffffbfff2238eae R12: ffff88805da90c90
[  353.831953][ T1326] R13: 1ffff92000a5ef4c R14: ffff88805da3b5b8 R15: 000000000000001f
[  353.839922][ T1326]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  353.845469][ T1326]  ? mutex_lock_nested+0x20/0x20
[  353.850398][ T1326]  ? trace_rdev_return_void+0x1c0/0x1c0
[  353.855945][ T1326]  cfg80211_process_wdev_events+0x3bc/0x550
[  353.861840][ T1326]  cfg80211_process_rdev_events+0xa1/0x110
[  353.867639][ T1326]  cfg80211_event_work+0x2f/0x40
[  353.872567][ T1326]  ? process_scheduled_works+0x96f/0x15d0
[  353.878277][ T1326]  process_scheduled_works+0xa5d/0x15d0
[  353.883835][ T1326]  ? worker_attach_to_pool+0x380/0x380
[  353.889288][ T1326]  ? assign_work+0x3d2/0x5d0
[  353.893873][ T1326]  worker_thread+0xa55/0xfc0
[  353.898478][ T1326]  kthread+0x2fa/0x390
[  353.902537][ T1326]  ? pr_cont_work+0x560/0x560
[  353.907206][ T1326]  ? kthread_blkcg+0xd0/0xd0
[  353.911788][ T1326]  ret_from_fork+0x48/0x80
[  353.916195][ T1326]  ? kthread_blkcg+0xd0/0xd0
[  353.920776][ T1326]  ret_from_fork_asm+0x11/0x20
[  353.925545][ T1326]  </TASK>
[  353.928887][ T1326] Kernel Offset: disabled
[  353.933259][ T1326] Rebooting in 86400 seconds..